1. Section 1: All Customers

   1. 1. Regarding this Policy

      This Policy applies to the processing of personal information by Avex Music Creative Inc. (hereinafter referred to as "we", "us", "our", or "The Company") as it pertains to the ONE OR EIGHT Official Site. In cases where provisions of this Policy conflict with any provisions in The Avex Group Privacy Policy (https://avex.com/jp/en/public/privacy/), the provisions of this Policy shall prevail to the extent of such conflict.

   2. 2. How your personal information is collected

      We may collect information such as your name, address, nickname, e-mail address, telephone number, date of birth, gender, nationality, inquiry details, self-introduction, profile photo, and credit card information that you provide to us through inquiry forms on our website, e-mails, letters, etc.
      When you visit our website, we may automatically collect cookies. For more information about how to opt out of cookies being used and collected, please see our Cookie Policy.

   3. 3. Purposes of processing personal information

      We may use the personal information about you in our possession for the following purposes, and only to the extent necessary to accomplish these purposes:

      1. sending you newsletters;

      2. analyzing your interests;

      3. responding to your inquiries;

      4. providing fan club services to you;

      5. shipping products you purchase;

      6. providing customer support for products you purchase;

      7. complying with laws and regulations applicable to the Company;

      8. cooperating with relevant government authorities and agencies, including data protection authorities having jurisdiction and agencies engaged in administrative investigations or criminal investigations;

      9. establishing, exercising, or defending legal claims.

   4. 4. Disclosure and shared use of personal data to recipients

      We may share your personal data with the following types of recipients:

      1. Affiliated Companies: We may disclose your personal data to the companies listed in the "Affiliated Companies" section of the "Group Companies" found on our website (https://avex.com/jp/en/corp/officer/#sec02). (Shared Use) Under Japanese law, the personal data described in Article 2 above (excluding personal data provided by sales platform(s)) may be shared with our Affiliated Companies via the sharing framework provided in the Act on the Protection of Personal Information, for the purposes described in Article 3 (a) through (d) above. In such cases, the Company will be responsible for the management of the personal data. Please refer to Article 7 below for further information such as the address of the Company and the name of the representative.

      2. Employees: We may disclose personal data to our employees who possess authority and require access to such personal data.

      3. Service Providers: We may disclose personal data to service providers such as music production offices, record companies, delivery companies, and IT service providers.

   5. 5. Your Rights

      You may request disclosure, correction, addition, erasure, suspension of use, access of records of provision to third parties, and notification of the purpose of use of your personal data that we hold via the contact information provided in Article 7 below.

   6. 6. Security Control Measures

      In addition to establishing rules for the processing of personal data, the Company takes necessary and appropriate measures to prevent leakage, loss, or damage of personal data processed and to otherwise securely manage personal information. These measures include periodic self-inspections of the status of personal data processing, periodic training for employees regarding the processing of personal data, safeguards to prevent theft or loss of equipment used to process personal data, and enforcement of access restrictions. Furthermore, we exercise appropriate supervision over subcontractors and employees that process personal data.

      You may obtain further details about the security measures we have in place concerning the processing of your personal data by contacting us via the contact information provided in Article 7 below.

   7. 7. Contact Information

      If you have any questions regarding this Policy, your rights, or any other matter relating to the protection of your personal information, please contact us using the following information:

      • Head office address: Sumitomo Fudosan Azabu-Juban Building, 1-4-1 Mita, Minato-ku, Tokyo 108-0073

      • Representative: Takeya Ino

      • Telephone: +81 3-6627-1411 (operating hours: Weekdays 11:00 a.m. – 6:00 p.m. (JST))

      • Inquiry form: https://oneoreight.com/contact/

2. Section 2: Customers in The EEA (European Economic Area) and the United Kingdom

   This section applies to customers in the EEA and the United Kingdom. In cases where provisions of this section conflict with any provisions in The Avex Group Privacy Policy (https://avex.com/jp/en/public/privacy/) or the provisions of Section 1, the provisions of this section shall prevail to the extent of such conflict.

   1. 1. Legal Basis

      Our legal basis to process personal information is based on the following:

      1. Contracts: When we need to process your personal data in order to fulfill a contract we have entered into with you.

      2. Legitimate interest: When processing of your personal data is necessary for the legitimate interests of our own or of third parties (e.g., to respond to your inquiry). However, this is provided that your interests and fundamental rights do not override those interests. You can find out further details about legitimate interests by contacting us using the information listed in Section 1, Article 7.

      3. Consent: When you have given your consent for us to process your personal data. In addition, the withdrawal of your consent does not affect the legality of the processing carried out based on the consent prior to the withdrawal.

      4. Legal applications: If we are required to process your personal information to meet our legal obligations, such as tax laws.

   2. 2. Transfer of your personal data to outside of the EEA or the United Kingdom

      Personal data may be transferred to and stored by third parties outside of the EEA or the United Kingdom. In such cases, we ensure the following:

      1. that the territory to which the data is being transferred has been accredited by the European Commission or designated by the UK Government as ensuring an adequate level of protection for the rights and freedoms you have with respect to your personal data, and;

      2. that the Recipient has entered into a contract with the Company for the transfer of personal data as required by the SCC (Standard Contractual Clauses) approved by the European Commission or other data protection legislation.

      You can find out further details about the protection afforded to your personal data if it is transferred outside of the EEA or the United Kingdom by contacting us using the information listed in Section 1, Article 7.

   3. 3. Duration of Data Retention

      We will retain your personal data for as long as reasonably necessary for the processing of such personal data. For example, personal data that we process to send you our newsletter will be retained for one month after you unsubscribe from our newsletter membership. However, this does not apply if we are required by law to retain personal data for a longer duration, in which case we shall retain such personal data for the duration required by law.

   4. 4. Your Rights

      You have the following legal rights with respect to the personal data about you in our possession:

      1. the right to obtain and access information about the processing of the personal data about you in our possession;

      2. the right to request us to correct inaccurate personal data and to complete incomplete personal data;

      3. the right to request that we erase your personal data in certain circumstances;

      4. the right to request us to restrict the processing of personal data in certain circumstances;

      5. the right to object to our processing of personal data;

      6. the right to receive personal data in a structured, commonly used, and machine-readable format and/or to request us to transfer such personal data directly to the recipient to the extent technically feasible;

      7. the right to withdraw your consent to the processing of your personal data at any time.

      You may exercise your rights by contacting us using the information listed in Section 1, Article 7. If you believe that your rights have been violated by us, you may also lodge a complaint with the data protection authority.

   5. 5. Contact Information

      If you have any questions about this Policy, your rights, or other matters relating to the security of your personal information, please contact us using the contact information provided in Section 1, Article 7. You may also contact our EU/UK representatives using the contact information below.

3. Section 3: Customers in The United States

   This section applies to customers in the EEA and the United Kingdom. In cases where provisions of this section conflict with any provisions in The Avex Group Privacy Policy (https://avex.com/jp/en/public/privacy/) or Section 1, the provisions of this section shall prevail to the extent of such conflict.

   1. For customers in the state of California (California Consumer Privacy Supplement)

      Last updated: December 22, 2025

      If you are a California "consumer" within the meaning of the California Consumer Privacy Act of 2018 (the "CCPA"), as amended by the California Privacy Rights Act of 2020, this California Consumer Privacy Act Supplement ("CCPA Supplement") applies to you.

      “Personal information” means information that identifies, relates, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.
      “Sell,” “selling,” “sale,” or “sold,” means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by the business to a third party for monetary or other valuable consideration.
      “Share,” “shared,” or “sharing” means sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by the business to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration, including transactions between a business and a third party for cross-context behavioral advertising for the benefit of a business in which no money is exchanged.

      1. Collection, use, and disclosure of personal information

      Type, source, purpose, and duration of data retention of personal information to be collected or that has already been collected.

      The following shows the types of personal information we will collect and have already collected during the 12-month period prior to the effective date of this CCPA Supplement:

      Types of information collected	Specific examples
      Identifiers	Real name, alias, postal address, email address, or telephone number
      Personal information described in subdivision (e) of Section 1798.80 of the California Civil Code	Credit card information, inquiry content, and self-descriptions
      Characteristics of protected classifications under California or federal law	Gender, nationality
      Audio, electronic, visual, thermal, olfactory, or similar information	Profile picture

      Types of information collected | Identifiers | Personal information described in subdivision (e) of Section 1798.80 of the California Civil Code | Characteristics of protected classifications under California or federal law | Audio, electronic, visual, thermal, olfactory, or similar information
      Specific examples | Real name, alias, postal address, email address, or telephone number | Credit card information, inquiry content, and self-descriptions | Gender, nationality | Profile picture

      Business and/or Commercial Purposes − Please see Section 1, Article 3 for information about the purposes for collecting and using personal information as well as the business and/or commercial purposes for which the collected information is used.

      We will not use or disclose your Sensitive Personal Information for any purposes other than those specified in the CCPA. Furthermore, we will not collect or use your sensitive personal information for the purpose of inferring your characteristics.

      Categories of sources of collection − The following is a list of the categories of sources from which personal information has been collected during the 12-month period prior to the effective date of this CCPA Supplement.

      • Collected directly from you

      • Collected via sales platform(s)

      Retention period We will retain your personal data for as long as reasonably necessary for the processing of such personal data. For example, personal data that we process to send you our newsletter will be retained for one month after you unsubscribe from our newsletter membership. However, this does not apply if we are required by law to retain personal data for a longer duration, in which case we shall retain such personal data for the duration required by law.

      Sale, sharing, and disclosure of personal information

      1. Sale and sharing of personal information

         We do not sell or share personal information, including personal information of consumers under the age of 16, and have not sold or shared such information in the 12 months prior to the issuance of this CCPA Supplement.

      2. Disclosure of personal information for business purposes

         The following shows (i) the types of personal information we disclosed for business purposes during the 12-month period preceding the effective date of this CCPA Supplement and (ii) the types of third parties to whom we disclosed personal information for business purposes during the 12-month period preceding the effective date of this CCPA Supplement:

      Types of information disclosed	Specific examples	Third parties to whom personal information has been disclosed in the past 12 months
      Identifiers	Real name, alias, postal address, email address, or telephone number	Affiliated companies and service providers (music producers and record companies, delivery companies, IT service providers, etc.)
      Personal information described in subdivision (e) of Section 1798.80 of the California Civil Code	Credit card information, inquiry content, and self-descriptions	Affiliated companies and service providers (music producers and record companies, delivery companies, IT service providers, etc.)
      Characteristics of protected classifications under California or federal law	Gender, nationality	Affiliated companies and service providers (music producers and record companies, delivery companies, IT service providers, etc.)
      Audio, electronic, visual, thermal, olfactory, or similar information	Profile picture	Affiliated companies and service providers (music producers and record companies, delivery companies, IT service providers, etc.)

      2. Your rights and choices

      If you are a California consumer, you have the following rights with respect to your personal information:

      I. Access: You have the right to request that we disclose to you, twice in any 12-month period, the following information that we have collected, used, and disclosed about you during the 12-month period preceding your request:

      1. the categories of personal information about you that we have collected;

      2. the categories of sources from which such personal information was collected;

      3. the business or commercial purposes for collecting such personal information about you;

      4. the category of the third party to whom we disclosed such personal information;

      5. the specific pieces of personal information we have collected about you.

      II. Erasure: You have the right to request that we delete certain personal information we have collected from you.

      III. Correction: You have the right to request that we correct any inaccurate personal information we have collected from you.

      How to submit a request: To submit a request to access, delete, or correct, please contact us using the contact information in Section 1, Article 7, or by dialing the toll-free telephone number below.

      • +81 50-3528-6300

      Request Verification: To protect your privacy and maintain security, we will take steps to verify your identity before granting access to your personal information or responding to your erasure or correction requests.
      When we receive a request to access, delete, or correct from you, we will first ask you to provide us with personal information that you have already provided to us (such as your name and e-mail address). We will verify your identity by comparing the information you have provided with the information we have on file. If we are unable to verify your identity because you do not provide this information, we may deny your request.
      If you designate an authorized representative to make a request to access, delete, or correct on your behalf, we may require the representative to provide a written authorization document that you have signed to make the request. We may also require you to either (i) verify your own identity directly with us, or (ii) verify directly with us that you have authorized such agent to submit the request.

      Additional Information: You have the right not to be discriminated against by us if you exercise any of your rights under the CCPA. To the extent permitted by applicable law, we may charge you a reasonable fee for complying with your request.

      3. Amendments to this CCPA supplement

      We may amend this CCPA Supplement when deemed appropriate. The "Last Updated" date at the top of this CCPA Supplement section indicates when this CCPA Supplement was last updated. Amendments will be effective as of the date we post the revised CCPA Supplement.

      We will post a prominent notice on the site to notify you of material changes to this CCPA Supplement and indicate the date this CCPA Supplement was most recently updated.

      4. Contact Information

      If you have any questions or concerns regarding this CCPA Supplement or our privacy practices, please contact us using the contact information provided in Section 1, Article 7, or in the "How to Submit a Request" section of this CCPA Supplement.

   2. For customers in the state of Nevada

      If you are a Nevada "consumer" within the meaning of the Nevada Privacy Law, you may request to opt-out of any current or future sale of your personal information. Although we are not currently selling your personal information under Nevada law and do not intend to do so in the future, you may request to opt-out of the sale of your personal information by contacting us atONEOREIGHT_CONTACT@av.avex.co.jp. When requesting to opt-out, please include "Opt-Out Request Under Nevada Law" in the subject line of your message.

   3. For customers in all states

      1. Disclosure of personal information

      We process and disclose all types of personal information as described in Section 1, Article 2. For more information on the categories of third parties to whom we disclose your personal information, please see Section 1, Article 4.

      2. Sale of personal information and targeted advertising

      Our disclosure of your personal information to third parties does not constitute a sale of your personal information under the laws applicable to us. In addition, we do not process your personal information for purposes of targeted advertising.

      3. Profiling and sensitive personal information

      We do not process your personal information for profiling purposes to make decisions that have legal or similarly significant consequences.
      The personal information we process may include sensitive personal information as defined by applicable laws and regulations.

      4. Your rights

      To the extent permitted by applicable laws and regulations, you have the following rights:

      1. the right to verify whether we are processing personal information about you and to request access to such personal information (if necessary, in a portable and readily available format);

      2. the right to request us to delete personal information about you;

      3. the right to correct any inaccuracies in personal information about you that we retain;

      4. the right to object to our processing of personal information for targeted advertising and sales.

      To exercise these rights, please contact us at ONEOREIGHT_CONTACT@av.avex.co.jp. Upon verifying your identity, we will respond to your request in accordance with applicable laws and regulations, taking into consideration the category and sensitivity of the personal information that is the subject of the request. We may ask you to provide us with additional personal information in order to verify your identity and protect against unauthorized requests.
      If your request is denied, you may have a right to appeal against us under applicable law.

      5. Reject Tracking

      Some web browsers allow you to set up tracking rejection settings to deny tracking of your activity by sending a Do Not Track (DNT) request header to the websites you visit. Since no uniform technical standard has been developed for tracking denial settings, we do not currently provide support for DNT requests.

4. Section 4: For customers in the People's Republic of China

   This section applies to residents of the People's Republic of China who use the ONE OR EIGHT Official Site. In the event that the provisions of this section conflict with any provisions in The Avex Group Privacy Policy (https://avex.com/jp/en/public/privacy/) or Section 1 of this Policy, the provisions of this section shall prevail to the extent of such conflict.

   1. 1. Processing Methods

      We conduct the collection, storing, usage, processing, transmission, disclosure, provision, deletion, etc. of personal information.

   2. 2. Processing of sensitive personal information

      We will comply with the requirements stipulated by the Personal Information Protection Law of the People's Republic of China (hereinafter referred to in this item as "the Law") when processing sensitive personal information, including informing you regarding the necessity of processing sensitive personal information and the impacts on your rights and interests.
      We treat Citizen Identification Numbers and credit card information as sensitive personal information. The necessity of processing Citizen Identification Numbers and credit card information, and its impact on your rights and interests are detailed below:

      Citizen Identification Numbers

      Necessity of processing
      We need to process your National Identification Number to ship your purchases to you and to provide related support.

      Impacts on your rights and interests

      Citizen Identification Numbers are managed under appropriate security protocols, and the possibility of leakage, etc., impacting your rights and interests are limited.

      Credit card information

      Necessity of processing
      We need to process your credit card number to enable you to make payments.

      Impacts on your rights and interests

      Credit card information is managed under appropriate security protocols, and the possibility of leakage, etc., impacting your rights and interests are limited.

   3. 3. Disclosing personal information

      In the event we disclose your personal information to a third party other than the contractors to whom we outsource the handling of personal information, we will comply with the requirements stipulated by the Law, such as notifying you of the name or title of such third party, how to contact them, the purpose of processing, processing method, and category of personal information. Also, in the event we disclose your personal information to a third party located outside of China, we will comply with the requirements stipulated by the Law, such as notifying you of the name of such third party, how to contact such third party, the purpose of processing, processing method, category of personal information, and the methods and procedures for exercising your rights against the third party under the Law.

      We disclose your personal information to the following third parties located outside of China:

      Name of the third party:

      Infinitize LLC

      How to contact the third party:

      Please use the contact information listed in Section 1, Article 7.

      Purpose of processing by the third party:

      Purposes as stated in Section 1, Article 3.

      Processing methods of third party:

      Methods as described in item 1 above.

      Category of personal information:

      Personal information as described in Section 1, Article 2.

      Methods and procedures for exercising your rights against the third party under the Law:

      Please use the contact information of the Company listed in Section 1, Article 7.

   4. 4. Retention of personal information

      We will retain your personal information for as long as reasonably necessary for the processing of such personal information. For example, personal information that we process to send you our newsletter will be retained for one month after you unsubscribe from our newsletter membership. However, this does not apply if we are required by laws and regulations to retain personal information for a longer duration, in which case we shall retain such personal information for the duration required by laws and regulations.

Revised on December 22, 2025
Enacted on June 20, 2024