1. Information received through business information requests

   1. For general requests for a response from AURNI, such as through a "Contact AURNI" form, personal information is retained for the specific purpose of providing response. The personal information may be deleted when the purpose is completely fulfilled. The personal information submitted is not shared with a third party. 

   2. For specific information requests, such as a request for details on our services or a quotation, the submitted information submitted is considered as protected business information. The information is used to respond to the request, and may be retained to inform the requester of further information relevant to the request. 

2. Information received during research projects

   1. In the course of conducting research, personal information of research respondents, including image and audio recordings, may be collected. This information is considered protected personal information. The following controls are applied:

      1. The purpose of collecting the information, the use of the information, and the format of presentation of the information is described to respondents. The general standard is that outside of AURNI, respondent information is anonymized and steps are taken to prevent reverse-engineering of the information.

      2. The types of information are described to respondents. The general standard is that the amount and detail of the information is kept to the minimum that is necessary for the research project.

      3. Informed consent is obtained from the respondents, and the informed consent is maintained in the records.

      4. In deliverables provided to a client, the respondents' personal information (including images and audio) are anonymized, unless the respondent agress

   2. In the course of conducting research, personal information of observers and project team members may be collected. This information is treated as protected business information. The following controls are applied:

      1. Records of participation may be retained for management purposes.

      2. Personal information is not released outside of the organization of the specific observer or project team member without the approval of the client, or when it is ethically or legally necessary.

3. General policies about information submitted for business or research 

   1. Submitted information is handled in a secure system, and access is strictly limited to only individuals who have a critical need to access the specific information.

   2. Submitted information is protected from release to third-parties, except in the case of explicit permission from the person who submitted the information or when it is required by law and released to appropriate authorities. Third-parties must have a information protection protocol that is at least as rigorous as AURNI's.

   3. Submitted information may be released to a second-party for a specific purpose when  conducting a business or research project. The information will be provided to the second-party in a protected format and limited to specific individual users. The second-party is required to delete that information completely after it has served its purpose for the project. Second-parties must have a information protection protocol that is at least as rigorous as AURNI's.

   4. The person who has submitted personal information may request that it be deleted at any time. The information will be deleted as a priority. If it is necessary to retain the information for a short period of time for management or legal purposes, we will inform the person, and we will completely delete the information when the necessary purpose has been fulfilled. 

   5. AURNI requires that personal information that AURNI receives from a second-party or third-party has been collected ethically by those parties.

   6. Any breach of the security of the information will be addressed as a priority. In the case of a breach, AURNI will follow a plan to stop the breach, to re-acquire any released information, to prevent any outside party from retaining the information, to inform all affected parties, and to take corrective actions to improve security of the information. 

4. Cookie policy

   1. AURNI may use sites which are hosted by other owners such as Google, Asana, Sendmail, etc. These site owners may use cookies that are essential for the website to function properly, maintain security, and render layouts correctly. AURNI does not control these cookies.

   2. Those site owners may inform you of their cookie policies, and you may have the option to accept or decline cookies. AURNI does not influence those policies. Declining cookies does not adversely affect your opportunity to use AURNI's services. However, declining cookies may adversely affect some functions of the specific website. 

5. Rights of individuals whose information is stored by AURNI

   1. Upon a validated request by a person whose information is stored by AURNI, AURNI will takes appropriate steps to disclose the information, to correct the information, or to delete the information.

   2. Requests about AURNI's policies or about an individual's own information should be addressed to the following. We will consider response to these requests as a priority.

AURNI, K.K.

KOTO Business Center, 1-2-36 Kajino-cho

Koganei-shi, Tokyo-to 184-0002

Attn: Christopher Duston, Privacy Officer

Email contact: privacy@aurni.com