Toyo Aerosol Industry Co.,Ltd. (hereinafter referred to as "Company") has established this policy as a guideline for the protection measures of Personal Information of its consumers, customers, suppliers, affiliated companies, subcontructing companies, officers, employees, and other individuals (hereinafter referred to as "Individual") that the Company posses, to fulfill its social responsibility commensurate with its status as aerosol contract manufacturer in the Toyo Seikan Group and to meet our stakeholders' and customers' trust.

1. Obtaining Personal Information

The Company will obtain any Personal Information through a lawful and fair manner.

2. Notice of purpose for use of Personal Information

When obtaining any Personal Information, the Company will, as a general rule, inform the purpose of use thereof to the relevant persons.

3. Use of Personal Information

When obtaining any Personal Information, the Company will, as a general rule, inform the purpose of use thereof to the relevant persons.

4. Provision of Personal Information to third parties

When the Company needs to share Personal Information with its business partners (collectively hereinafter referred to as the "Third Parties"), the Company will obtain a prior consent from the relevant persons.

5. Protection and security of Personal Information

The Company will endeavor to keep Personal Information accurate and up-to-date to the extent required to achieve the purpose of use. In addition, the Company shall implement proper security measures and take precautionary steps to prevent any and all Personal Information from being leaked, lost, damaged, etc.

6. Supervision over employees and commissioned third parties

The Company will carry out necessary and appropriate supervision over its employees for ensuring the security of Personal Information. In addition, when entrusting the handling of Personal Information to third parties, the Company shall perform the necessary and appropriate supervision over the commissioned third parties for ensuring security of the commissioned Personal Information.

7. Disclosure of Personal Information

When any person requests the Company to inform the purpose of use, disclose, make any correction to, discontinue the use of, and/or delete, his/her Personal Information the Company will comply with the request in an adequate manner in accordance with the law.

8. Contact for inquiry

The Company will set up a contact point to which persons may direct complaints, inquiries, etc. for the handling of their Personal Information. The company will respond to any inquiries from relevant persons with integrity.

9. Management system for Personal Information protection

The Company will assign a Chief Privacy Officer (CPO) from the board of members to organize a Personal Information protection Committee and manage the Personal Information in an appropriate manner.

10. Establishment of internal rules for the Personal Information protection

The Company will establish inter-company rules for Personal Information protection to carry out this policy, and make its officers and employees be aware of and comply with the inter-company rules as well as the policy. Moreover, the Company will inspect the enforcement situation and implement improvements as necessary.

11. Education and training

For ensuring appropriate management of the Personal Information, the Company will promote education and training of this company policy and inter-company rules to its officers and employees.

12. Compliance with the law

The Company will follow the laws for protecting Personal Information and any other ordinances and/or regulations, and endeavor to protect all Personal Information.