(1) Take privacy into consideration.
In utilizing the personal information of our customers, etc., we will prioritize the provision of value to each customer and the resolution of local challenges, and will not handle such information in a manner that may infringe on the privacy of individual customers, etc.

(2) Ensure transparency in our privacy protection initiatives.
When acquiring personal information, we will expressly indicate in advance the purposes for which such information will be used in an easy-to-understand manner so that our customers, etc. can understand these purposes.
We will respond to inquiries from customers, etc. regarding their personal information appropriately and in good faith.

(3) Ensure propriety in our collaborations with business partners.
We collaborate with business partners as necessary to continue to provide new value to our customers, etc. and to society. When using personal information with business partners in the course of such collaboration (including provision to third parties, joint use, outsourcing, etc.), we require that our counterparties comply with laws and regulations, and handle personal information in an appropriate manner that respects the privacy of our customers, etc. and other considerations.

(4) Carefully manage the personal information of our customers, etc.
We will use appropriate organizational, personnel, physical, and technological measures to protect the personal information entrusted to us from leakage, theft, falsification, and other such incidents.

Note: Please refer to the JR-West Group Information Security Policy for our policy to protect information assets including personal information.

The following pertains to public announcements, etc. made by JR-West on a standalone basis. For information on public announcements made by Group companies, please contact the specific Group company that made the announcement in question.

We will make public the following matters concerning the personal information regarding our customers, etc. that we collect and retain, in accordance with applicable laws and regulations related to the protection of personal information.
(However, for matters involving Osaka General Hospital of West Japan Railway Company, please refer to “3 (7) Medical information at Osaka General Hospital of West Japan Railway Company.”)

(1) Manager of the handling of personal information

We assume sole responsibility for the handling of personal information of our customers, etc. For our contact point, refer to 3 (5) below.

(2) Personal information that we collect

The personal information that we obtain consists of personal information provided directly by customers, etc. in association with the provision of products, services, etc., personal information obtained automatically through the use of online services, etc. by customers, etc., and personal information otherwise obtained in a lawful manner, including cases where such personal information is obtained from third parties (e.g., Group companies and service providers).

Specifically, we obtain the following personal information regarding customers, etc.

(i) Information related to services, etc. that we provid

• - Name, address, date of birth, email address, telephone number, gender, nationality, name of affiliated company, etc./affiliated educational institution, purchase and usage history, credit card/bank account/digital money information and any principal authentication information associated therewith, passport number, Member ID and password for our services, and Member ID of other companies related to the use of our services
• - Images captured by cameras installed at our facilities
• - Information prescribed in membership terms and conditions that we obtain in the course of our credit card business (Article 13 of the J-WEST Card Member Terms and Conditions)
• - Other information provided by customers, etc. at the time of application for services (including information related to physical condition, illness, allergies, and health conditions obtained in association with the use of our services), etc.

(ii) Information required to carry out our business activities

• - Client information (name, contact information, etc.), personal number required for payment reports, etc.
• - Information provided during the recruitment process, etc.

(iii) Details of inquiries and opinions submitted to us

• - Information contained in correspondence with customers, etc., details of inquiries and opinions, etc.

(iv) Information about telecommunication terminals and information obtained by using cookies, etc.

• - Cookie information, information about activities on websites and other electronic networks, location information, device identification numbers, etc.

In addition, customers, etc. may be required to provide certain personal information when using our services. Customers etc. may refuse to provide personal information to us, but if they do so, restrictions may be imposed on the services we provide to them.

(3) Purposes of use

We will use the personal information of our customers, etc. for the following purposes. We will use personal information of our customers, etc. within the scope of the purposes of use notified or announced at the time when such information is collected, and will obtain consent from customers, etc. when using such information beyond the scope necessary to achieve such purposes of use.

• (i) Providing our merchandise and services, and managing various events, campaigns, etc.
• (ii) Providing information on our merchandise and our services, and on the holding of various events, campaigns, etc.
• (iii) Responding to inquiries, opinions, requests, etc. from customers, etc. related to our merchandise and our services, various events and campaigns, etc.
• (iv) Prevention of accidents, safety checks, crime prevention measures, and security, such as by monitoring crowding conditions, etc.
• (v) Facilitating quality improvement, refinement, research, development, and analysis*1 of our merchandise, services, safety measures, etc., and conducting questionnaire surveys for these purposes
• (vi) Contacting customers, etc. to ensure their safety and prevent victimization by crimes, etc.
• (vii) Taking action in case of lost articles
• (viii) Managing administrative affairs related to our shares and servicing investors*2
• (ix) Providing information related to recruitment and facilitating recruitment operations
• (x) Taking action and conducting administrative affairs pursuant to the provisions of laws and regulations
• (xi) Otherwise performing management and taking action required to carry out our business activities

• *1 Includes analysis by obtaining purchase history, location information, and website browsing history of customers, etc.
• *2 Includes the following actions taken with respect to shareholders:
  • - Exercise of rights and performance of obligations under the Companies Act and related laws and regulations, etc.
  • - Holding and recording general meetings of shareholders
  • - Providing various types of information and services such as shareholder benefits, etc. to our shareholders
  • - Sending questionnaires and other distributed materials to shareholders and implementing various measures, including promoting the exercise of shareholder voting rights
  • - Management of shareholders, including recording and preparation of shareholder data in accordance with various other laws, regulations, and related guidelines, etc.
  • - Researching and analyzing trends, etc. in the use by shareholders of various services we provide, and implementing various policies based on the results of such research and analysis

In addition to the purposes listed in (3), we may statistically process, utilize, or provide to other parties personal information collected from customers, etc. In such cases, the information utilized or provided will not include information that may individually identify the customers, etc.

(4) Provision of personal information to third parties and subcontractors, etc.

We may provide personal information of our customers, etc. to the following types of third parties and contractors, etc. with the consent of our customers, etc., or in accordance with applicable laws and regulations related to the protection of personal information.

• (i) JR-West Group companies (subsidiaries and affiliates, etc., which are listed on our website and in our annual securities reports, etc.)
  Reference: https://www.westjr.co.jp/company/info/group/
• (ii) Our business partners
• (iii) Service providers (including IT service providers and marketing service providers)
• (iv) Relevant authorities, public agencies, and local governments

(5) Handling of pseudonymized and anonymized information under the Act on the Protection of Personal Information of Japan

When creating pseudonymized information and anonymized information, we will do so in compliance with the Act on the Protection of Personal Information and related guidelines, etc., and will handle such information in an appropriate manner.

• (i) When we create pseudonymized information, we will make a public announcement to that effect here or provide notification by other means. In the event that such pseudonymized information is to be shared with other parties, we will make a public announcement to that effect here.
• (ii) When we create or provide anonymized information, we will make a public announcement to that effect here.

(6) Shared use of personal information pursuant to the Act on the Protection of Personal Information of Japan

When creating pseudonymized information and anonymized information, we will do so in compliance with the Act on the Protection of Personal Information and related guidelines, etc., and will handle such information in an appropriate manner.

(7) Retention period

We will retain any collected personal information for the period necessary for the purpose for which it was collected. However, this does not apply if applicable laws and regulations require that personal information be retained for a longer period of time, in which case such personal information will be retained for the period of time required by the laws and regulations.

(8) Transfer of personal information to foreign countries

Personal information of customers, etc. may be transferred to third parties located outside of the countries/regions where the customers, etc. are resident. In cases where we transfer personal information to a third party located outside of the country or region where customers, etc. are resident, we will take one of the following measures to comply with applicable laws and regulations related to the protection of personal information.

• (i) Obtain the consent of customers, etc.
• (ii) Ensure that the destination country/region has been designated as a country/region that provides an adequate level of protection for the rights and freedoms that customers, etc. enjoy with respect to their personal information under applicable laws and regulations related to the protection of personal information.
• (iii) Ensure that the third party has concluded an agreement with us for the transfer of personal information as required by applicable laws and regulations related to the protection of personal information.
• (iv) Take other measures required to comply with applicable laws and regulations related to the protection of personal information.

In addition, customers, etc. may also inquire with the contact point indicated in 3 (5) below for further details on the protection afforded to personal information when it is transferred outside the country or region where the customer is resident.

(9) Protection of the personal information of minors

We will handle the personal information of minors appropriately in accordance with this Privacy Policy. If customers, etc. are minors and the consent of a party with parental authority is required by applicable laws and regulations related to the protection of personal information, we may ask for the consent of such person with parental authority. If we learn that we have unintentionally collected or received personal information of a minor without the consent required by applicable laws and regulations related to the protection of personal information, we will delete the personal information in question.

(10) Authorized personal information protection organizations

The name of the authorized personal information protection organization of which we are a member and the contact point for complaints and consultations are as follows.
Japan Consumer Credit Association
Telephone No. for consultations related to personal information
03-5645-3360

(11) Changes to the Privacy Policy, etc.

We reserve the right to change this Privacy Policy and our public statements related to personal information without notice, but will indicate the date when the updates were made at the bottom of each page.
Note: Please check at the bottom of each page for any changes to the Privacy Policy published for each service, etc.
(Except Saturdays, Sundays, national holidays, and December 29 through January 3.)

(1) Disclosures and notification of purpose of use

If customers, etc. want to request disclosure or notification of the purpose of use of their own information held by us (limited to “Retained Personal Information” under the Act on the Protection of Personal Information in Japan; the same applies hereinafter), we will respond within a reasonable period and scope after duly confirming that those making such requests are in fact the principals themselves.

(2) Corrections, additions, or deletions

If customers, etc. wish to have their own information corrected, added, or deleted, we will, after duly confirming that those making such requests are in fact the principals themselves, correct, add to, or delete the information within a reasonable period and scope provided the information is contrary to the facts.

(3) Suspension of use and erasure

If customers, etc. themselves wish for the use of their information held by us to be suspended or for such information to be erased, we will, after duly confirming that those making such requests are in fact the principals themselves, suspend the use of the information or erase the information within a reasonable period and scope.
Please understand that, as a result of such suspension of use or erasure, we may become unable to provide the services that you wish to receive. We ask for your kind cooperation. (We may not be able to respond to requests for suspension of use or erasure of personal information held in accordance with the relevant laws and regulations.)

(4) Action taken in cases of nondisclosure, etc.

Please note that we will not be able to disclose, etc. personal information in the following specified cases. If we decide not to disclose, etc. personal information, we will notify customers, etc. to that effect and provide the reason for the decision.

(5) Contact points

If you contact us at the contact point below, we will provide you with information on the procedures necessary for customers, etc. to exercise their legal rights under the applicable laws and regulations related to the protection of personal information.

(6) How we accept requests pursuant to the Act on the Protection of Personal Information of Japan

• (i) Please download the “Application Form for Disclosure, Etc. of Retained Personal Information” below and fill in the required information.
• (ii) Please send the completed application form, documents verifying the identity of the customer, and stamps equivalent to the handling fee (¥774 for documents, ¥810 for CD-R) to the address to which the application form should be sent.
  • Note: If you do not submit the set of documents required for disclosure within 3 months, we will send the set of application documents, etc. that we have received up to that point back to you.
  • Note: The disclosure procedure will be initiated when we have received all documents, etc. submitted in association with a request for disclosure, etc., upon their arrival at the address specified by us as the address to which the application form should be sent.
• (iii) We will send notification of disclosure, etc. by postal mail (by mail delivery restricted to receipt by the principal).
  • Note: If such mail cannot be received by the principal to which delivery has been restricted within 6 months, we will dispose of the mail.
  • Note: Please understand that we cannot honor requests of disclosure, etc. that are not made by this method (including direct in-person requests made at stations, etc.).
  • Note: This method is a method for making a request in accordance with the Act on the Protection of Personal Information of Japan. Legal rights under applicable laws and regulations related to the protection of personal information other than the Act on the Protection of Personal Information of Japan may be exercised by contacting us as described in (5) above.
  • Note: If you have any questions, please contact the Personal Information Inquiry Desk (telephone number: 0570-00-8691) for personalized help.
    Guide to Procedures (PDF format, 207 KB)
    Application Form for Disclosure, Etc. of Retained Personal Information (PDF format, 188 KB)
    Power of Attorney (PDF format, 82 KB)

(7) Medical information at Osaka General Hospital of West Japan Railway Company

For information on the handling of medical information at Osaka General Hospital of West Japan Railway Company, please refer to the Privacy Policy (https://www.jrosakahosp.jp/hospital/greeting/ (Japanese only)) posted on the hospital’s website.

The hours of operation of the dedicated contact point for inquiries are as follows, but inquiries will be handled at other times as well.

4.1. For Customers, Etc. in the EEA/UK

This section applies to customers, etc. in the EEA and the UK. This section supplements 2 to 3 above and supersedes any provisions that conflict with 2 to 3 above.

4.2. For Customers, Etc. in the USA

This section applies to customers, etc. in the USA. This section supplements 2 to 3 above and supersedes any provisions that conflict with 2 to 3 above.

For Customers, Etc. in All States

• (1) Disclosure of personal information
  We process and disclose all types of personal information as described in 2 (2) above. For information on the types of third parties to which we disclose the personal information of our customers, etc., please refer to 2 (4) above.
• (2) Sale of personal information and targeted advertising
  The disclosure of personal information of customers, etc. to third parties by us does not constitute a sale of personal information under the laws and regulations that are applicable to our company. Moreover, we do not process the personal information of customers, etc. to facilitate targeted advertising.
• (3) Profiling and sensitive personal information
  We do not process the personal information of customers, etc. for the purpose of profiling for use as a basis for making decisions that would have legal or similarly material repercussions.
  The personal information that we process may include sensitive personal information as defined by applicable laws and regulations.
• (4) Rights of customers, etc.
  Customers, etc. are entitled to the following rights to the extent permitted under applicable laws and regulations.
  • (i) The right to confirm whether we are processing personal information related to customers, etc., and to request access to such personal information (if necessary, in a portable and readily accessible format)
  • (ii) The right to request the deletion of personal information related to customers, etc.
  • (iii) The right to correct inaccuracies in the personal information of customers, etc. held by us
  • (iv) The right to object to the processing of personal information for the purpose of facilitating targeted advertising and sale.

To exercise these rights, please contact us via the contact point provided in 3 (5) above.
We will respond to requests in accordance with any applicable laws and regulations, taking into consideration the type and sensitivity of the personal information that is the subject of the request, after confirming that the party making the request is the principal of the personal information in question. We may ask customers, etc. to submit additional personal information in order to verify the identity of our customers, etc. and to protect them from fraudulent requests.
In the event that the requests of customers, etc. are denied, the customers, etc. in question may be granted the right to lodge an appeal with us in accordance with applicable laws and regulations.

• (5) Refusal of tracking
  Some web browsers allow customers, etc. to configure browser settings to disallow tracking by sending a Do Not Track (DNT) request header to the websites they visit to disallow tracking of their activities. Since no uniform technical standard has been developed for tracking denial settings, we do not currently support DNT requests.

For Customers, Etc. in California (Supplemental Items Related to the California Consumer Privacy Act)
Date of final update: [8/1/2024]

Customers, etc. who are California “consumers” as defined under the California Consumer Privacy Act of 2018 (hereinafter referred to as the “CCPA”), as amended by the California Privacy Rights Act of 2020, are subject to these supplementary provisions related to the CCPA (hereinafter referred to as the “CCPA Supplementary Provisions”).

• (1) Acquisition, use, and disclosure of personal information
  • (i) Type, purpose, source, and retention period of personal information that is to be acquired or has been acquired: The types of personal information (as listed in the CCPA) that we will acquire, or that we have acquired during the 12-month period prior to the effective date of the CCPA Supplementary Provisions are as follows.
    • a. Identifiers: Name, address, date of birth, email address, telephone number, gender, nationality, name of affiliated company, etc./affiliated educational institution, Member ID of other companies related to usage incidental to our services, and terminal identification number
    • b. Other personal information: Information contained in correspondence with customers, etc., and details of inquiries and opinions
    • c. Protected characteristic classification: Information concerning physical body of principals
    • d. Commercial information: Purchase and usage history
    • e. Information about Internet and other electronic network activity: Cookie information and information about activity on websites and other electronic networks
    • f. Audio, electronic, visual, temperature, olfactory, or similar information: Images captured by cameras installed at our facilities
    • g. Information related to occupation or employment: Information provided during the recruitment process
    • h. Sensitive personal information: Passport number, Member ID and password for our services, credit card/bank account/digital money information and any principal authentication information associated therewith, high-precision location information, and information related to illness/allergies/health conditions
    Business or Commercial Purposes
    The business or commercial purposes for which personal information is acquired, used, or disclosed are as described in 2 (3) above.
    Types of Sources from which Personal Information is Obtained
    The following is a list of the types of sources of personal information acquired during the 12-month period prior to the effective date of the CCPA Supplementary Provisions.
    • a. Acquired directly from customers.
    • b. Acquired from a third party such as a Group company or service provider, etc.
    • c. Acquired passively through internet activities of customers, etc.
    Retention Period
    The period for which personal information is retained is as indicated in 2 (7) above.
  • (ii) Disclosure of personal information
    • a. Selling and sharing of personal information
      We do not sell or share personal information, including personal information of consumers under the age of 16, to any third party, nor do we share such information with any third party for the purpose of facilitating cross-contextual behavioral advertising, and have not sold or shared such information in the 12 months prior to the effective date of the CCPA Supplementary Provisions.
    • b. Disclosure of personal information for business purposes
      The following table provides (i) the types of personal information (as listed in the CCPA) that we have disclosed for business purposes during the 12-month period prior to the effective date of the CCPA Supplementary Provisions, and (ii) the types of third parties to whom we have disclosed personal information for business purposes during the 12-month period prior to the effective date of the CCPA Supplementary Provisions.

Types of Personal Information Disclosed	Specific Examples	Third Parties to Whom Personal Information Has Been Disclosed in the Past 12 Months
Identifiers	Name, address, date of birth, email address, telephone number, gender, nationality, name of affiliated company, etc./affiliated educational institution, Member ID of other companies related to usage incidental to our services, and terminal identification number	Group companies, business partners, service providers
Other personal information	Information contained in correspondence with customers, etc., details of inquiries and opinions	Group companies, business partners, service providers
Protected characteristic classifications	Information concerning physical body of principals	Group companies, business partners, service providers
Commercial information	Purchase and usage history	Group companies, business partners, service providers
Audio, electronic, visual, temperature, olfactory, or similar information	Images captured by cameras installed at our facilities	Business partners
Sensitive personal information	Passport number, Member ID and password for our services, credit card/bank account/digital money information and any principal authentication information associated therewith, high-precision location information, and information related to illness/allergies/health conditions	Group companies, business partners, service providers

• (2) Rights and requests of customers, etc.
  If customers, etc. are California consumers, such customers, etc. are entitled to the following rights with respect to their personal information.
  • (i) Access: Customers, etc. have the right to request that we disclose to them, twice within a 12-month period, any and all personal information of the customers, etc. in question that we have acquired, used, and disclosed during the 12-month period prior to such request by the customers, etc.
  • (ii) Deletion: Customers, etc. have the right to request that we delete certain personal information that we have acquired from the customers, etc. in question.
  • (iii) Correction: Customers, etc. have the right to request that we correct any incorrect personal information related to the customers, etc. in question held by us.
  How to Submit a Request
  To request access, deletion, or correction, please contact us via the contact point provided in 3 (5) above. Request Confirmation
  To protect the privacy of our customers, etc. and to maintain security, we will take measures to verify the identity of our customers, etc. before granting them access to their personal information or responding to their requests for deletion or correction.
  When customers, etc. make a request, they must provide us with sufficient information to enable us to reasonably verify that they are the principal of the personal information we have collected, as well as sufficient details related to their request to enable us to properly assess and respond to their request. If we are unable to verify the identity of customers, etc. because they fail to provide such information, we may deny the requests of the customers, etc. in question.
  If customers, etc. use an authorized agent to request access, deletion, or correction on their behalf, we may require such agent to submit documentation that proves that the customers, etc. in question have given such agent signed authorization to make such requests. We may also require customers, etc. to (i) verify their own identity directly with us, or (ii) confirm directly with us that the customers, etc. in question have authorized such agent to submit the request.
  Additional Information
  We do not sell or share personal information of our customers, etc. to or with third parties, and therefore do not respond to opt-out preference signals from Global Privacy Control.
  Moreover, since we do not use or disclose the sensitive personal information of customers, etc. for any purpose other than the specified purposes set forth in the CCPA, such personal information is not covered by rights to limit sensitive personal information. Even if customers, etc. exercise any rights under the CCPA, such customers, etc. have the right not to be treated in a discriminatory manner by us as a result of exercising their rights.
• (3) Changes to the CCPA Supplementary Provisions
  We may change the CCPA Supplementary Provisions as we deem appropriate. The “Date of final update” located at the top of this page indicates the date on which the CCPA Supplementary Provisions were last updated. Changes to the CCPA Supplementary Provisions will become effective when we post the revised CCPA Supplementary Provisions.
  We will post a conspicuous notice on the site to inform customers, etc. of any material changes to the CCPA Supplementary Provisions and indicate the date on which these CCPA Supplementary Provisions were last updated.
• (4) Contact point
  If you have any questions or concerns regarding the CCPA Supplementary Provisions or our privacy practices, please contact us at the contact point provided in 3 (5) above.

4.3. For Customers, Etc. in the People’s Republic of China

This section applies to customers, etc. in the People’s Republic of China. This section supplements 2 to 3 above and supersedes any provisions that conflict with 2 to 3 above.

• (1) How personal information is handled
  We collect, store, use, process, disseminate, provide, disclose, delete, and otherwise handle personal information.
• (2) Sensitive personal information
  We handle bank accounts, principal identification information and passwords, purchase and usage history, electronic payment information, information related to diseases/allergies/health conditions, passport numbers, cookie information/information about activity on websites and other electronic networks, and high-precision location information as sensitive personal information. The necessity of handling sensitive personal information and the implications thereof with regard to the rights and interests of individuals are as follows.
  Necessity of Handling
  The handling of sensitive personal information is considered necessary for the provision of our merchandise and services, and for the operation of various events and campaigns, etc., or to improve quality, make enhancements, and conduct research/development/analysis related to our merchandise, services, and safety measures, etc.
  Impact on Rights and Interests
  Sensitive personal information is managed under appropriate security control measures, and the potential for its leakage, etc. to affect the rights and interests of individuals is limited.
• (3) Provision of personal information
  We will provide personal information to the following third parties located outside of the People’s Republic of China.
  
  • - Name of third parties
    The third parties listed in 2 (4) above
  • - Contact information of third parties
    Please contact us via the contact point provided in 3 (5) above.
  • - Purpose of handling of personal information by third parties
    The purposes described in 2 (3) above
  • - How third parties handle personal information
    The handling methods described in (1) above
  • - Types of personal information
    The personal information listed in 2 (2) above
  • - Methods and procedures for executing rights stipulated in the Personal Information Protection Law of the People’s Republic of China in relations with third parties
    Please contact us via the contact point provided in 3 (5) above.

Social Media Policy(English)

社群媒體使用政策(繁體中文)

社交媒体使用政策(簡体中文)

소셜 미디어 방침(한국어)

นโยบายเกี่ยวกับสื่อสังคม(ภาษาไทย)