povo Global Privacy Policy

In compliance with applicable data protection laws and regulations, KDDI Corporation (“KDDI”, “we”, “our”, “us”) hereby prescribes the following povo Global Privacy Policy (this “Privacy Policy”) to cover the processing of personal information of the users residing outside of Japan (the “Users”, “you”, “your”) in relation to povo 2.0 Japan SIM provided by KDDI (the “Services”).

1. Collection of Personal Information
We will collect and process the following personal information in relation to the Services: Basic information (name, email address, mobile phone number for the country of residence, date of birth, etc.);
· Information regarding payment;
· Information regarding inquiries from you;
· Information regarding the usage of the Services (consumed data capacity, remaining data capacity, location information, etc.); and
· Information obtained from your devices (type of device, OS, device identifier, IP address, browser type and other browser information, referrer information, cookie ID, information related to browsing history and purchase history obtained by using cookies and cookie-like technologies, advertising identifiers, etc.). 

You are under no obligation to provide such personal information, but if such personal information is not provided, we may be unable to offer the Services.

KDDI takes necessary actions pursuant to regulations, such as obtaining your consent, when collecting information stipulated by law as sensitive personal information.

2. Use of Personal Information
(1) Purpose of Use
We may use the personal information for one or more of the following purposes indicated below:
・To provide announcements and other information about services and products to customers
・To provide services and products
・To survey and analyze the usage of services and products
・To continue delivering services and products in a stable manner
・To respond to inquiries from customers

(2) Legal Basis of Use
We may use the personal information in the cases indicated below, in accordance with applicable laws:
· If you consent thereto;
· If necessary for the performance of a contract between you and KDDI, or in order to take steps at your request prior to entering into a contract;
· If necessary for the purposes of our legitimate interests;
· If required by law or ordinance;
· If such information is required for the protection of human life, the human body, or property;
· If such information is required for the improvement of public health or the promotion of the healthy raising of children; or
· If it becomes necessary under applicable laws and ordinances to cooperate with a government agency, local public agency, or parties authorized thereby.

(3) Deletion of Personal Information
We will maintain your personal information until the purpose of use therefor has been achieved.
To determine the appropriate retention period for personal information, we consider: (i) whether KDDI has an ongoing relationship with you; (ii) whether KDDI is legally obligated to store your personal information; and (iii) whether storing your personal information is necessary to fulfill the contract with you. Upon expiration of the retention period, we will properly dispose of your personal information in accordance with applicable data protection laws and regulations.

3. Provision to Third Parties
We may provide your personal information to our affiliates , data processors such as IT service providers, security service providers, and payment service providers (for details on specific processors, please refer here ) ,in order to offer the Services, and these processors will access and process your personal information to the extent necessary in order to offer the Services. We also may provide your personal information to jurisdictions outside of your country, including Japan, Singapore, the Philippines, India, Sri Lanka, Taiwan, and Malaysia, and the United States of America , which may have a lower level of data protection than your country. When providing personal information to third parties outside your country, KDDI shall take the necessary measures therefor, such as obtaining consent and concluding a data processing agreement, etc., in compliance with the applicable law. Your rights will remain in effect even after your personal information has been provided to a third party. For further information, including obtaining a copy of the documents used to protect your personal information, please contact us as set out in Section “6. Inquiries” below.

4. Management of Personal Information
We take measures to control access to personal information, limit means for taking personal information outside the office, and prevent unauthorized external access. We also take measures to prevent personal information being leaked, lost, or damaged, and other necessary and appropriate measures for personal information security management. However, we may not be able to absolutely guarantee the security of the personal information we handle. Personal information may be stolen, lost, or leaked due to unforeseen circumstances. In such cases, we will do our utmost to minimize the damage and remedy the consequences.

5. Your Rights
(1) Your Rights Regarding Personal Information
In some countries, you have certain rights as a data subject under applicable laws. To the fullest extent permitted by applicable laws, you may have the following rights:
● The right to access your personal information;
● The right to correct your inaccurate or incomplete personal information;
● The right to delete your personal information;
● The right to restrict the processing of your personal information;
● The right to withdraw your consent;
● The right to data portability.

(2) Right to Object to the Processing of Personal Information
You may have the right at any time to object to the processing of personal information that is being processed on the basis of legitimate interests under applicable laws and regulations.
You may have the absolute right under applicable laws and regulations to refuse direct marketing if such personal information is being handled for direct marketing purposes.

(3) Right to File a Complaint with a Supervisory Authority
You may have the right to file a complaint with the supervisory authority of your country or region.

(4) How to Exercise Your Rights
If you or your agent wish to exercise your rights under the applicable law, such as withdrawing consent, or as relating to data access, deletion, portability, etc., or by making an objection, please contact us as set out in Section “6. Inquiries” below.

6. Inquiries
If you have any questions or concerns about this Privacy Policy or our data processing practices, please contact us at:

KDDI Corporation Personal Data Disclosure Consultation Office
Address: KDDI Bldg. 2-3-2 Nishi-shinjuku, Shinjuku-ku, Tokyo 163-8509
Email: povosupport@kdlsupport.zendesk.com
Phone: +81 (0) 3 6670 6684 (9:00 to 17:00 excluding weekends, national holidays, and Year End/New Year holidays)

Our Data Protection Officer
Name: KEIJI TANAKA,Ph.D
Address: Garden Air Tower, 3-10-10, Iidabashi, Chiyoda-ku, Tokyo 102-8460, Japan
Email: dpo@kddi.com
Phone: +81 3-3347-0077

Our EU Representative
Name: PLANIT//LEGAL Rechtsanwaltsgesellschaft mbH
Address: Jungfernstieg 1, 20095 Hamburg, Germany
Email: KDDI_eu_representative@planit.legal
Phone: +49 (0) 40 609 44 190

Privacy Policy, Last Updated and Effective: MM, DD, 2025

Supplementary Provisions for Processing of Personal Information of California Residents

In addition to the provisions set forth above, the following provisions apply to the processing of personal information of individuals residing in the State of California, United States, in accordance with the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (the “CCPA”). For the purposes of these Supplementary Provisions, “personal information” refers to information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to a particular California resident or household, as defined under the CCPA.

1. Categories of Personal Information We Collect
We will collect and has collected in the last twelve (12) months, the following categories of personal information from you. Further, we have disclosed the personal information collected in the last twelve (12) months to the recipients specified in Section “3. Provision to Third Parties” in the general provisions of this Privacy Policy.

We collect personal information directly from you when you register for the Service, use the Service, or contact us for inquiries or customer support. This includes information you provide when creating an account, engaging in transactions, or otherwise interacting with the Service.

For further details, please refer to the general provisions of this Privacy Policy as follows:
・ Specific Personal Information Collected: Refer to Section “1. Collection of Personal Information.”
・ Business and Commercial Purposes of Collection: Refer to Section “2.(1) Use of Personal Information.”
・ Retention Period of Personal Information: Refer to Section “2.(3) Deletion of Personal Information.”

2. Sale or Sharing of Personal Information
We have shared your personal information with advertising and marketing service providers for purposes of cross-context behavioral advertising in the last twelve (12) months. Accordingly, under the CCPA, you have the right to opt-out of such sharing of your personal information. For more details regarding your opt-out rights, please refer to 3(4) below.

We have not sold any personal information collected from you in the last twelve (12) months.

3. Your Rights and Choices under CCPA
The CCPA provides residents of California with specific rights regarding their personal information. If you are a California resident, the following describes your rights under the CCPA and explains how to exercise those rights.

(1) Right to access personal information
You have the right to request that we disclose certain information to you about our collection, sharing, disclosure or use of your personal information. Once we receive and confirm your verifiable request, we will disclose the following information to you:
・ The categories of personal information we collected about you;
・ The categories of sources for the personal information we collected about you;
・ Our business or commercial purposes for collecting, selling, or sharing such personal information;
・ The categories of third parties with whom we share such personal information;
・ The categories of personal information that we sold, and for each category identified, the categories of third parties to whom we sold such personal information;
・ The categories of personal information that we disclosed for a business purpose, and for each category identified, the categories of third parties to whom we disclosed such personal information; and
・ The specific pieces of personal information we collected about you.

(2) Right to request deletion
You have the right to request that we delete any personal information that we have collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable request, we will delete your personal information from our records and notify our service providers and contractors to do the same, unless an exception applies.
We may deny your deletion request if retaining the information is necessary for us or our service providers and contractors in order to:
・ Complete the transaction for which personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service requested by you, or reasonably anticipated by you within the context of our ongoing business relationship with you, or otherwise perform our contract with you;
・ Help to ensure security and integrity to the extent the use of your personal information is reasonably necessary and proportionate for those purposes;
・ Debug products to identify and repair errors that impair existing intended functionality;
・ Exercise free speech, ensure the rights of other consumers to exercise their free speech rights, or exercise other rights provided for by law;
・ Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.);
・ Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent; and
・ Enable solely internal uses that are reasonably aligned with consumer expectations based on the relationship between you and us; or
・ Comply with legal obligations.

(3) Right to request correction
You have the right to request that we correct your inaccurate personal information that we have collected from you and retained. Once we receive and confirm your verifiable request, we will correct your inaccurate personal information and notify our service providers and contractors to do the same. We may deny your correction request if we determine that the contested personal information is more likely than not to be accurate based on the totality of the circumstances.

(4) Right to opt-out of sale or sharing
You have the right to opt-out of the sharing of your personal information for purposes of cross-context behavioral advertising. To exercise your opt-out rights, you (or your authorized representative) may submit a request through the following method: Cancelation of povo2.0 service

(5) Right to limit the use of sensitive personal information
We have not used or disclosed, and will not use or disclose, sensitive personal information collected from you for any purpose other than the following:
・ To perform the services or provide the goods reasonably expected by an average consumer who requests such goods or services;
・ To help to ensure security and integrity to the extent the use of your personal information is reasonably necessary and proportionate for those purposes;
・ For short-term, transient use (except those involving profiling or changes to the future consumer experience);
・ To perform services on our behalf; and
・ To undertake activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us.

(6) Non-discrimination
We will not discriminate against California residents for exercising any of their rights under the CCPA. Moreover, unless permitted by the CCPA, we will not:
・ Deny the goods or services to you;
・ Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties;
・ Provide you a different level or quality of goods or services;
・ Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services; or
・ Retaliate against an employee, applicant for employment, or independent contractor.

(7) Exercising rights for disclosure request, deletion request and correction request
To exercise your rights for disclosure, deletion, or correction requests as described above, please submit a verifiable request by contacting us in the manner set forth in Section “6. Inquiries” in the general provisions of this Privacy Policy.
Only you, a natural person or a person registered with the California Secretary of State that you authorize to act on your behalf, or a person who has a power of attorney or is acting as a conservator for you, may make a verifiable request related to your personal information. You may also make a verifiable request on behalf of your minor child.
The verifiable request must:
・ Provide sufficient information that allows us to reasonably verify you are the person about whom we collected the personal information or an authorized representative; and
・ Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond thereto.