Seven & i Holdings Personal Information Protection Policy

　Seven & i Holdings Co., Ltd. (hereinafter "the Company") will properly handle personal information received from customers and others in accordance with the "Group Personal Information Protection Policy".
　The publicly disclosed information regarding the Company’s handling of personal information is as follows.

Shigeki Kimura
Representative Director & Vice President
Seven & i Holdings Co., Ltd.
8-8 Nibancho, Chiyoda-ku, Tokyo

1Acquisition and Utilization Purpose of Personal Information
The Company will acquire personal information through lawful and fair means. The utilization purposes are as follows.
1. iPersonal information of customers
  
  The Company will acquire and utilize 7iD member information as customer information. For the utilization purposes, please refer to "７iD会員情報の取扱いについて".
2. iiPersonal information of business partners
  For essential business communications and contract fulfillment
  
  For managing business partner information
3. iiiPersonal information of shareholders
  For the purpose of exercising rights and fulfilling obligations pursuant to the Companies Act
  
  For the provision of various benefits from the Company to our shareholders
  
  For implementing various measures to facilitate harmonious relationship between the Company and its shareholders, viewing shareholders as members of an association
  
  For shareholder management, including compiling information according to laws and regulations
4. ivPersonal information of applicants and prospective candidates
  For applicants and prospective candidates communication and information sharing
  
  For the selection process
  
  For employment procedures post-hiring decision
  
  For other purposes incidental to the above
2Provision of Personal Information to Third Parties
The Company will not provide personal information to third parties without the information subject’s consent, except in the following circumstances.
- When required by law or regulation
- When necessary to protect a person’s life, body, or property, and obtaining the information subject’s content is difficult
- When specifically necessary to enhance public health or promote the sound development of children, and obtaining the information subject’s consent is difficult
- When it is necessary to cooperate with a national government agency, a local public entity, or a party outsourced by them in executing affairs prescribed by laws and regulations, and obtaining the information subject’s consent may impede the execution of such affairs
- When personal information handling is outsourced within the scope necessary to achieve the utilization purpose
- When personal information is provided due to business succession resulting from mergers, acquisitions, or other reasons.
- When personal information is provided for joint utilization specified in "3."
3Joint Utilization of Personal Information
The Company will share 7iD member information within the companies as defined within "７iD会員情報の取扱いについて".
4Security Control Measures
The main security measures implemented by the Company to prevent the leakage, loss or damage of personal information are as follows.
1. iEstablishment of various internal policies and regulations
  
  Establish procedures for personal information handling throughout its lifecycle, including acquisition, utilization, storage, provision, deletion, disposal.
2. iiSystematic security control measures
  
  The Company will establish a dedicated management department and assign a responsible officer for personal information handling. Moreover, the Company will implement a reporting and communication system to notify this department and officer should any violations or indications of violations of laws and regulations be detected. Furthermore, the Company will operate a verification process to monitor personal information handling practices.
3. iiiHuman security control measures
  
  The Company will incorporate precautions for handling personal information and confidentiality requirements into various regulations, and provide regular training to all executives and employees.
4. ivPhysical security control measures
  
  The Company will restrict access to designated areas where personal information is handled implementing measures, including locking, monitoring, and entry/exit controls. Moreover, measures to prevent theft or loss are implemented when using devices, electronic media, documents containing personal information.
5. vTechnical security control measures
  
  The Company will implement access controls for personal information, thereby limiting access to authorized executives and employees. Moreover, the Company will introduce mechanisms to protect information systems that handle personal information from unauthorized access.
6. viAdaptation to the external environment
  
  When handling personal information in a foreign country, the Company will understand the local data regulations and periodically review and revise necessary security measures to ensure appropriate protection.
5Disclosure / Correction / Suspension of Use / Inquiries Regarding Retained Personal Data the Business Holds
1. iWhen you request disclosure, correction, addition, deletion, suspension of use, objection to third-party provision, or disclosure of third-party provision records for your personal data the business holds under the Act on the Protection of Personal Information, the Company will verify your identity and confirm that the request meets the requirements to promptly disclose the requested information or perform the necessary corrections, deletions, or use restrictions to the extent required.
  Notwithstanding the above, the Company may be exempt from these obligations as provided for by the Act on the Protection of Personal Information or other applicable laws and regulations.
2. iiTo make any of the above requests or for inquiries regarding personal data the business handling, please contact us through the following contact information.
  Please note that a fee will be charged for the disclosure of retained personal information and third-party provision records according to the disclosure method.
  
  【The information desk】
  Seven & i Holdings Co., Ltd. (Representative)
  Phone number: 03-6238-3000
  Reception hours: Weekdays 9:00 to 17:30 (excluding weekends)
  
  <Inquiries regarding 7iD member information>
  Please refer to the help&inquiries page.

Released: March 10, 2022
Last Updated: September 1, 2025