Handling of Customer's Personal Information

Sumitomo Mitsui Finance and Leasing Co., Ltd.

1. Purposes for Using Personal Information

The Company shall use customers’ personal information to the extent necessary to achieve the following business activities and purposes of use in accordance with the Act on the Protection of Personal Information (May 30, 2003, Act No. 57, hereinafter referred to as the Personal Information Protection Act). Furthermore, personal credit information provided by personal credit information agencies and sensitive information specified in the Guidelines for the Protection of Personal Information in the Finance Sector (2017 Personal Information Protection Commission, Public Notice of the Financial Services Agency No. 1) and the Guidelines for Protection of Personal Information in the Credit Sector (2017 Personal Information Protection Commission, Public Notice of METI No.1) shall not be used for any purpose other than those limited by laws and regulations, etc. In addition, the Company shall set forth specifically the purposes of use so that it will be clear to the customer. Also, we shall try to limit the purposes of use according to the circumstances of acquisition. For example, when responding to various surveys, etc., we limit the use to only the calculation of the survey results.

(1) Business activities

  • Real estate and acquisition, renting, and leasing of various goods and properties and their rights, including marine vessels, aircrafts, vehicles, industrial machinery, machine tools, electronic computers, office equipment, medical instruments, commercial equipment, etc.
  • Trading of various used goods and used properties similar to the various goods and properties listed in the preceding item
  • Maintenance work for goods and properties similar to the various goods and properties listed in item ①
  • Consignment of business processes using computers
  • Consulting services for the computerization of business and streamlining of management
  • Financial services
  • Data processing services
  • Financial instruments transactions
  • Design, produce and sales of Computer program
  • Business related to the sale of life insurance
  • Acquisition of shares, etc. and capital contribution
  • All other forms of business incidental or related to the preceding items

(2) Purposes of use

  • To accept applications for each kind of business activity specified in Paragraph (1) above
  • To confirm transactions etc. based on the Act on Prevention of Transfer of Criminal Proceeds, and to confirm the eligibility to use leasing and financial products (hereinafter referred to as General Leasing Business, etc.) and services, etc.
  • To manage repeating transactions, such as date management for transactions in General Leasing Business, etc.
  • To make decisions on the application and repeated use, etc. of the General Leasing Business, etc.
  • To inform, solicit, and provide related after-sales service on products / service information for credit / leasing / financing, and business related to insurance agents
  • For market research and product development in credit / leasing financing, and business related to insurance agents
  • To send advertising and printed materials in credit / leasing / financing, and business related to insurance agents, and to provide sales information and to solicit by telephone
  • To determine appropriateness related to provision of financial products and services, such as determining accordance with the principle of suitability, etc.
  • To provide personal information to third parties to the extent necessary for the proper performance of business, such as when providing personal information in the course of credit business to the credit information agencies with whom we are affiliated
  • To properly perform activities entrusted to the Company when all or part of the processing of personal information is entrusted by other businesses, etc.
  • To exercise rights and perform obligations pursuant to the contract with customers or to the law etc.
  • For research and development of financial products and services through conducting market research, data analysis, and surveys, etc.
  • To make various proposals regarding financial products and services, such as sending direct mail
  • To make various proposals for products and services of partner companies, etc.
  • For the termination of various transactions and for the post management after the termination of the transaction
  • To improve the quality of customer support
  • To properly and smoothly perform transactions with customers
  • The above items, ⑤, ⑥, ⑦, ⑫, ⑬, ⑭, ⑯, ⑰, include collecting and analyzing information, etc. from customer transaction history, website browsing history, information obtained from group companies and joint use companies, and providing information and delivering advertisements on products and services that meet customer needs.

These purposes of use shall be disclosed on the Company's website or informed by writing when notifying the individual.
Unless the purposes of use are clear from the perspective of the status of acquisition of personal information, the purposes of such use shall be clearly stated to the person when such personal information is acquired directly in writing in connection with the conclusion of a contract with the person.
In addition, when conducting credit transactions, the purposes of use shall be clearly stated, and consent of the person shall be asked for such purposes of use.

2. Proper Acquisition of Personal Information

To the extent necessary to achieve the purposes of use identified in “1. Purposes for Using Personal Information” above, the Company shall obtain your personal information from, for example, the following sources by appropriate and legal methods:

  • When provided directly by the documents, such as lease contracts, that are required to be filled out by the customer (written applications submitted by the customer, or data entered by the person on a screen such as the web, etc.)
  • When personal information is provided by third parties, such as a personal credit information agency

3. Procedures regarding Requests for Disclosure

In the event of a request for disclosure, correction, suspension of use, etc. from the customer or the customer's agent in accordance with Personal Information Protection Act, Article 32, Paragraph 2 and Article 33, Paragraph 1 (including cases where it is applied mutatis mutandis pursuant to Paragraph 5 of the same Article) Article 34, Paragraph 1, or Article 35, Paragraphs 1, 3, or 5 (These procedures are collectively referred to as "Disclosure Request Procedures"), the Company shall respond to the Disclosure Request Procedures, in accordance with the provisions of each of the same Articles. In addition, when the customer wishes to be notified of the purposes of use pursuant to Article 32, Paragraph 2 of the Protection of Personal Information Act, or when the customer has requested the suspension of the use of personal data retained in accordance with Article 35, Paragraphs 1, 3, or 5 of the Personal Information Protection Act, please contact the nearest Business Department / Retail Business Customer Support Sect.

(1) Items of retained personal data, etc., subject to Disclosure Request Procedures

  • Name, address, telephone number, date of birth, workplace (workplace name or profession / telephone number), transaction balances (subjects, balances), information on transaction history, etc.
  • Records of personal data provided by third parties as stipulated by laws and regulations
    • Records of providing data to third parties
      • Date and time when the personal data was provided
      • Name and address of such third parties, and if it is a corporation, the name of its representative (or if it is a non-corporate organization and has a representative or manager, name of such representative or manager). (If the data is provided to unspecified large number of people, to that effect.)
      • Items sufficient to identify said person, identified by such personal information, such as name and other items
      • Items of such personal data
      • (If provided with the consent of the person) specify to such effect
    • Record of third parties providing data to the Company
      • The date and time when the personal data was provided
      • Name and address of such third parties, and if it is a corporation, the name of its representative (or if it is a non-corporate organization and has a representative or manager, such representative or manager).
      • Background of the acquisition of such personal data by said third parties
      • Items sufficient to identify said person, identified by such personal information, such as name and other items
      • Items of such personal data
      • (If opted-out) it has been publicly disclosed in accordance with the provisions of Article 27, Paragraph 4 of the Personal Information Protection Act
      • (If provided with the consent of the person) specify to such effect

(2) Contact for Disclosure Request Procedures

  • All Business Departments and Retail Business Customer Support Sect. in Japan
  • When sending the request by mail, please send the prescribed request form and the necessary documents to the following address.
Contact for Disclosure Contact Address
Retail Business Customer Support Sect. 0120-917-034 3-10-19 Minamisenba, Chuo-ku, Osaka
Business Department Domestic locations Domestic locations

(3) Items to be submitted

  • Request for Disclosure Request Procedures
    • -Request for personal information disclosure (when the disclosure request is based on the Personal Information Protection Act, Article 33, Paragraph 1 (including cases where it is applied mutatis mutandis pursuant to Paragraph 5 of the same Article.)
    • -Request for correction / addition / deletion of personal information (when correction / addition / deletion is based on Article 34, Paragraph 1 of Personal Information Protection Act)
    • -Request for suspension of use of personal information (when the request is based on suspension of use or suspension of provision to third parties pursuant to Article 35, Paragraphs 1, 3, or 5 of the Personal Information Protection Act)
  • Documents for identification (one copy of driver's license, passport, etc.)
  • In the case of a request for disclosure by a legal agent, the documents to confirm that the person has the right to act on behalf of the customer are required, in addition to the above ②. In the case of a request by a voluntary agent, an authorization letter prescribed by the Company as well as the documents to confirm that the person has the right to act on behalf of the customer (such as the seal certificate of the person) are required, in addition to the above ②.

(4) Fees

In the case of request for disclosure based on the Personal Information Protection Act, Article 33, Paragraph 1 (including cases where it is applied mutatis mutandis pursuant to Paragraph 5 of the same Article.), the customer shall be charged the fees prescribed by the Company.
When disclosure by electromagnetic record prescribed by the Company is requested, a fee of 1,100 yen (including consumption tax) will be added to the following.

Information to be requested for disclosure Fee (including consumption tax)
Name, address, telephone number, date of birth, workplace (workplace name or profession / telephone number) Everything to the left 880 yen
Transaction balance (subjects, balances) Each specific day 2,200 yen
Information related to transaction history 1 month record (*) 550 yen
Records provided by third parties 1 year record (*) 1,100 yen
Information other than above Per item 1,100 yen

* Each period is calculated on a calendar month basis. (Example) From April 25, 2020, to May 10, 2020 is calculated as two months. From December 2021 to April 2022 is calculated as two years.

(5) Response method

We shall respond in writing or by electromagnetic records prescribed by the Company without delay, either by handing it to the customer directly at our Business Department or Retail Business Customer Support Sect., or by mailing it to the address provided by the customer. Please note that even in the case of a request made by a representative, we may respond directly to the person.

(6) Purposes of use of the personal information obtained in connection with the Disclosure Request Procedures

Personal information obtained by the Company through disclosure requests shall be used in the investigation for such procedures, to verify the identity of the person and representative, to collect fees, and to respond to such disclosure requests.

(7) Procedures for when the Company does not disclose

Please note that, in the following cases, we shall not disclose retained personal data or records provided by third parties. If we decide not to disclose it, we will notify the customer to that effect together with the reason for doing so. Even in the case of non-disclosure, the prescribed fee will be charged.

  • When we cannot verify the person's identity
  • When request is made by a representative, but we cannot verify that the representative has the authority to act on behalf of the person
  • When there is an error in the prescribed request documents
  • When the fee is not paid within the specified time period
  • When the information subject to the Disclosure Request Procedures does not fall under the retained personal data or records provided by the third parties
  • When there is a risk to harm the life, body, or property, etc. and other rights or interests of the person or third parties
  • When there is a risk of significant disruption to the proper performance of the Company's operations
  • When the third parties record requested for disclosure falls under the provision of a Cabinet Order that the disclosure of clarifying its existence or non-existence would harm the public interest or other interests
  • When it may violate other laws and regulations

4. Handling of Sensitive Information

In accordance with the Guidelines for the Protection of Personal Information in the Credit Sector (2017 Personal Information Protection Commission, METI Notice No.1) and the Guidelines for Protection of Personal Information in the Finance Sector (2017 Personal Information Protection Commission, Financial Services Agency Notice No.1), the Company shall not acquire, use, or provide to third parties sensitive information (personal information requiring special care as specified in Article 2, Paragraph 3 of the Personal Information Protection Act and information on individuals' membership in a labor union, family origin, registered domicile, health care, and sex life (among these, excluding the matters falling under the category of the personal information requiring special care) (excluding any information made public by the person in question themselves or by a national government organ, local public entity, or any of those set forth in the items of Article 57, Paragraph 1 of the Act or the items of Article 6 of the Rules, and seemingly-clear information acquired by visual observation, filming, or photographing of the person in question) except as set forth in the Guidelines. In addition, sensitive information is limited to the purposes of use based on laws and regulations, so it shall not be used for any purposes other than those specified by laws and regulations.

5. Ensuring the Accuracy of Personal Data

The Company shall strive to ensure that personal data is accurate and up to date to the extent necessary to achieve the purposes of use. In case of any changes in the items reported by customers, please inform the branch in writing.

6. Provision and Use of Personal Information by the Personal Credit Information Agency and Its Members

  • The Company has been given the customer's consent to the provision / use of personal information by personal credit information agency and its members (including the Company) through the application forms, contracts, etc. as follows, in accordance with Personal Information Protection Act, Article 27, Paragraph 1.
    • In cases where personal information of customers is registered to the personal credit information agency that the Company is affiliated with and to the personal credit information agencies affiliated with them (including information on the contents of contracts registered by members of each such agency, the status of repayments, etc., as well as official gazette information such as dishonored payments, bankruptcy, etc.), the Company shall use them for credit transaction decisions (i.e., an investigation of the ability to repay. This includes management after concluding contracts.).
    • The following personal information (including its change history) is registered with the personal credit information agency that the Company is affiliated with and is used by the personal credit information agency and its members for their credit transaction decisions.
      Name of the affiliated agency Registration information Registration term Registration contents
      Credit Information Center CORP. (CIC) (Designated Credit Bureau under the Money Lending Business Act and the Installment Sales Act) (1) The fact that the application was made For six months from the inquiry date
      • - Information to identify the person, such as name, date of birth, address, telephone number, workplace, workplace telephone number, driver's license number, etc.
      • - Information on the contract, such as contract documents, contract date, loan date, contract amount, loan amount, guaranteed amount, name of the product, the number of payments, etc.
      • - Information related to the status of payment such as usage balances, payment date, full payment date, delinquency, etc.
      (2) Objective facts regarding the contract During the term of the contract and for five years after the termination of the contract
      (3) The fact that the payment of the debt was delayed During the term of the contract and for five years after the termination of the contract
      Japan Credit Information Reference Center Corp. (Designated Credit Bureau under the Money Lending Business Act) (1) Information related to the facts of the application For 6 months of the inquiry date - Name, date of birth, telephone number, driver's license number, etc., and application date, application product category, etc.
      (2) Information to identify the person During the term of the contract and for five years after the termination of the contract - Name, date of birth, gender, address, telephone number, workplace, workplace telephone number, driver's license number, etc.
      (3) Information related to contents of the contract - Type of contract, contract date, loan date, contract amount, loan amount, guaranteed amount, etc.
      (4) Information related to the status of repayment - Payment date, planned payment date, balance amount, full payment date, delinquency, elimination of delinquency, etc.
      (5) Information related to the transaction facts During the continuation of the contract and for five years after the termination of the contract (information regarding the assignment of claims is for one year from the date of the actual assignment of the claim) - Claim collection, debt consolidation, guarantee fulfillment, forced cancellation, bankruptcy filing, loan transfer, etc.
  • The Company is engaged in the joint use of personal data in accordance with Article 27, Paragraph 5, item iii of Personal Information Protection Act with personal credit information agencies that the Company is affiliated with, as described below. However, the contract after the full enforcement of the Personal Information Protection Act (April 1, 2005) has been agreed upon by the customer as described in (1) above.
    • Items of Personal Data to be used jointly: Information posted in the official gazette (name, address, bankruptcy, date, etc.)
    • Scope of joint users: Members of CIC and members of the Japan Credit Information Reference Center Corp.
    • Purposes of use: Decision on the credit transaction of CIC members and members of the Japan Credit Information Reference Center Corp.
    • The personal credit information agencies to which the above personal credit information agencies have partnerships are as follows:
      Japanese Bankers Association Personal Credit Information Center
      Address 1-3-1 Marunouchi, Chiyoda-ku, Tokyo 100-8216, Japan
      Telephone number 81-3-3214-5020
      URL https://www.zenginkyo.or.jp/en/pcic/

      * Personal credit information agency whose members are mainly financial institutions and their affiliates

  • In addition to the above, personal information above may be provided to or used by the personal credit information agency and its members, to the extent necessary to ensure the protection and proper use of personal information, such as keeping it accurate and up-to-date, handling complaints, and monitoring the compliance of rules to the members by the personal credit information agency.
  • CIC CORP. is as follows. The membership qualification of each agency and the name of its members are listed on the website of each agency. The disclosure of information registered at personal credit information agencies shall be carried out by each agency.
    CIC CORP
    Address Shinjuku First West Bldg.,15th floor, 1-23-7 Nishishinjuku, Shinjuku-ku, Tokyo, 160-8375, Japan
    Telephone number 0120-810-414
    URL https://www.cic.co.jp/en/

    * Designated Credit Bureau under the Money Lending Business Act and the Installment Sales Act

  • the Japan Credit Information Reference Center Corp. is as follows. The membership qualification of each agency and the name of its member are listed on the website of each agency. The disclosure of information registered at personal credit information agencies shall be carried out by each agency.
    The Japan Credit Information Reference Center Corp.
    Address 1-10-14 Kitaueno, Taito-ku, Tokyo, 110-0014 Japan
    Telephone number 0570-055-955
    URL https://www.jicc.co.jp/

    * Designated Credit Bureau under the Money Lending Business Act

7. Entrustment of Personal Information

To the extent necessary to achieve the purposes of use, the Company may entrust all or part of the handling of personal data, for example, in the following cases. In addition, we shall provide necessary and appropriate supervision of the entrustee upon entrustment.

  • Work related to sending Transaction Notifications (Statement)
  • Work related to sending direct mail
  • Work related to the operation / maintenance of information systems

8. Joint Use of Personal Information

The joint use specified in this paragraph shall be implemented under prescribed system maintenance, such as to the extent necessary to prevent unfair harm to the interests of customers. In addition, where there are restrictions imposed by laws other than the Personal Information Protection Act, such as the Financial Instruments and Exchange Act, we shall handle it in accordance with such laws and regulations.

(1) Joint use with SMBC Group

In order to provide a range of products / services with higher added value and to implement / strengthen business administration and risk management for the entire group, by strengthening cooperation with the group companies of SMBC Group, the Company will jointly use customer personal data in accordance with Article 27, Paragraph 5, item iii of the Personal Information Protection Act as follows:

  • A.Items of personal data that are jointly used
    • Information related to attributes (Information related to customers, such as address, name, date of birth, workplace, title, telephone number, e-mail address and other contact information, and information related to their family members, etc.)
    • Information related to finance (income / expenditure, status of assets / liabilities, etc.)
    • Information related to transactions (types of products / services, transaction amounts, contract dates, transaction needs, etc.)
    • Information required for the management of transactions (various management numbers, such as trading department / business partner numbers, etc., transaction records / history, and information related to decisions on credit, etc.)
  • B.Scope of joint users

    Companies publicly announced in accordance with Article 27, Paragraph 5, item iii of the Personal Information Protection Act among Sumitomo Mitsui Financial Group and any of its consolidated companies and equity method affiliated companies described in the Securities Report, etc.

  • C.Purposes of use for joint use
    • Planning / development of various products / services to meet the needs of customers of each SMBC Group company, and individual proposals / guidance regarding various products / services. (*1*2)
      - For example, each group company shall jointly develop and propose products / services that meet the needs of customers.
    • *1This includes analyzing customer trading history, website browsing history and other information in order to deliver advertisements about products and services that meet customer needs.
    • *2This includes usage as statistics for planning, development, proposals and guidance of various products and services that meet other customer needs.
    • Appropriately implement business administration / risk management as a group, including the understanding / management of various risks.
      - The Group company shall implement and strengthen business administration / risk management for the whole Group and provide customers with stable and continuous service.

(2) Joint use with SC Club Co., Ltd.

In accordance with Article 27, Paragraph 5, item iii of the Personal Information Protection Act, the Company shall jointly use customer personal data in order to make decisions on transactions and to manage the claims after the conclusion of the contract, including the customer's contract application (hereinafter referred to as "this Application") by strengthening cooperation with SC Club Co., Ltd.

  • A.Items of personal data that are jointly used
    • Information such as the name of the customer, etc., age, date of birth, address, telephone number, e-mail address, workplace, family structure, residence status, etc. (including information that has changed after the contract was concluded) that the customer and the planned joint guarantor (hereinafter referred to as the Customer, etc.) have stated in the prescribed application form.
    • Application date, contract date, product name, type of service, quantity / unit, contract amount, number of payments, and payment period related to the application
    • Information such as the driver's license number, or a number or symbol sufficient to identify the customer, etc., in the identification documents
    • The outstanding balance and the monthly payment status after the commencement of payment for this application
    • To investigate the ability of customers to pay in connection with this application, or to investigate the ability to pay in the process of payment, the assets, liabilities, income, expenditure of customers, etc. declared by customers, etc. and lease credit usage history collected by our company, and past debt payment status
    • Information that records telephone calls with customers, etc. in order to ensure quality of customer support operations
  • B.Scope of joint user

    SC Club Co., Ltd.

  • C.Purposes of use for joint use
    • For proposals regarding financial products and / or services, such as direct mailings, as well as for sales guidance and solicitation by telephone, etc.
    • Decisions concerning applications and continuous use of financing
    • Confirmation of transactions and / or negotiations with the customer, among other facts
    • For market research, analysis, and research-and-development of financial products and / or services
    • For performing transactions with customers appropriately and smoothly

(3) Joint use in the Company (Sumitomo Mitsui Finance and Leasing) Group

In order to provide higher value-added products and services, and to implement and strengthen business administration and risk management for the entire Group by strengthening group collaboration, the Company shall jointly use customer personal data in accordance with Article 27, Paragraph 5, item iii of the Personal Information Protection Act as follows:

  • A.Items of personal data that are jointly used

    Information such as name, address, telephone number, etc. (including any information changes that you have received from the customer, etc.) and public information in the official gazette and the certified copy of commercial register, etc., to the extent necessary to achieve the following purposes of use

  • B.Scope of joint users

    Companies below, which are our group companies:
    SFI Leasing Co., Ltd., SMFL Rental Co., Ltd., AJCC Corp., SC Club Co., Ltd., SMFL MIRAI Partners Co., Ltd. and Sumitomo Mitsui Auto Service Co., Ltd.

  • C.Purposes of use for joint use
    • For proposals and guidance, and research and development of various products and services, etc.
    • For decisions on proposals for various products and services, etc.
    • For the appropriate implementation of business administrations as a group, including understanding and management of various risks

(4) Name / address / representative name of the person responsible for the management of personal data *

Sumitomo Mitsui Finance & Leasing Co., Ltd.
1-3-2 Marunouchi, Chiyoda-ku, Tokyo
* For the name of the representative, please refer to Corporate Information page on our website. [Corporate Information _ About SMFL _ Corporate Profile]

(5) Other

For customers wishing to discontinue various guidance / communications such as the delivery of direct mail based on joint use, please contact the following.
(Contact for inquiries regarding the joint use of customer information by the SMBC Group)
Telephone number: Customer's Trading Department or Business Planning Dept. 81-3-5219-6400
Office hours: Weekday 9:00-17:30

9. Affiliated Authorized Personal Information Protection Organization

The Company is a member of the Japan Consumer Credit Association, which is an authorized personal information protection organization under the Personal Information Protection Act.

Contact for inquiries

Contact for personal information consultation with the Japan Consumer Credit Association
Telephone number 81-3-5645-3360 Japan Consumer Credit Association

10. Language

This “Handling of Customer’s Personal Information” is made in Japanese and translated into English under Japanese Law. The Japanese text is the original and the English text is for reference purposes. If there is any conflict or inconsistency between these two texts, the Japanese text shall prevail.

Related pages