Privacy Policy

This is a reference translation for convenience. The Japanese version is the official text and prevails in case of any discrepancy.

Read the Japanese version (official text)

Cinderella entertainment Co., Ltd. (the "Company") handles the personal information of Members of iCAN Fan Club (the "Service") appropriately in accordance with the following policy.

1. Information We Collect

Registration information: Family name, given name, kana, nickname, email address, date of birth, prefecture, gender, and viewing medium
Authentication information: Password (stored encrypted)
Shipping information: The recipient name, postal code, address, building name, and telephone number entered when exchanging or purchasing items at the EXCLUSIVE Store, and an optional delivery note
Payment information: Processed by the payment service provider (Stripe). The Company does not hold card numbers themselves
Usage information: Usage logs such as video viewing, and access information (IP addresses may be processed, for example by hashing)

The Company collects the prefecture at the time of Member registration, and may collect gender and viewing medium as optional items. Telephone numbers and postal codes are not collected at the time of Member registration. They are collected during the shipping procedure at the Store. If you select "Use this address next time" during checkout, the recipient name, address, and telephone number are saved to your Member information. This saving may take place before payment is completed. The delivery note is not saved to your Member information for next time.

2. Purposes of Use

Identity verification and Member management
Providing the Service, such as content, benefit tickets, and item exchange
Payment and billing of fees
Important notices and business communications (streaming reminders, notices of ticket sales start, etc.)
Responding to inquiries
Improving the Service and preventing unauthorized use
Exchange and sale of items, payment and refunds, shipping of items, communications about delivery, notices of order confirmation, shipping, and cancellation, and handling of defective items, returns, and the like
Pre-filling the recipient name, address, and telephone number saved to Member information at the next exchange or purchase
Transaction management through order and payment records, handling of inquiries, prevention of unauthorized use, and accounting and tax processing required by law

3. Provision to Third Parties and Outsourcing

To the extent necessary to achieve the purposes of use, the Company outsources the handling of personal information to external companies and exercises necessary and appropriate supervision over them.

Stripe: Processing of payments, refunds, and the like. The Company provides the order information, amount, and email address, existing customer identifier, and the like needed for payments and refunds. Card information is entered on Stripe's payment screen, and the Company does not hold card numbers themselves. For how Stripe handles personal information, including handling outside Japan, please see Stripe's privacy policy (https://stripe.com/jp/privacy).
Delivery carriers: Delivery of items. To outsource delivery, the Company provides the recipient name, address, telephone number, and the delivery note needed for delivery.
Cloudflare: Content delivery, image and video hosting, and email sending
Google (GA4): Access analytics

Except for outsourcing and other cases permitted by law, the Company does not provide personal data to third parties without the consent of the person concerned. For provision to a third party located in a foreign country, the Company takes the necessary measures in accordance with law.

4. Retention Periods

Member information: Anonymized one year after withdrawal
Shipping information saved for next-time entry: The recipient name, address, and telephone number saved to Member information are managed separately from the retention period for each order, and are, in principle, deleted in the anonymization process one year after withdrawal.
Card purchase orders without payment: 30 days after the day on which the order ended by expiry or cancellation, the scheduled process deletes the shipping details (recipient name and address), telephone number, delivery note, the copy of the email address at the time of the order, and the like.
Card purchase orders with payment: Seven years after January 1 of the year following the year of payment, the scheduled process deletes the shipping details (recipient name and address), telephone number, delivery note, the copy of the email address at the time of the order, and the like.
Order information on withdrawal: In principle, deleted or anonymized one year after withdrawal. However, if there is an order awaiting payment or not yet shipped, anonymization is postponed until the necessary processing is complete. Depending on the processing status, deletion takes place when the scheduled process above runs.
Payment-related records: Records such as amounts, item details, payment identifiers, dates and times, and status are retained, even after shipping information is deleted, for a standard period of seven years from January 1 of the year following the year of payment. Books and documents that must be kept by law are separately retained for the statutory period that applies.
Video viewing logs: Deleted after three months
Benefit ticket usage records: Retained in anonymized form

These are the retention standards for information the Company manages. The retention of information that Stripe and others manage themselves is governed by each company's policy and applicable law.

5. Cookies and Access Analytics

The Service uses cookies and similar technologies to improve convenience and for access analytics (GA4). These do not directly identify individuals. You can disable cookies in your browser settings, but some features may become unavailable.

The Company uses Google Analytics 4's "Google signals" and "user-provided data collection." As a result, statistical information on the attributes (age group, gender, interests, etc.) of users who are signed in to a Google account, and hashed values of email addresses entered on the Service, may be sent to Google and used for measurement across devices. The Company receives only aggregated results that do not identify individuals. For how Google handles this information, please see Google's privacy policy. You can disable this through "Ad settings" in your Google account or the "Google Analytics opt-out browser add-on."

6. Requests for Disclosure, Correction, Suspension of Use, etc.

Members may request disclosure, correction, deletion, or suspension of use of their own personal information. Much of the information can be changed by Members themselves from My Page. Other requests are accepted at the contact below.

Contact: info@cin-dere-lla.com (the inquiry form can also be used)

7. Security Control Measures

To prevent leakage, loss, or damage of personal information, the Company takes necessary and appropriate measures such as access control, encryption, and supervision of contractors.

8. Inquiries and Revisions

For inquiries about this Policy, please contact the contact above. This Policy will be revised as necessary, and important changes will be notified on the Service.

Business operator: Cinderella entertainment Co., Ltd.
Personal Information Protection Manager: Tatsuya Takekoshi
Address: Room 704, NK Building, 2-10-28 Minamisenba, Chuo-ku, Osaka-shi, Osaka 542-0081, Japan
Established: July 1, 2026
Revised: November 1, 2026
Effective: November 1, 2026