Privacy Portal

KDDI CORPORATION (hereinafter referred to as "KDDI") published the "Privacy Portal" to explain the Philosophy "how KDDI processes Personal Data" and "how customers can manage their own Personal Data" so that they can use safe Services.

For the improvement of the value of our customers' experience and the sustainable development of society

Appropriate Handling

  • KDDI handles personal data appropriately based on the Basic Policy for Data Utilization as clear guiding principles through our business activities. KDDI sets forth this Privacy Policy as our guidelines for handling personal data based on the Basic Policy for Data Utilization. This website is easy to understand the outline of handling personal data based on the Privacy Policy.
Basic Policy for Data Utilization

KDDI handles valuable personal data to contribute to improving the value of our customers' experience and sustaining the development of society. KDDI is responsible for the explanation of the handling of personal data and the processing of information related to customers so that individual customers cannot be identified.

Contribute to improving the value of our customers' experience and sustaining the development of society.

  • KDDI handles valuable personal data to contribute to improving the value of our customers' experience and sustaining the development of society.
  • KDDI respects human rights and the benefit of society, and do not use personal data in such a way that may cause a disadvantage to our customers and society.

Satisfy Customers

  • KDDI respects the wishes of customers and provide appropriate systems for obtaining consent, data management and setup by purpose of use and data type.
  • KDDI provide systems that enable customers to check the status of their consent and data provision.

Strive Toward Transparency

  • KDDI strives toward transparency in clarifying purpose and explanation when we obtain and use personal data.
  • We explain how to use personal data that makes easy to understand, and do not use personal data in a way that makes difficult to understand the purpose.

Safety Management of Personal Data

  • KDDI respects privacy of customers to the greatest extend possible, and handles personal data appropriately based on Privacy Policy and established an internal management system.
  • To protect our customers' valuable data, we establish security systems as set forth in our Security Policy.

Handle personal data within the proper system with Group and partner companies

  • KDDI strives toward offering the optimal customer experience in collaboration with the Group and partner companies.
  • When providing data to Group or partner companies, KDDI ensures proper management of data, including anonymization and statistical processing of data and obtaining prior consent.

KDDI amends this Basic Policy for Data Utilization as clear guiding principles as necessary to keep meeting customers' and society's expectations.

Obtainment of Data

KDDI obtains information through the following situations:

Information collected from written sources such as application forms filled out by customers, or a company website, or verbally collected in order for KDDI to provide services

  • KDDI obtains information when you subscribe to a telecommunication service or register and/or send information from your smartphone when using our services.

Information collected by KDDI for customers' use of KDDI's services, etc.

  • KDDI obtains information when you use or view a service.
    As examples, the following information:
    • Service usage history (including app usage history, e-commerce purchase history, and payment history for payment services)
    • browsing history (including cookies)
      and more

Information obtained from an external party

  • KDDI may obtain personal data from a third party.
    As examples, the following information:
    • Information lawfully obtained from a partner company, etc.
      and more
Purpose of Use

KDDI uses personal data for the following purposes:
Additionally, KDDI will retain the data within the period stipulated by the law and will take measures such as deletion after achieving the purposes defined in the privacy policy.

[1] To provide announcements and other information about services and products to customers

  • KDDI provides notifications for campaigns and services under your subscription and service usage.

[2] To provide services and products

  • KDDI provides services, sends ordered products, and gives points in response to your use.

[3] To survey the usage of services and products

  • KDDI analyzes your usage to improve quality and services.

[4] To continue delivering services and products in a stable manner

  • KDDI performs monitoring and operation for stable delivery of services.

[5] To respond to inquiries from customers

  • KDDI checks your subscription conditions and usage to respond to inquiries.
Process personal data

KDDI analyzes and processes personal data in-house to fulfill our purpose of use as specified in the terms of use of each service and the Privacy Policy.
As examples, the following processes:

Example 1: KDDI analyzes the service usage of each customer, and in combination with basic information (gender, age, etc.), predicts your interests for use to select what information to provide to you.

Process personal data Example 1

Process personal data Example 1

Example 2: KDDI analyzes the usage of each service, predicts the characteristics of customers who are likely to be interested in that service, and provides information to customers who have not yet used the service.

Process personal data Example 2

Process personal data Example 2

Statistical results and models created by statistically or analytically processing customer information are no longer able to identify individuals. These are then handled as statistical information, distinguished from personal data.

Data Used

KDDI handles personal data appropriately based on the terms of use of each service and the Privacy Policy.

As examples, the following information:

Basic information

  • Information related to customers themselves

Gender Age Physical address Family structure

Usage information, terminal information, and information acquired through business and agency

  • Usage information: Your service subscriptions, payment history for payment services, e-commerce purchase history, app usage history, etc.
  • Terminal information: Information on your terminal and OS
  • Information acquired through business and agency: Information acquired to implement the service or business

Service usage history, etc. Terminal information

Location information

  • Geographical and position information of terminal
    For example of uses, check here (in Japanese only)
  • For the use of location information, KDDI may obtain a separate consent from customers.
    KDDI may also use information acquired from external sources or information acquired based on customer's consent.

Location information

Coordination of Personal Data

For the purpose of providing better services and offer more relevant information to our customers, KDDI provides personal data consented by the customer to Group and partner companies. For example, KDDI provides functions such as phone number transfers and address book migration in the context of MNP (Mobile Number Portability) transfers.
Except for cases where required by law, KDDI never provides personal data to any third party without your prior consent. KDDI may provide personal data necessary to fulfill operations with contractors.

Coordination of Personal Data

Coordination of Personal Data

Contractors

  • KDDI may provide personal data necessary to fulfill operations with contractors.
  • If KDDI outsources operations, KDDI verifies that a contractor meets all security requirements, signs a contract with the contractor, and conducts audits as part of control measures to ensure safe handling of personal data.
  • KDDI may outsource business operations related to the handling of specified user information in accordance with the Telecommunications Business Act, to business operators located outside Japan.
    (Click here (in Japanese only) for more information such as the names of the target countries and regions, and details on the legal systems which could affect the handling of specified user information in those countries and regions.)

Group companies & Partner companies

  • KDDI may provide personal data based on the customer's consent to give points and discounts in collaboration with Group companies in order to provide good value service.
  • KDDI may coordinate personal data with Group companies (shared use), provided that they satisfy the conditions of privacy and data governance specified by KDDI, in order to provide better services.
    Shared use with Group companies is listed here (in Japanese only)

  • For the purpose of sending more relevant advertising and information to customers, KDDI may provide data, based on your consent, to Supership (KDDI Group company), which engages in digital advertising business, and/or other Group companies.

    [1] Coordination of Personal Data with Group companies

    • Shared use of information linked to au ID between KDDI Group companies (Click here (in Japanese only) for details)

    [2] Ad delivery in collaboration with Supership

    • Ad delivery using IP address (Click here (in Japanese only) for details)
    • Other digital ad delivery (Click here (in Japanese only) for details)

    [3] Offer in collaboration with Loyalty Marketing

    • e-mail, SMS and +Message (Click Open link in a new windowhere (in Japanese only) for details)

Government/Public agencies & Client companies

  • KDDI may provide anonymized location data and information related to customers based on customer's consent to government/public agencies and/or client companies.

Cloud service providers

  • KDDI may use cloud services outside Japan to store specified user information in accordance with the Telecommunications Business Act in order to accomplish business.
    (Click here (in Japanese only) for more information such as the names of the target countries and regions, and details on the legal systems which could affect the handling of specified user information in those countries and regions.)
  • When selecting cloud services, KDDI verifies whether the service meets all security requirements and implements control measures to ensure safe handling of specified user information.

Statistical results and models created by statistically or analytically processing customer information are no longer able to identify individuals. KDDI provide these as anonymized data to third parties.

Protection of personal data

Security management measures

  • KDDI takes a range of safety control measures, including the establishment of in-house framework, to protect our customers' valuable data and privacy.
Privacy Protection Measures

Compliance with the Policies

KDDI strictly handles customer information and confidential corporate information. By constantly taking appropriate safety control measures against information leak risks and other security risks, KDDI endeavors to earn and maintain the trust of our customers and other stakeholders.
KDDI recognizes the importance of personal information and in order to ensure the thorough protection of personal information, KDDI complies with the Telecommunications Business Act, Act on the Protection of Personal Information, and other relevant laws, regulations, and guidelines.

Security Policy

KDDI strictly handles customer information and confidential corporate information. In order to ensure taking appropriate safety control measures at all times against information leak risks and other security risks, KDDI announces the Security Policy publicly and internally, and declares to follow this Policy.

Privacy Policy

KDDI releases this "Privacy Policy" both internally and externally, and declares its intent to comply with this policy and the "Security Policy" (see separate document) to constantly take appropriate safety control measures to protect personal data.

Management of Personal Data by the Customer

KDDI strive to respect the customer's own intentions and to provide appropriate guidance when obtaining, using, or providing data to third parties. This includes obtaining the customer's consent or devising methods of explanation according to the content.
To enable customers to use our services at ease, KDDI offers functions that allow customers themselves to easily check and change how their data is used by KDDI. Check your consent to the terms of use and KDDI's usage of your data and change your choices as you prefer.
Additionally, customers can request the disclosure or suspension of use of their personal data as stipulated by law. Please refer to the KDDI's Privacy Policy for details on how to make such requests.
KDDI's Privacy Policy

Change my privacy settings
(in Japanese only)
Check/Stop e-mails and SMS
(in Japanese only)
Stop direct mails and telemarketing
(in Japanese only)
About access analytics and ad delivery
Reflecting the Opinions of External Experts

KDDI has an Advisory Board* that consists of external experts who provide opinions on data utilization and protection. KDDI actively takes in these opinions and reflects them in various efforts.

  • Details on the Advisory Board are available here (in Japanese only).