Privacy Policy
Established: August, 2020
Revised: March 24, 2025
1. General Policy
Use of personal information collected through the National Institutes for Cultural Heritage (hereinafter “NICH”) Donation Portal Site (hereinafter “the Website”) is limited to activities necessary to smoothly provide the NICH’s services, including receiving donations and comments via email or phone call. The NICH is committed to responsible management of personal information and use of personal information is limited to the scope indicated in Clause 4, “Purpose of Use.”
2. Legal Compliance
The NICH manages personal information in accordance with the Japanese Act on the Protection of Personal Information Held by Independent Administrative Agencies, Etc. (Act No. 59 of 2003), the Order for Enforcement of the Act on the Protection of Personal Information Held by Independent Administrative Agencies, Etc. (Cabinet Order No. 549 of 2003), the Rules for the Management of Personal Information Held by NICH, and the Detailed Regulations for the Handling of Personal Information Held by NICH.
3. Scope of Information Collected
The Website does not collect names, birthdates, or other information that can be used to identify an individual, apart from the following exceptions:
(1) The Website automatically collects domain names, IP addresses, and other information pertaining to Website visits. The NICH does not link this information to data that can identify individual users. However, the NICH may take such measures when required by law or when needed to protect the rights of other visitors.
(2) Users will be asked to enter their name, e-mail address, phone number, and address when applying to make donations on the Website.
(3) In order to ensure that credit cards can be used safely and securely, the Website uses EMV 3-D Secure, a personal authentication service recommended by international brands, to prevent the fraudulent use of credit card numbers or other information. The use of EMV 3-D Secure requires the sending of customer information to card issuing companies, etc.
4. Purpose of Use
(1) Website visit information obtained under Clause 3 (1) is used to improve the content and services on the Website (by creating user-access statistics, for example).
(2) Personal information obtained under Clause 3 (2) is used for the following purposes:
・To provide benefits to donors, as stipulated on the Website
・To detect and prevent fraudulent activities (credit card fraud, etc.)
・To analyze and examine data to help improve the Website and its functions or to make other changes.
・For questionnaires and surveys
・To conduct statistical analysis to help develop and run new activities
・To inform people about fundraising activities and supporter events organized by the NICH or other related institutions
(3) Inquiries solicited under Clause 3 (2) may be forwarded to the relevant divisions within the NICH, depending on the content. Furthermore, names and e-mail addresses may be used to respond to inquiries.
5. Use of Google Analytics
The Website uses Google Analytics to assess site usage. Google Analytics collects information about users by means of cookies. For the Google Analytics terms of service and privacy policy, see the Google Analytics website. The NICH bears no responsibility for any damage resulting from use of the Google Analytics service.
6. Restrictions on Use and Disclosure
The NICH does not use personal information for purposes other than those specified in Clause 4 (“Purpose of Use”). The NICH does not disclose personal information obtained through the Website to third parties. Notwithstanding the above provisions, the NICH may disclose personal information in the following cases:
・When legally required to do so
・When there has been unauthorized access to the Website
・When there has been an unlawful act or the threat of such an act
・And/or in exceptional cases, when such action is deemed necessary.
The NICH may publish user-access statistics, but individual users will not be identifiable. The NICH may also use the content of submitted inquiries to update the “Frequently Asked Questions (FAQ)” pages of each relevant division, etc. .
6-2. The provision of information to third-party vendors to help detect and prevent credit card fraud
Information collected through the Website (names, telephone numbers, e-mail addresses, internet usage environment, etc.) may be provided to card issuing companies to help these companies detect and prevent fraud. If the card issuing company is based outside Japan, this information may be transferred to the country in which the card issuing company is based. Information collected through the Website cannot be used to identify the card issuing company or the company’s resident country, so we cannot ascertain and provide the following information pertaining to measures to protect personal information.
・The name of the country in which the card issuing company resides.
・Information about the personal information protection system of the country in which the card issuing company resides.
・Measures taken by the card issuing company to protect personal information
Information about the personal information protection systems of each country can be found on the homepage of the Government of Japan’s Personal Information Protection Commission (https://www.ppc.go.jp/).
Furthermore, when using EMV 3-D Secure, information collected through the Website may be provided in part or in whole to subcontracting companies in the United States of America. This information will be stored at the relevant subcontracting company upon ensuring that necessary and appropriate measures are in place regarding information security management. A summary of the United States of America’s personal information protection legal system is available at https://www.ppc.go.jp/personalinfo/legal/kaiseihogohou/#gaikoku.
7. Information Security Measures
The NICH will take all measures necessary to prevent accidental disclosure, loss, or other unauthorized use of personal information. The NICH is committed to responsible management of personal information.
8. Third-party Vendors
To enhance operation of the Website, the NICH may outsource the handling of personal information to third-party vendors. When outsourcing, the NICH will select a reputable third-party vendor with sufficient experience and competence in managing personal information. The NICH will take all measures necessary to ensure that third-party vendors appropriately manage personal information, including, but not limited to, specifying additional privacy provisions and/or including a nondisclosure clause in the service contract.
9. Scope of Application
This Privacy Policy only applies to the following website: “https:// support-us.nich.go.jp/”. The handling of personal information on other websites is the responsibility of the respective organizations.
10. Other Provisions
Minors should obtain the consent of a parent or guardian before using the Website. Furthermore, the NICH may revise this Privacy Policy at any time if necessary.