Appropriate acquisition, use and storage of personal information

• At the time of acquiring a customer’s personal information, its purpose of use will be made clear to the customer, and it will only be acquired upon consent of the customer. The acquired personal information will be handled appropriately, within the bounds specified in its purpose of use.
• The acquired personal information will not be disclosed or offered to a third party without the customer’s consent. However, personal information may be provided to a third party without the customer’s consent in exceptional cases, as determined by laws and ordinances.
• In order to promote the smooth running of business, the handling of personal information may be consigned to an external contractor etc. If so, an entity with adequate personal information protection standards will be selected, and the observance of such standards will be established through an appropriate contract etc., containing secure control measures.

Protection against loss, destruction, alteration, disclosure, unauthorized access, etc. of personal information

• The Group will maintain strict management of customers’ personal information and implement precautionary measures against all risks, including alteration, disclosure, unauthorized access, etc.
• Specific rules in relation to the appropriate handling and use of personal information will be established, and a responsible person will be assigned to each division in charge of the handling and use of such information.
• Any request, if made from a customer for reference, amendment, update, deletion, suspension of use, etc. of personal information provided by the customer, will be handled promptly, within reasonable limits, only after our confirmation of the customer’s identity.

Disclosure, correction and deletion of personal information

In the case of a request from a customer for the disclosure, etc. of applicable personal information provided by the customer, the Group will respond to the request appropriately after confirming the customer’s identity, except in the following cases:

• There is a risk to the customer’s or a third party’s life, or risk of damage to the customer’s or a third party’s body, assets, or other rights and/or interests
• There is a risk of causing considerable impediment to the reasonable operation of the Group’s business
• Fulfilling the request amounts to a violation of law(s) and/or ordinance(s)

Compliance with laws and regulations and other standards related to personal information

• Executive staff, employees and contractors of the Group will comply with domestic and foreign laws and regulations and guidelines related to personal information protection concerning the handling of personal information.

Continuous Improvement of the Personal Information Protection Policy

• The Group will continuously review and improve the Personal Information Protection Policy, so that personal information protection is effectively implemented.