Privacy Policy

The Service may collect the following information.

• Account information (name, email address, organization name, Google account information)
• When Sign in with Apple (Apple account) is used to sign in to the "Last Mile Picking" mobile app, the name and email address of that account. By Apple's design these are provided only at first sign-in, and when the "Hide My Email" feature is used, a relay email address in the @privaterelay.appleid.com format may be provided.
• Service usage logs (access date/time, IP address, browser information, the screen being viewed, operations and their results, request/response content)
• Business data obtained from connected services (Shopify product, inventory, order, and customer data; POS data; warehouse and shipping data, etc., within the scope the user authorizes)
• Information submitted via the contact form (company name, name, email address, inquiry content)
• Payment-related information (information needed for payment processing via Stripe; we do not store credit card numbers themselves)
• Session information such as cookies and tokens
• Device identifiers used for mobile app push notifications (push tokens)

Personal information of Customers contained in business data is handled under Section 4.

We use the information of Staff and of people who contact us for the following purposes.

• To provide, maintain, and protect the Service
• To respond to user inquiries
• For billing, charging, and contract management
• To send notices and notifications about the Service
• To prevent and investigate misuse, terms violations, and security incidents
• To improve the Service and to create statistical and analytical data (statistics are in a form that does not identify individuals)
• For legal compliance and handling disputes

The purposes of use of business data, and of the account information and usage logs of Staff, are limited to those set out in Article 11 of and the Schedule to the Terms of Service.

In our mobile app for shipping and picking operations, "Last Mile Picking" (App ID: io.lmile.picking), the device camera is used solely to read barcodes / QR codes for matching products and inventory and for picking and shipping work.

• The camera feed is only processed on the spot to read codes; it is not saved to the device as photos or video.
• Captured images or video are not sent or uploaded to our servers or any third party.
• What is obtained from scanning is only business data such as the product identifier (SKU / barcode value) encoded in the barcode / QR code, used to provide the Service (inventory matching, picking, and shipping).
• Using the camera requires permission on the device. Permission can be changed at any time in the device settings; if not granted, only the barcode / QR scanning feature becomes unavailable.

Users entrust us with handling the personal information of Customers (Article 12 of the Terms of Service). This includes:

• Order information (name, address, phone number, email address, order contents, delivery status)
• Restock alert sign-ups (email address, LINE user identifier, the product)
• Store visit bookings (name, contact details, booking details)
• In-store order transactions (transaction details; member email address, name and phone number)
• EC referral records (display name and identifier of the sharing staff member; open, click and purchase records; purchaser identifiers are stored only as irreversibly converted values)
• Customer information and notes that Users register in the Service

We use this information only as needed for the work Users entrust to us (choosing the ship-from location, allocating inventory, shipping and delivery, and sending delivery status, restock, and booking messages) and for providing the Service to, and calculating fees for, that User. For shipping, we provide it as needed to processors such as carriers (Section 5).

Customers should, as a rule, make requests for disclosure and the like to the User. If such a request is made to us directly, we contact the User and respond as the User instructs.

To provide the Service, we entrust the handling of personal data, to the extent necessary, for the following kinds of work. We select processors after checking how they handle data and impose the necessary obligations by contract. Each processor handles information in accordance with its contract with us and its own privacy policy.

• Payments
• E-commerce and POS integration
• Authentication
• Database and hosting
• Sending email, messages, and notifications
• Shipping labels and delivery

The names and countries of our processors are listed in Subprocessors, which forms part of this Policy. For personal data in Business Data, these processors are the third parties referred to in Article 12, paragraph 2 of the Terms of Service, and we notify Users at least 30 days before adding or changing one. Provision to processors located outside Japan is described in Section 6.

Some of our processors are located outside Japan. We enter into contracts with them on the handling of personal data and check how they handle it before providing it. The personal information protection systems of their countries are described in the following materials.

• United States: Personal Information Protection Commission report (Japanese) ↗
• Canada: Personal Information Protection Commission report (Japanese) ↗
• Singapore: Personal Information Protection Commission report (Japanese) ↗
• Germany (EU): Personal Information Protection Commission report (Japanese) ↗ (recognized by the Commission as having a level of protection equivalent to Japan)

Our databases run in the Singapore and Tokyo regions, and our applications in the Tokyo region.

We do not provide personal information to third parties without the individual's consent, except in the following cases.

• When required by law
• When necessary to protect a person's life, body, or property, and obtaining the individual's consent is difficult
• When especially necessary to improve public health or promote the sound development of children, and obtaining the individual's consent is difficult
• When it is necessary to cooperate with a national or local government body, or a party entrusted by them, in performing duties prescribed by law
• When we entrust the handling of personal information to the extent necessary to achieve the purposes of use (Section 5)
• When provided in connection with a business succession due to a merger or other reason

Notwithstanding the above, Business Data (including Customers' personal information) is provided only within the scope of Article 13 of the Terms of Service.

We take organizational, personnel, physical, and technical security measures to prevent leakage, loss, or damage of the personal information we handle, and to otherwise manage it safely. Specifically, we restrict access permissions, encrypt communication paths (TLS), encrypt the database, keep audit logs, and conduct periodic reviews.

When personal data is handled outside Japan, we take security measures based on an understanding of that country's personal information protection system (Section 6).

We keep personal information for as long as needed to achieve the purposes of use. Business Data (including Staff account information and usage logs) is kept for the retention periods in the Schedule to the Terms of Service and, when the Service Agreement ends, returned or deleted within 30 days of the end date under Article 12, paragraph 8 of those Terms. Billing and payment information is kept for the period required by law. Inquiry information is deleted once it is no longer needed after the inquiry is resolved.

The Service may use cookies and similar technologies to maintain login state, for authentication and session management, to prevent misuse, and to understand usage. Users can disable cookies in their browser settings, but some features of the Service may then become unavailable.

Individuals may request disclosure, correction, addition, deletion, suspension of use, and suspension of third-party provision of their own personal information held by us, as well as disclosure of records of third-party provision.

• How to request: send the details of your request to the email address of the contact point below.
• Identity verification: we verify your identity by the request coming from the email address registered with the Service. If we cannot, we may ask for a copy of an identity document.
• Requests by an agent: please send a letter of authorization and a copy of the agent's identity document.
• Fee: free of charge.
• Response: as a rule, we respond by email.

For inquiries about this Policy and for requests or complaints regarding the handling of personal information, please contact the following or use our contact form:

• Company: Last Mile, Inc.
• Address: N&E BLD. 7F, 1-12-4 Ginza, Chuo-ku, Tokyo 104-0061, Japan
• Personal data manager: Shota Tabata
• Email: [email protected]
• Business hours: Weekdays 10:00–18:00 JST (excl. weekends & Japanese holidays)

We may change this Policy as needed. The amended Policy takes effect 7 days after it is posted on the relevant page of the Service. However, where an immediate change is needed, such as to comply with amended laws, it takes effect when posted. We will also notify Users of material changes within the Service or by individual email, etc. However, an expansion of the purposes of use of Business Data (including Staff account information and usage logs) or any other change falling under Article 23, paragraph 4 of the Terms of Service follows the procedure in that paragraph.