Privacy Policy

Privacy Policy (for EU and UK residents)

NTP Carmost Inc. and NTP Group (*) (collectively, “we”, “us” or “ours”) are committed to ensuring compliance with data protection and privacy laws, including the EU and UK General Data Protection Regulation.

(*) NTP Group: NTP Holdings, NTP Nagoya Toyopet, NTP Toyota Shinshu, Toyota Rental & Leasing Nagoya, Toyota Home Nagoya, Toyota Home Shinshu, Jms Nagoya, NTP Import HD, NTP-VG, NTP-VC, NTP-PC, NTP-AC, NTP Carmost, NTP Seventh, NTP System

This policy sets out how we collect and process your personal data. This policy only applies to our processing of your personal data if you are located in the EU (including the European Economic Area, hereinafter the same shall apply) or the UK. To the extent of any conflict between this policy and any of our other terms or policies, the provisions of this policy shall prevail.

1. Identity of the Data Controllers

NTP Carmost Inc. located 2-22 Oto-cho, Atsuta-ku, Nagoya City, Aichi 456-0017, JAPAN, will collect and process your personal data as a data controller.

NTP Group (as detailed in the list of NTP group companies) will collect and process your personal data as data controllers.

2. Personal Data Collected by Us

1. Information that you provide to us: This includes information about you that you give us by filling in forms or by communicating with us, whether face-to-face, by phone, e-mail or otherwise. This information may include:
• Account registration data, including email address, telephone number, password, name (first name and last name), gender, customer type, company name, country of residence, how the user learned about our services, secret question, secret answer;
• Payment data, including bank account details, bank name and branch, SWIFT/BIC code, account holder name, payment reference, remittance information;
• Transaction data, including name of vehicle purchased, VIN number, purchase price, purchase date and shipping details;
• Customer support data, contact information, communication logs, feedback and reviews;
• Marketing data, including subscription preference, marketing campaign interactions and promotional offers.
2. Information we collect or generate about you: This includes data from and about you which is collected or generated through automated technologies or interactions, such as cookies and similar technologies. This information includes:
   • Technical data, including device information, log-in information, cookies and anonymous IDs, location information, IP addresses and unique identification information.

   For more details concerning cookies, please refer to our Cookie Policy. You can also refuse to provide your personal data to us. However, if you do not provide your data, we may not be able to provide you with our products and services. This refusal can also have an effect on your use of our websites.

3. Information we obtain from other sources: We collect your personal data from third-party service providers, agencies or other publicly available sources where applicable..

3. Purposes and Legal Basis for Processing

Our purposes and legal basis for processing your personal data are as follows:

4. Sharing of Your Personal Data with Third Parties

Although your personal data is intended for us, it may be shared with third parties in certain circumstances, as set forth below:

• NTP Group affiliates: We may share your personal data among NTP Group affiliates in order to administer our services, provide you with customer support, process payments, understand your preferences, send you information about our services that may be of interest to you, and conduct the other activities described in this policy.
• Service providers / Professional advisors: We engage other companies, agents and contractors to perform services on our behalf or to assist us with providing our services to you. We may share your personal data with the following categories of service providers and professional advisors:
• infrastructure and IT service providers;
• marketing, advertising and communications agencies;
• credit reference agencies and payment service providers; and
• accounting auditors and various advisers.
• Third parties permitted by law: In certain circumstances, we may be required to disclose or share your personal data in order to comply with a legal or regulatory obligation (for example, we may be required to disclose personal data to the police, regulators, government agencies or to judicial or administrative authorities).
  
  We may also disclose your personal data to third parties in cases where disclosure is both legally permissible and necessary to protect or defend our rights, for matters of national security, for law enforcement, to enforce our contracts or to protect your rights or those of the public.
  
  
• Third parties connected with business transfers: We may transfer your personal data to third parties in connection with a reorganization, restructuring, merger, acquisition or transfer of assets, provided that the receiving party agrees to treat your personal data in a manner consistent with this policy.

5. Transfer of Personal Data Outside Your Country

Your personal data may be transferred to and processed outside of the country in which you are located, including, without limitation, to the US and Japan.

Most countries to which we transfer personal data are deemed to have the equivalent level of data protection as the EU and/or UK. However, some countries may have different data protection standards from those which apply in the EU and/or UK. In that case, we will take all steps that are reasonably necessary to ensure that your personal data is treated securely and in accordance with this policy, as well as applicable data protection laws, by entering into standard contractual clauses (or equivalent measures) with the relevant party outside the EU and/or UK.

Please contact us via our inquiry form or by post to our address described above if you want further information on the specific mechanism we use when transferring your personal data out of the EU and/or the UK.

6. Protection of Your Personal data

We act in strict compliance with the rules for the handling of personal data, according to its sensitivity, as well as to implement technical and organizational security measures to protect the personal data in our possession from unauthorized access, disclosure, alteration or destruction. Such measures include administrative, technical and physical safeguards, such as limiting access to personal data only to employees and authorized service providers who need to know such information for the purposes described in this policy.

7. Protection of Your Personal data

You have the following rights in accordance with applicable laws and regulations:

• Access. You have the right to obtain confirmation from us as to whether or not personal data concerning you is being processed, and, where that is the case, to request access to the personal data. You have the right to obtain a copy of the personal data undergoing processing.
• Rectification. You have the right to have any incomplete or inaccurate personal data that we process about you rectified.
• Erasure. You have the right to request that we delete personal data that we process about you; provided that we are not obliged to do so if we need to retain such data in order to comply with a legal obligation or to establish, exercise or defend legal claims.
• Restriction. You have the right to restrict our processing of your personal data in cases where you believe that such data is inaccurate, that our processing is unlawful, or that we no longer need to process such data for a particular purpose, unless we are not able to delete the data due to a legal or other obligation or because you do not wish for us to delete it.
• Portability. You have the right to obtain the personal data which we hold about you, in a structured, electronic format, and to transmit such data to another data controller, where this is (i) personal data which you have provided to us, and (ii) if we are processing that personal data on the basis of your consent or to perform a contract with you.
• Objection. Where the legal justification for our processing of your personal data is our legitimate interests, you have the right to object to such processing on grounds relating to your particular situation. We will abide by your request unless we have compelling legitimate grounds for the processing which override your interests and rights, or if we need to continue to process the data for the establishment, exercise or defence of a legal claim.
• Withdrawing Consent. If you have consented to our processing of your personal data, you have the right to withdraw your consent at any time, free of charge. This includes where you wish to opt out from receiving marketing messages.

You also have the right to lodge a complaint with the local personal data protection regulatory authority in accordance with applicable laws if you believe that we have not complied with applicable personal data protection laws.

Where you wish to exercise any of these rights, please send us a request via our inquiry form or by post to our address described above. For your own privacy and security, we may require evidence of your identity or to be provided with additional information before we are able to act on your request when the information we have is insufficient to accommodate your request. We will use our best efforts to provide any requested information or make requested changes in accordance with applicable laws.

8. Your Personal Data Retention Period

We generally retain your personal data for as long as reasonably needed for the specific business purpose or purposes for which it was collected. Your personal data is also archived for the duration necessary to handle any disputes involving you. In some cases, we may be required to retain information for a longer period of time based on laws or regulations that apply to our business. Where possible, we aim to anonymize the information or remove unnecessary identifiers from records that we may need to keep for periods beyond the original retention period. Once your personal data is no longer necessary, we delete or anonymize it as soon as possible.

9. Contact Information

Should you have questions or concerns about this policy or our privacy practices, please contact us via our inquiry form or by post to our address described above.

10. Updates

We may update this policy from time to time. We reserve the right to modify, add or remove portions of this policy. If we decide to change this policy, we will post an alert on our website.

This policy was last updated on 01,09, 2024.