Thank you for your question.
Our representative, Kida, will answer.
Member information basically remains on file indefinitely, even after a member withdraws.
When joining, member information is entered into our management database using either a paper profile or an iPad.
This information is used to manage membership periods, membership classes, and male member profiles.
However, we do not enter information such as real names, addresses, or dates of birth into the database.
The information necessary for arranging dates is:
- Club name
- Mobile phone number
- Email address
- Management data such as registered class, joining date, and notes from club staff
Documents such as agreements are converted into PDF files and stored digitally (the storage location is confidential). Paper documents are securely destroyed.
When a member withdraws, we flag their member information for deletion so that it no longer appears online.
Operationally, however, the email client used to communicate with members will still retain the club name linked to the member’s email address.
This policy is based on the following interpretation:
“Under Article 30, Paragraph 1 of the Act on the Protection of Personal Information, requests for deletion apply to ‘retained personal data’ rather than ‘personal information,’ and the requirements for approving such requests are limited. They apply only when the request is based on the information having been used for purposes outside those stated or having been obtained improperly.”
Also, if we standardized a policy of completely deleting member information six months after withdrawal, we would be unable to protect members from crimes, fraud, and similar incidents occurring after that period. This would significantly reduce the deterrent effect of operating a members-only club.
As a precaution, we have therefore completely prohibited all members from using their real names. We also recommend using a dedicated mobile phone and email address whenever possible, separate from those used privately.
If someone absolutely wants their original data deleted, we can overwrite the data on an individual basis.
When you mention the leak of mobile phone numbers in South Korea, are you referring to “Entertainment Detective”? That’s frightening...
There was also the case of Ashley Madison, the dating site for extramarital affairs, having its customer information leaked by hackers.
Whenever something like that happens, discussions arise about the handling of personal information by dating sites and businesses related to the adult entertainment industry.
When I studied for the Personal Information Protection Certification exam, what impressed me most was how the Act on the Protection of Personal Information came about.
Originally, the idea was: “As the internet becomes increasingly widespread, let’s make better use of personal information to make society more convenient—and establish rules for how it should be controlled.” That was the foundation of the law. Later, after high-profile incidents such as customer information leaks became major news, the emphasis shifted from utilization to protection.
But I believe balance is important.
I don’t think anyone wants to return to a world where you can’t log in with an ID and password—a world where staff have to look up your information in a paper ledger every time.
That’s why the Universe Group intends to further strengthen the integration of club-specific personal data, such as club names and usage history, in order to improve our services.
