Nishi Umeda City Clinic（以下「当院」といいます。）は、本サービス（第1条で定義します。）におけるユーザー（第1条で定義します。）の個人情報の取扱いについて、以下のとおりプライバシーポリシー（以下「本ポリシー」といいます。）を定め、個人情報保護の仕組みを構築し、全従業員に個人情報保護の重要性を認識させるとともにその取組みを徹底させることにより、個人情報の保護を推進します。

Article 1 Definition

The terms used in this policy have the meanings defined in the following items.

1. “Service” refers to the 'Cloud Doctor' operated by Cloud Doctor Inc.
2. “User” refers to individuals who register for the Service and receive medical treatment.
3. “Personal Information” refers to 'personal information' as defined in the Act on the Protection of Personal Information (Act No. 57 of 2003).

Article 2 Purpose of Use of Personal Information

The Clinic will acquire and use the User's personal information to the extent necessary for the following purposes. If it is necessary to use personal information beyond these purposes, the Clinic will obtain the User's consent in an appropriate manner in advance.

1. To provide medical treatment to Users through the Service
2. To provide to other medical institutions and doctors registered in the Service for the purpose of improving convenience for parties using the Service (including Users)

Article 3 Acquisition of Sensitive Personal Information

Users agree that the Clinic may acquire sensitive personal information, including medical history, through the Service to provide appropriate medical treatment.

Article 4 Management and Protection of Personal Information

1. The management of personal information will be conducted strictly, and except in the following cases, personal information will not be disclosed or provided to third parties without the User's consent. Additionally, measures will be taken to prevent and correct risks such as unauthorized access to personal information, loss, destruction, alteration, and leakage of personal information.
   1. When it is necessary to protect a person's life, body, or property and it is difficult to obtain the User's consent.
   2. When it is particularly necessary for the improvement of public health or the sound development of children and it is difficult to obtain the User's consent.
   3. When it is necessary to cooperate with a national or local government agency or a person entrusted by them in executing affairs prescribed by law, and obtaining the User's consent may hinder the execution of those affairs.
   4. When otherwise permitted by law.
2. Notwithstanding the preceding paragraph, Users agree that the Clinic may provide personal information, including name, address, email address, date of birth, and medical history, to other medical institutions and doctors registered in the Service for the purpose of improving convenience for parties using the Service (including Users).

Article 5 Outsourcing of Personal Information Handling

The Clinic may outsource the handling of personal information to the extent necessary to achieve the purpose of use. In such cases, the Clinic will thoroughly examine the qualifications of the outsourcing partner and establish confidentiality obligations in the contract, as well as conduct necessary and appropriate supervision of the outsourcing partner.

Article 6 Disclosure of Personal Information

Users may request the Clinic to notify them of the purpose of use or disclose their personal information or third-party provision records within the scope permitted by the Act on the Protection of Personal Information by following the procedures specified in Article 9. Upon receiving such a request, the Clinic will promptly notify or disclose the information to the User. However, if disclosure would fall under any of the following cases, the Clinic may not disclose all or part of the information and will promptly notify the User of such decision.

1. When there is a risk of harming the life, body, property, or other rights and interests of the User or a third party.
2. When there is a significant hindrance to the proper execution of the Clinic's business.
3. When it would violate laws and regulations.

Article 7 Correction of Personal Information

1. If the personal information held by the Clinic is incorrect, Users may request the Clinic to correct, add, or delete the information (hereinafter referred to as 'correction') by following the procedures specified in Article 9.
2. Upon receiving such a request, the Clinic will promptly conduct the necessary investigation and, if it determines that there is a reason for the request, will promptly make the correction.
3. If the Clinic makes a decision regarding the implementation or non-implementation of the correction based on the preceding paragraph, it will promptly contact the User.

Article 8 Suspension of Use of Personal Information

1. Users may request the Clinic to suspend the use, deletion, or third-party provision of their personal information (hereinafter referred to as 'suspension of use') by following the procedures specified in Article 9.
2. Upon receiving such a request, the Clinic will promptly take the necessary measures.
3. If the Clinic makes a decision regarding the implementation or non-implementation of the suspension of use based on the preceding paragraph, it will promptly contact the User.

Article 9 Procedures for Suspension of Use of Personal Information

When making requests under Articles 6 to 8, Users should write the request details on paper and send it along with the identification documents specified in (1) to the address specified in (2). For the procedures specified in Article 6, a fee of 1,000 yen (excluding tax) will be charged for each request.

1. Identification Documents

For requests made by the User themselves: A copy of the User's driver's license, passport, health insurance card, or My Number card (one of these is sufficient).

For requests made by an agent: 1) A copy of the User's driver's license, passport, or health insurance card (one of these is sufficient) 2) A copy of the agent's driver's license, passport, or health insurance card (one of these is sufficient) 3) A letter of authorization indicating that the agent is acting on behalf of the User.

2. Send to: The address is listed on the Clinic's detail page.

Article 10 Procedures for Changes to Privacy Policy

The Clinic will review the content of this policy as necessary and strive for improvement. The content of this policy may be changed, except for matters separately stipulated by laws and regulations or this policy. The revised privacy policy will take effect from the time it is notified to Users in a manner prescribed by the Clinic or posted on the Clinic's website.

Article 11 Compliance with Laws and Regulations

The Clinic will comply with applicable Japanese laws and other norms regarding the handling of personal information.

Article 12 Response to Complaints and Consultations

The Clinic will accept complaints and consultations from Users regarding the handling of personal information and respond appropriately and promptly. Additionally, the Clinic will respond promptly and appropriately to requests from Users for disclosure, correction, addition, deletion, suspension of use, or refusal of provision of their personal information.

Article 13 Safety Management Measures

The Clinic will take organizational, physical, human, and technical measures to prevent unauthorized intrusion into personal information, loss, destruction, alteration, and leakage of personal information by implementing access restrictions to personal information files, recording access logs, and implementing security measures to prevent unauthorized access from external sources. In the event of an incident such as leakage of Users' personal information, the Clinic will promptly report to the supervisory authority in accordance with the Act on the Protection of Personal Information and related guidelines, and will take necessary measures such as preventive measures against similar incidents and measures to prevent recurrence in accordance with the instructions of the supervisory authority. For details, please contact the inquiry window specified in Article 15.

Article 14 Address, Representative Name, and Personal Information Protection Manager of the Clinic

The address, representative, and personal information protection manager of the Clinic are as follows: Address: The address is listed on the Clinic's detail page. Representative: The representative is listed on the Clinic's detail page.

Article 15 Contact Information

For inquiries regarding the handling of personal information by the Clinic, please contact the phone number listed on the Clinic's detail page.

2025/04/01 established and enforced