Japan Supplier Privacy Notice
Coupang Japan G.K. (hereinafter referred to as “Coupang JP”) establishes and provides the following Privacy Notice to protect Coupang JP suppliers’ personal information in accordance with the Japan’s Act on the Protection of Personal Information (hereinafter referred to as the “APPI”) and handle related issues in a quick and seamless manner. Any updates to this Privacy Notice, including the effective date and the details of the revision, will be posted on our website and notified to Coupang JP suppliers by e-mail or other means. Suppliers are requested to notify the relevant individuals whose personal information is handled by Coupang JP of any such updates or revisions.
This Privacy Notice applies to Coupang JP suppliers used by them. This does not apply to other services provided by Coupang JP.
1. Personal Information Collected, Purpose of Collection and Retention Period
Coupang JP does not collect or use personal information but for the following purpose of collection and use, and, in the event any of such purposes are changed, we will take necessary measures such as obtaining separate consent under Article 18, Paragraph 1 of the APPI. Coupang JP processes and retains personal information within the period of retention and use prescribed by applicable laws or within the time period notified to and agreed to by the supplier at any time. The period of processing and retaining personal information under applicable laws can be found under the section entitled “3. Procedure for and Methods of Destroying Personal Information.”
Purpose of Collection and Use | Information Collected | Period of Retention and Use |
---|---|---|
Supplier identification, supplier person in charge management, Supplier management | Name, email address, phone number, mobile number | Destroyed upon termination of contracts between Coupang JP and the supplier |
Settlement, issuance of tax invoices, and payment services | Bank account information (bank name, account holder name, account number), copy of bankbook | Destroyed upon termination of contracts between Coupang JP and the supplier |
Training and overall communication | Name, email address, mobile number | Destroyed within 3 months upon collection |
Receiving and replying to inquiries | Email address and other personal information collected with the inquiry | Destroyed within 6 months upon completion of response processing |
Coupang JP collects the minimum amount of personal information necessary for suppliers’ identification and management.
2. Provision and Consignment of Personal Information
Coupang JP provides personal information to third parties only within the scope of consent obtained from the supplier.
Coupang JP may disclose personal information to regulatory authorities and other governmental bodies in accordance with applicable laws and regulations. Coupang JP may also provide such information to third parties as required by law, including foreign laws and regulations.
Coupang JP consigns the processing of personal information to effectively receive and provide services and stipulates the following details in the consignment contract: prohibition of personal information processing for purposes other than to perform consigned tasks; technical and administrative safeguard measures; restrictions on re-consignment; management and oversight of the consignee; and the liability for damages. Coupang JP also manages and oversees whether the consignee processes personal information.
Consignee
(Information Management Officer) |
Country | Date and Method | Purpose of consignment | Information Transferred | Period of Retention and Use |
---|---|---|---|---|---|
NetSuite Inc. (https://www.oracle.com/legal/privacy/services-privacy-policy.html Oracle Corporation Global Data Protection Officer Willis Tower 233 South Wacker Drive 45th Floor Chicago, IL 60606 U.S.A.) |
U.S. | Transmission over secure network when Supplier information is registered for business purpose | Supplier identification, supplier person in charge management, Supplier management, Payment purposes | Personal information collected and used when concluding a contract | Destroyed upon termination of consignment contract |
Coupang Global LLC | U.S. | Transmission over secure network when personal information is required for business purpose | Netsuite operation and management | ||
Coupang (Shanghai) Co., Ltd. 酷澎网络科技(上海)有限公司 | China | Legal, Accounting, and Tech | |||
CCoupang (Beijing) Co., Ltd. 酷澎网络科技(北京)有限公司 | China | Legal | |||
Coupang (Shanghai) Trading Co., Ltd. 韩领(上海)贸易有限公司 | China | Legal, Accounting, and FP&A |
3. Procedure for and Methods of Destroying Personal Information
Coupang JP destroys personal information without delay when the information is rendered unnecessary by achieving the purpose of collection and use.
The procedure for and methods of destroying personal information are as follows:
The procedure for and methods of destroying personal information are as follows:
- Procedure of Destruction: Once the purpose of personal information collection and use has been achieved, the information is destroyed in accordance with the internal policies and applicable laws
- Methods of Destruction: Personal information in electronic form is destroyed through means that will make the data irrecoverable, whereas personal information stored in a hard copy format is destroyed using a shredder.
However, if it is required by applicable laws to retain personal information even after the expiration of personal information retention period consented by the supplier or after achieving the purpose of processing, Coupang JP separately stores and manages to retain the necessary personal information.
4. Rights and Obligations of Supplier and Legal Representatives and How to Exercise the Rights
The supplier’s personal information can be viewed, corrected, deleted, or suspended by requesting the Supplier Support Team according to “6. Contact”. The progress (or the results) made on (or the results of handling) the supplier’s request will be replied within 10 days. A legal representative or a delegated representative must prove his or her legitimate representative status by submitting a power of attorney and a certificate of family relations, etc.
However, deleting or suspending the processing of personal information may be limited in the following cases:
- Where there are special legal provisions, or it is inevitable to fulfil a legal obligation; or
- Where there is a possibility of causing harm to another person’s life or body or unjustly infringing on another person’s property or interests.
5. Personal Information Safeguard Measures
Coupang JP has technical and administrative safeguard measures in place to ensure that suppliers’ personal information is not stolen, leaked, forged or damaged while processing the information.
- Technical Safeguards: Real-time monitoring and blocking of hacking attempts and data leak, enhanced access control on personal information processing systems, storage of access logs and prevention of their forgery/alteration, at-rest encryption of passwords and critical information, and in-transit encryption of data
- Administrative Safeguards: Operation of a dedicated privacy team, regular training for personal information handlers, awareness-raising activities for employees, and regular audits for compliance
6. Contact
For inquiries, complaints, or to exercise privacy rights of suppliers in relation to Coupang JP’s privacy practices, please contact Supplier Support Team.
Coupang Japan G.K.
[18F, Yebisu Garden Place Tower, 4-20-3 Ebisu Shibuya-ku, Tokyo, 150-6018]
[Jonathan Burks]
Supplier Support Team: grp_privacy_contact_japan@coupang.com
Coupang Japan G.K.
[18F, Yebisu Garden Place Tower, 4-20-3 Ebisu Shibuya-ku, Tokyo, 150-6018]
[Jonathan Burks]
Supplier Support Team: grp_privacy_contact_japan@coupang.com
Privacy Notice Version: V2
Effective Date: Sep 04, 2024
※ If you have any questions about privacy notice that is not indicated, please contact Supplier Support Team.
Effective Date: Sep 04, 2024
※ If you have any questions about privacy notice that is not indicated, please contact Supplier Support Team.