1.Information collected, held, and used by the Company

The Company may collect the following personal information from the customer, merchants, the credit card issuer or the acquirer.

1. (1)

   Card-related information: card number or a version converted into a unique identifier, issuing country, issuer identification number, card type, membership start date, or expiration date

2. (2)

   Contact information: name, address, telephone number, email address, other messaging tool ID

3. (3)

   Transaction and financial information: transaction date and time, transaction amount, number of transactions, transaction country, merchant name and location and other merchant-related information, local currency code, transaction account number, other transaction logs

4. (4)

   Device information: location information of the device used for payment, IP address, device information, device score

5. (5)

   Information regarding communications with you: survey information

6. (6)

   Information relating to fraudulent use: dates and times, amounts, types of fraud, and other information relating to fraudulent use

7. (7)

   Aggregated and statistical information: account score, gender, age group, region

2.Purpose of use

The Company might use a your personal information for the following purposes:

1. (i)

   For improvement of product and service quality, and development of new products and services

2. (ii)

   For marketing analysis regarding the use of JCB cards

3. (iii)

   For integrated management of data among the Company's affiliates

4. (iv)

   For detection and prevention of fraud, and for analysis of other unauthorized use

3.Legal basis for processing

The Company's legal basis for processing each your personal information is as set forth below, to the extent that such legal basis is required and applicable under the relevant data protection laws and regulations.

4.Retention period for personal information

We will keep your personal information on file for as long as is necessary to achieve our purposes listed in the table in section 3 Legal basis for processing above.
We only keep your personal information as permitted by law applicable to us, which is typically for maximum period of 10 years or otherwise longer if it is specifically provided by law.

5.Method for sharing personal information; provision and data transfer of personal information

The Company might share with the following entities personal information collected for the purposes described above.

The Company's affiliates

• ・

  Our service providers, for the purposes of providing services to the Company

• ・

  Financial institutions, merchants, payment processors, and other third parties that are subject to appropriate confidentiality and use restrictions, for the purposes described above

• ・

  Third parties who help the Company to detect and prevent fraudulent transactions. These third party fraud service providers the Company uses to help the Company detect and prevent fraudulent transactions are responsible for their processing of personal information and will use it for the purposes described in their own notices

• ・

  Third parties, such as third-party advertising partners, who may use data to help the Company with our advertising programs

6.Security

The Company takes reasonable physical, technical, organizational, and procedural measures to protect personal information within the Company's organization against loss or theft and against unauthorized use, disclosure, or modification. If the Company subcontracts the processing of personal data to a subcontractor, the Company will appropriately supervise such subcontractor.

7.Your Rights and options

Depending on the country where a you are located, the you might be granted the following rights, among others, in relation to personal information: right of disclosure; right to access; right to rectify; right to erase; right to restrict processing; right to object to processing; right to withdraw the your consent; right to refuse processing for advertising or promotional purposes; right of self-defense; right of data portability; right not to be subject to automated decision-making; and right of disclosure of reasons for denial of the exercise of rights. For example, the Act on the Protection of Personal Information of Japan grants the right to request the following in relation to personal information: notification of the purpose of use; disclosure; correction, addition, or deletion of content; suspension of use, erasure, or suspension of third-party provision; and disclosure of records of third-party provision. If you intend to exercise any of these rights, you can request to make an inquiry using the contact address stated in Clause 8 below.

8.Contact address for inquiries, etc.

Business Operator Handling Personal Information
Please use the following contact details for questions, complaints, or inquiries regarding this Policy.
JCB Co., Ltd.
Aoyama Rise Square 5-1-22 Minami Aoyama,
Minato-ku, Tokyo 107-8686, Japan
Email: jcb-eudataprotection@info.jcb.co.jp

JCB International Co., Ltd.
Aoyama Rise Square 5-1-22 Minami Aoyama,
Minato-ku, Tokyo 107-8686, Japan
Email: jcbinter-eudataprotection@info.jcb.co.jp