Privacy Policy
Recognizing the importance of personal information, we hereby establish and implement this Privacy Policy as follows in order to prevent leakage and other incidents involving personal information and to maintain a framework that enables all users to use our services with confidence. The terms “personal information,” “personally referable information,” “personal data,” and other terms used in this Privacy Policy have the meanings defined in the Act on the Protection of Personal Information.
Article 1Acquisition and Use of Personal Information
We appropriately acquire customers’ personal information and use the personal information acquired from customers only to the extent necessary to achieve the purposes set forth below. When we acquire personal information stated in a document directly from a customer, we will specify the purpose of use in advance.
For membership registration for remittance services (including services relating to the receipt of remittances; the same applies hereinafter).
To provide remittance services, including processing remittances from remitters to recipients.
To conduct identity verification pursuant to the Act on Prevention of Transfer of Criminal Proceeds, the Foreign Exchange and Foreign Trade Act, the Act on Submission of Statement of Overseas Wire Transfers for Purpose of Securing Proper Domestic Taxation, and other applicable laws and regulations, and to confirm eligibility to use our various services.
Where all or part of operations involving the handling of personal information is entrusted to us by another business operator or other party, to appropriately perform the entrusted operations.
To exercise rights or perform obligations under laws and regulations or contracts with customers.
To respond to or answer inquiries or consultations from customers.
To provide customers with information regarding our various services.
To conduct market research and analyses for the purpose of improving our services.
To create backup data.
To take measures such as providing notices or warnings to customers who have engaged in, or are suspected of engaging in, conduct that violates our Remittance Transaction Rules.
To conduct our internal controls and audits.
For other operations incidental to the purposes stated above.
Where the purpose of use of specific personal information is restricted by laws or regulations, we will not use such information for any purpose other than the permitted purpose. Specifically:
Pursuant to Article 26 of the Cabinet Office Order on Funds Transfer Service Providers, when we handle information concerning race, creed, family origin, registered domicile, health and medical care, criminal record, or other special non-public information (meaning information learned in the course of business that has not been made public) relating to individual users of funds transfer services, we will not use or provide such information to a third party for any purpose other than ensuring the appropriate operation of our business or another purpose deemed necessary.
Pursuant to the Act on the Use of Numbers to Identify a Specific Individual in Administrative Procedures, we will not acquire, use, or provide to a third party a customer’s Individual Number or personal information containing an Individual Number for any purpose other than a purpose permitted under that Act.
Article 2Methods of Acquiring Personal Information
We acquire customers’ personal information by lawful and fair means and do not use deception or other wrongful means. We may acquire customers’ personal information by the following methods:
Directly from customers when they register an account for, or use, remittance services.
Automatically in the course of customers’ use of remittance services.
Lawfully from our business partners.
Lawfully from publicly available sources.
Article 3Categories of Personal Information Acquired
The categories of customers’ personal information and personally referable information that we acquire are as follows.
(1) Information provided directly by customers
Name, date of birth, gender, nationality, email address, telephone number, and address.
Occupation, employer, income, assets, source of remittance funds, purpose of transaction, relationship with the remittance recipient, and other information concerning transactions.
Facial photographs, video images, facial recognition data, and information concerning matching results obtained for identity verification.
Information necessary for identity verification (including nationality, status of residence, period of stay, and declarations as to whether the customer is a foreign PEP).
Information stated or recorded on a residence card, Individual Number Card (My Number Card), driver’s license, passport, or other identity verification document (excluding the Individual Number).
Information concerning bank and other financial institution accounts of customers and recipients.
Information concerning biometric authentication settings and authentication results.
Login authentication information for remittance services.
Details of inquiries made to us.
Responses to inquiries from us and information related to requests for confirmation.
Name, date of birth, gender, address, contact details, nationality, relationship with the customer, and other information concerning remittance recipients.
Identity verification information, affiliation, position, and other information concerning representatives, beneficial owners, and persons in charge of transactions of corporations and other organizations.
Documents issued by public authorities or other documents evidencing the personal information listed above.
(2) Information collected automatically or generated
Device information (model, operating system, device identifiers, IP address, etc.).
Access log information (date and time of access, operation history, authentication results, etc.).
Application and service usage history (transaction history, payment history, etc.).
Membership numbers, deposit/remittance card numbers, and other identification numbers assigned by us to customers.
(3) Information provided by third parties
Personal information and personally referable information concerning customers and other persons related to our services that is lawfully provided by business partners, parties entrusting operations to us, financial institutions, or other third parties.
Article 4Management and Protection of Personal Information
We will not provide personal data held by us to a third party without the customer’s consent, except where such personal data is provided in connection with the entrustment of all or part of the handling of personal data to the extent necessary to achieve the purposes of use set forth in Article 1, where such personal data is provided in connection with succession to a business due to a merger or other reason, or in any of the following cases:
Where based on laws and regulations.
Where it is necessary for the protection of the life, body, or property of an individual and it is difficult to obtain the consent of the identifiable person.
Where it is particularly necessary for improving public health or promoting the sound growth of children and it is difficult to obtain the consent of the identifiable person.
Where it is necessary to cooperate with a national government organ, local government, or a person entrusted thereby in performing affairs prescribed by laws and regulations, and obtaining the consent of the identifiable person is likely to impede the performance of those affairs.
When entrusting all or part of the handling of personal data, we will enter into an agreement with the entrusted party requiring it to handle personal data strictly in a manner equivalent to that required of us, appropriately ascertain the status of the entrusted party’s handling of personal data, and otherwise ensure appropriate security control measures. When entrusting the handling of personal data to a third party located in a foreign country, we will confirm, including by investigating the personal information protection laws and regulations of the country in which the entrusted party is located, that appropriate measures for the protection of personal information are in place, and will exercise necessary and appropriate supervision over the entrusted party.
Article 5Provision of Personal Data to a Third Party in a Foreign Country
When providing personal data to a third party in a foreign country, we will do so through appropriate procedures in accordance with applicable laws and regulations. Where such provision is based on the customer’s consent, we will provide the customer, to the extent possible, with information concerning the personal information protection system of the relevant foreign country and other relevant information.
Article 6Procedures for Opting Out of Direct Marketing
If a customer requests that we discontinue direct marketing, we will take measures without delay to discontinue the relevant subsequent use or provision. Important notices, such as maintenance notices sent without limiting the recipients to particular customers, are not subject to this opt-out procedure. To request discontinuation, please contact the inquiry desk specified in Article 11.
Article 7Retained Personal Data
1. Name and address of the business operator handling personal information, and name of its representative
CITY EXPRESS MONEY TRANSFER JAPAN CO. LTD — Shin-Okubo Communication Building 1F, 2-11-23 Hyakunin-cho, Shinjuku-ku, Tokyo 169-0073, Japan — Representative Director & President: Shrestha Mahesh Kumar
2. Purposes of use of retained personal data
As set forth in Article 1.
3. Procedures for requests for disclosure, etc. of retained personal data
As a general rule, only the identifiable person may request disclosure, correction, suspension of use, or other action with respect to retained personal data held by us. However, where there are unavoidable circumstances, a request may also be made by an authorized representative.
Procedure: Requests by the identifiable person to whom the retained personal data relates, or by an authorized representative, may be submitted by visiting our service counter in person or in writing (including by electronic means).
Verification of the identifiable person or authorized representative: For a request made by the identifiable person, we will verify the person’s identity using an official photo identification document such as a residence card, driver’s license, or passport. For a request made by an authorized representative, in addition to verifying the identity of the identifiable person, we will verify the identity of the representative and the relationship between the representative and the identifiable person.
Fees: No fees or other charges are payable to us by customers. However, customers are responsible for communication costs, transportation expenses, and any costs incurred in preparing documents or other materials required for identity or representative verification.
Response: After reviewing the request, we will respond either when the requester visits our service counter in person or in writing (including by electronic means).
4. Measures taken for security control of retained personal data and contact point for complaints regarding the handling of retained personal data
Please contact the inquiry desk specified in Article 11.
Article 8Security Control Measures
We take necessary and appropriate security control measures to prevent leakage, loss, or damage of personal information. We also establish and implement procedures to prevent leakage and other incidents involving personal information. If an incident occurs, we will promptly take corrective measures and implement measures to prevent recurrence.
Article 9Compliance with Laws, Regulations, and Other Rules
We comply with applicable laws and regulations, guidelines, and other rules concerning the handling of personal information held by us.
Article 10Continuous Improvement of the Personal Information Protection Management Framework
We continuously review our management framework for the protection of personal information and make improvements as necessary.
Article 11Response to Inquiries, Consultations, and Complaints
We maintain a framework for appropriately handling inquiries, consultations, complaints, and other matters concerning the handling of personal information, and will respond sincerely and promptly.
Contact
CITY EXPRESS MONEY TRANSFER JAPAN CO. LTD. — Shin-Okubo Communication Building 1F, 2-11-23 Hyakunin-cho, Shinjuku-ku, Tokyo 169-0073, Japan — Telephone: 03-5925-4121
This English version is a translation of the original Japanese version. In the event of any discrepancy or inconsistency between the two versions, the Japanese version shall prevail.
