1.Compliance with laws and regulations

Suntory observes the provisions of the Law Concerning the Protection of Personal Information as well as of other laws, regulations and guidelines related to the protection of personal information and of this privacy policy when handling personal information.

2.Collection of personal information

Suntory collects personal information from time to time as necessary. The scope of the personal information collected will never exceed that which is necessary to achieve the intended purpose. Information is collected by honest and appropriate means. Except where the law provides for exceptions, the purpose of use is either published in advance or provided to the concerned parties individually or collectively immediately after the information is collected. When personal information is collected directly from individuals in writing (including via pages on the website over the Internet), the purpose of use is clearly specified each time, except where the law provides for exceptions. For details on the purpose of Suntory's use of personal information, see our Public Notice Pursuant to the Law Concerning the Protection of Personal Information ("Public Notice").

3.Management and protection of personal information

• ・Suntory has assigned a person to be responsible for the management of personal information in order to appropriately manage the information and prevent it from being leaked outside the company. Reasonable and appropriate safety measures have also been implemented to protect personal information from unauthorized access from outside the company as well as loss, destruction, alteration and other such threats.
• ・Suntory has restricted access to databases and other resources containing personal information and has implemented strict controls to prevent unauthorized use within the company as well.
• ・Suntory sometimes hires third parties to handle personal information. In these cases, Suntory selects a group company or another outsourcing company which has been determined to have appropriate practices for handling personal information and makes the necessary arrangements for management of personal information, maintenance of confidentiality, prohibition of redistribution and prevention of leaks of personal information through outsourcing and other such agreements to ensure the information is managed appropriately.
• ・Once the purpose of the personal information has been accomplished, Suntory immediately erases or disposes of it. See the Public Notice for details on how the disposal and erasing of personal information obtained during campaigns and other events is handled.

4.Use of personal information

Unless the consent of the individual has been obtained or there are provisions for exceptions within the law, the personal information that Suntory collects will only be used for the purpose that was specified at the time of collection or the publicly disclosed purpose of use. For details on the purpose of Suntory's use of personal information, see the Public Notice.

5.Provision of personal information

In principle, Suntory will never disclose or provide personal information to a third party other than an outsourcing company without the individual's consent. However, if disclosure is required by law or a request has been received from a governmental authority such as a court or the police, the information may be disclosed or provided without the individual's consent. For details, see the Public Notice.

6.Disclosure, revision, etc. of personal information

In the event that a request is received from an individual or someone acting on their behalf for the disclosure, revision, etc. (requests for revision, addition, deletion, cessation of use or cessation of provision to third parties) of their personal information, Suntory will respond according to the provisions of the relevant laws. See the Public Notice for specific procedures for making such requests.

7.Establishment of internal system

• ・Suntory is working to protect personal information by establishing internal regulations related to the protection of personal information and preparing a clear policy for the handling of personal information to be used by Suntory directors and employees based on this privacy policy.
• ・Suntory has established a system by which to implement internal audits to determine whether or not the protections in place for personal information are sufficient.

8.Review

The items above will be reviewed as necessary to make improvements to how personal information is handled.

9.Inquiries

Inquiries concerning this privacy policy may be sent to us using the inquiry form. See the Public Notice for details on how to submit suggestions and opinions related to Suntory's handling of personal information.