PRIVACY POLICY

The Company will comply with the Act on the Protection of Personal Information (hereinafter "APPI") and other relevant laws, regulations and guidelines, and will continuously work to ensure the appropriate management and protection of personal information.

In this policy, "personal information" means personal information as defined in Article 2, Paragraph 1 of the APPI — that is, information relating to a living individual that can identify a specific individual through name, date of birth, or other descriptions, or that contains an individual identification code.

The Company collects the following categories of personal information:

• Name, date of birth, address, telephone number, and email address
• Information recorded on identity documents (as required for identity verification)
• Payment-related information such as credit card details
• Enquiry content
• IP addresses, cookie information, access logs, etc.

The Company collects personal information by the following methods:

• Direct provision by the customer
• Automatic collection through cookies and similar technologies
• Provision from affiliated business partners

The Company uses collected personal information for the following purposes:

1. Provision of services and operation of the Company's business
2. Responding to inquiries from the individual concerned
3. Providing information about new services, campaigns, etc.
4. Responding to violations of the Terms of Use and preventing fraudulent use
5. Statistical analysis for service improvement and quality enhancement
6. Fulfilling obligations under laws and regulations and cooperating with government agencies

When changing the purposes of use, the Company will do so within a scope that is reasonably related to the original purposes, and will promptly announce or notify the updated purposes on the Company's website or by other means.

The Company will not provide personal information to third parties without the consent of the individual concerned, except in the following cases:

1. When required by law
2. When necessary to protect a person's life, body or property
3. When particularly necessary for improving public health or promoting the sound development of children
4. When necessary to cooperate with a national or local government agency or a person entrusted by such an agency in carrying out affairs prescribed by law

The Company may outsource the handling of personal information to external parties to the extent necessary to achieve the purposes of use. In such cases, the Company will carefully select appropriate contractors, enter into contracts regarding the proper handling of personal information, and provide necessary and appropriate supervision.

1. The Company may use cookies and similar technologies for the purpose of improving user convenience and enhancing services.
2. Cookies do not contain information that directly identifies individuals, but can be disabled through browser settings. Please note that disabling cookies may prevent some services from functioning properly.
3. The Facility's booking site (https://otter-stay.airhost.co/) may use access analysis tools such as Google Analytics provided by Google LLC. Data collected by these tools is anonymized and does not identify individuals. For details on data collection and processing by Google LLC, please refer to Google LLC's privacy policy.

1. The Company may use third-party advertising services such as Google Ads and Meta Ads to deliver advertisements based on users' browsing history (including retargeted advertisements).
2. In connection with such advertising, advertising providers may collect and use users' website visit history using cookies and similar technologies.
3. Users may opt out of personalized advertising through the settings pages of each advertising provider (Google Ads settings, Meta's ad settings, etc.).
4. For details on the use of cookies and similar technologies by each provider, please refer to their respective privacy policies.

The Company implements appropriate technical and organizational security measures against risks such as leakage, loss, damage or unauthorized access to personal information, and works continuously to improve those measures.

1. In response to a request from the individual concerned or their representative for disclosure, correction, addition or deletion, suspension of use, or suspension of provision to third parties of personal information, the Company will verify the identity of the requester and respond within a reasonable period in accordance with applicable laws.
2. If disclosure or similar action is not carried out pursuant to a legal provision, the Company will promptly notify the individual to that effect.
3. For specific procedures regarding disclosure requests, please contact the enquiry desk below.

For inquiries regarding the handling of personal information and requests for disclosure, please contact:
arthagate Inc. — Personal Information Protection Officer
Email: privacy@arthagate.co.jp

The Company may amend this policy as necessary. Any amended policy will be published on the Company's website and will take effect from the time of publication. In the event of significant changes, a separate notice will be provided on the website.

[Established] 1 September 2025
[Last Revised] 10 July 2026