NTT FINANCE collects your specific personal information only by legal and fair methods.

NTT FINANCE will use its best efforts to ensure that your specific personal information that NTT FINANCE retains is accurate, complete and up-to-date.

NTT FINANCE will promptly amend or delete any incorrect specific personal information upon a request for information disclosure from the pertinent individual.

NTT FINANCE will use the specific personal information that NTT FINANCE retains for the purpose of conducting the following administrative tasks set forth in accordance with the provisions of laws and regulations:

• administrative tasks pertaining to the preparation of payment reports of compensation, fees, monetary amounts stated in contracts, and monetary awards;

• administrative tasks pertaining to the preparation of payment reports of real estate usage fees, etc.;

• administrative tasks pertaining to the preparation of payment reports of consideration for the acquisition of real estate; and

• administrative tasks pertaining to the preparation of payment reports of the sale or purchase of real estate or real estate loan brokerage fees.

In the case where NTT FINANCE directly receives any written specific personal information, etc. from the pertinent individual, NTT FINANCE shall expressly state the purpose of use thereof on such occasion, except in the cases that fall under any items of Article 21, paragraph 4 of the APPI; provided, however, that this shall not apply if the case falls under item 1 or item 2 of Article 18, paragraph 2 of the APPI, the content of which is replaced with Article 30, paragraph 2 of the Individual Number Act (Number Use Act).

NTT FINANCE will not provide any specific personal information that NTT FINANCE retains to a third party. However, in the cases provided for in each item of Article 19 of the Individual Number Act (Number Use Act), NTT FINANCE may provide any necessary specific personal information to a related third party or be provided with any necessary specific personal information from a related third party without obtaining the consent from the pertinent individual in advance.

NTT FINANCE will not jointly use any specific personal information that NTT FINANCE retains with any particular person.

NTT FINANCE appropriately implements as follows organizational, human, physical and technical security control measures when handling your specific personal information. In addition, when outsourcing the handling of specific personal information, NTT FINANCE supervises the subcontractors (including any subsequent subcontractors or the like) to ensure that they manage your specific personal information appropriately and make improvements as necessary.

• 1 Organizational security control measures

  NTT FINANCE implements organizational security control measures which include the development of an organizational structure such as a committee on information security and a person in charge of information security management in each organization, the establishment of internal rules and regulations and the implementation of operations based on these rules, and periodic audits on the status of operations.

• 2 Human security control measures

  NTT FINANCE provides our employees, etc. with sufficient education and training on information security, and requires them to sign a written pledge to comply with the appropriate handling of specific personal information when engaging in business activities.

• 3 Physical security control measures

  NTT FINANCE implements physical security control measures related to information system installation and work locations as well as physical protection of equipment and software, etc., including access controls for buildings and floors where your specific personal information is handled, theft prevention measures, and measures against destruction of customers' specific personal information due to fire, lightning strikes, etc.

• 4 Technical security control measures

  NTT FINANCE implements technical security control measures such as access management, including authentication, authority management and control, and recording when accessing your specific personal information, countermeasures against unauthorized software and viruses in our systems, countermeasures by means of encryption and clarification of responsibilities when your personal data is transferred, transmitted, and received, and information system monitoring.