Xperia Privacy Policy

Last Updated: 2024-04

This Privacy Policy sets out how Sony Corporation ("SONY", “we”, “our” or “us”) processes your information in relation to our "Xperia" smartphone (the “Device”) , "Xperia Companion", a PC tool used for updating software on the Device, and the following applications provided by SONY that are installed on the Device ("Application(s)")(collectively as the "Services").

<Applications>

  • Camera
  • Cinematography Pro
  • Game enhancer
  • Music
  • Music Pro
  • Network Visualizer
  • Photography Pro
  • Support
  • Video Creator
  • Video Editor
  • Videography Pro
  • Xperia Transfer 2

If SONY has a separate privacy policy for the Application, such privacy policy will additionally govern processing of your information for such Application. In the event of any inconsistency between this Privacy Policy and the privacy policy for such Application, the terms set forth in the privacy policy for such Application shall prevail.

“Sony Group Companies” means Sony Group Corporation, which is the ultimate parent company of Sony and any legal entities controlled by Sony Group Corporation (the term “control” in this context means the direct or indirect ownership of at least fifty percent (50%) of the voting interest in such corporation or the power in fact to control the management decisions of such entity).

Contents

  1. Information that SONY collects
  2. How SONY uses the Collected Data?
  3. Who else has access to the Collected Data?
  4. Transfer of the Collected Data internationally
  5. Security
  6. Data Retention
  7. Policy Regarding Children
  8. Changes
  9. Contact Information
  10. Your Privacy Rights/Jurisdiction Specific Notices

1. Information that SONY collects

When you use the Services, SONY collects information listed below 1.1 - 1.7 ("Collected Data") from you.The Collected Data may be linked and processed in conjunction with the information received from third parties including Sony Group Companies.

SONY provides a fingerprint authentication function on the Device. When you use the function, the Device will collect and read the fingerprint information with the purpose of fingerprint verification only. Your fingerprint information is stored only in the Device and is not sent off from your Device. It’s never stored in SONY’s server or collected by SONY.

1.1 Information about the Device

  • Information about the Device 's hardware (e.g., model name, device IDs such as IMEI)
  • Information about the Device’s software (e.g., OS and firmware information)
  • Mobile carrier information (e.g., mobile carrier name, code identifying the carrier, service providing country/region)
  • <Collection method>
    • SONY collects the above information automatically when you use the Device (e.g., when you perform the first startup, when you update the software, when you connect the Device to the network).
    • SONY collects the above information directly from the Device when you receive repair services.

1.2 IP address

  • <Collection method>
    • SONY collects the above information automatically when you use the Device (e.g., when you perform the first startup, when you update the software, when you connect the Device to the network).

1.3 Information of the network to which the Device is connected

  • Information about usage and quality of your network (mobile networks, Wi-Fi and Bluetooth) connections
  • Location estimated from the cell tower information of mobile networks
  • <Collection method>
    • If you give us a separate consent (please refer to 2.2, 2.3 and 2.4), SONY collects the above information automatically when you connect the Device to the network.

1.4 The Device’s usage status

  • Settings Information
  • Battery level
  • System activity
  • Information regarding products which are connected to the Device (e.g., type, number, model name of connected devices and connection method such as USB or Bluetooth)
  • Information about crashes, errors and other problems
  • Whether or not you have a Google account signed in on the Device
  • <Collection method>
    • If you give us a separate consent (please refer to 2.2, 2.3 and 2.4), SONY collects information automatically when you use the Device. These collections may occur periodically or when you use certain the Device features. This timing depends on which data is collected.
    • SONY collects the above information directly from the Device when you receive repair services.

1.5 Usage status of applications

  • Name of the application installed on the Device (including the Application), number of usage, start time and end time of use, usage duration, power consumption information, data transmission volume and information about crashes, errors and other problems
  • Specific usage of the Applications (e.g., logs regarding the operation of each function of the Applications)
  • Artist name, the number of music and albums registered on the Application “Music”, start time of music listening and duration of music listening
  • <Collection method>
    • If you give us a separate consent (please refer to 2.2, 2.3 and 2.4), SONY collects the above information automatically when you use applications.

1.6 Call information

  • Call environment and sound volume
  • Start time and end time of a call and duration of a call
  • Whether or not the call was terminated due to a malfunction
  • <Collection method>
    • If you give us a separate consent (please refer to 2.2, 2.3 and 2.4), SONY collects the above information automatically when you make a call with the Device.

1.7 Responses to the survey

  • <Collection method>
    • SONY may ask you through each of the Services whether you would like to participate in the survey. If you can answer the survey, SONY collects your response information.

2. How SONY uses the Collected Data?

We use the Collected Data for the following purposes:

2.1 Keeping the Services running

SONY collects and uses the following information to provide the Services. This includes making necessary notifications and providing software updates.

<Information used for this purpose>
Information listed in 1.1 and 1.2

2.2 Improving SONY products and services

If you give us a separate consent on the Device’s setting page, SONY collects and analyses the following information to understand your use of the Services to improve and develop SONY products and services. SONY may analyze such information in conjunction with the information collected through other SONY products and services if you use one of those.

<Information used for this purpose>
Information listed in 1.1, 1.3, 1.4, 1.5, 1.6 and 1.7

You can withdraw your consent at any time by [Settings] > [About phone] > [Detailed Diagnostics]

2.3 Marketing and advertisement

If you give us a separate consent on the Device’s setting page, SONY will collect and share with your local Sony electronics company your information below. SONY and your local electronics company will be able to evaluate and better understand your preferences and interests and your local Sony electronics company will be able to provide you with relevant offers, recommendations, news and updates via email, apps, and websites. For the details of your local Sony electronics company’s data processing, please refer to its privacy policy.

<Information used for this purpose>
Information listed in 1.1, 1.3, 1.4, 1.5 and 1.7

You can withdraw your consent at any time by [Settings] > [About phone] > [Xperia service setting]

If you give us a separate consent on the Application “Support”, SONY will collect and use your data to be able to provide you with offers, recommendations, news, updates and survey requests via push notifications generated by “Support” App on behalf of your local Sony electronics company. For the details of your local Sony electronics company’s data processing, please refer to its privacy policy.

<Information used for this purpose>
Information listed in 1.1, 1.3, 1.4, 1.5 and 1.7

You can withdraw your consent at any time by tapping [⁝] (three dots menu) > [Settings] > [Privacy settings] on the “Support” app.

2.4 Providing tailored support

SONY offers support services including tailored support on the Application “Support”. If you give us a separate consent on such Application, SONY collects and uses information below to provide you with more enhanced and personalized support services.

<information used for this purpose>
Information listed in 1.1, 1.3, 1.4, 1.5 and 1.6

You can withdraw your consent at any time by [⁝ (three dots menu)] > [setting] > [Privacy settings] on the Application “Support”.

3. Who else has access to the Collected Data?

The Collected Data that is communicated to and stored by Sony may be made available to the following entities:

3.1 Your local Sony electronics company

The Collected Data may be shared with and used by your local Sony electronics company as an independent controller for the purposes of “2.3 Marketing and advertisement”.

3.2 Service providers

SONY may use third party service providers to process the Collected Data on its behalf for the purposes set out in this Privacy Policy. Such third parties include IT service providers and data hosting providers. Our hosting provider is Amazon Web Services in Ireland, acting as our processor.

3.3 Professional advisers

SONY may disclose Collected Data to auditors or similar external consultants like lawyers or tax advisors, to defend and exercise our legal rights (e.g., enforcing compliance with the terms of use) and to help us fulfil our legal obligations.

3.4 Business transfer

In the event that SONY or your local Sony office sells or transfers a portion or all of its business, the Collected Data may be transferred by SONY or your local Sony office to the purchasing or acquiring entity as part of the transaction.

3.5 Government Authorities/ Law Enforcement Officials

The Collected Data may be disclosed to government authorities and/or law enforcement officials if required by the applicable laws.

4. Transfer of the Collected Data internationally

The Collected Data may be processed, stored and transferred to countries/regions outside your country/region of residence, including in particular Japan and Ireland. By using the Services, you consent to the transfer and storage of the Collected Data in Japan and Ireland. Further, courts, law enforcement, and other authorities in countries/regions outside your residence may be entitled to access Collected Data upon its transfer.

5. Security

SONY undertakes reasonable security measures designed to protect against the loss, misuse or alteration of the Collected Data. Although SONY strives to protect the Collected Data, SONY cannot guarantee or warrant the security of any Collected Data transmitted to SONY through the Services or that SONY stores on its systems or that is stored on SONY’s third party contractors' systems.

6. Data Retention

SONY will retain the Collected Data for the following periods as long as it is necessary for the relationship with you and to pursue the purposes detailed in “2.How SONY uses the Collected Data?” or otherwise permitted or required under applicable law.

・Collected Data listed in 1.1

SONY will apply a maximum of 10 years retention period from the date of the collection of the Collected Data.

・Collected Data listed in 1.2

SONY will apply a maximum of 30 days retention period from the date of the collection of the Collected Data.

・Collected Data listed in 1.3, 1.4, 1.5, 1.6 and 1.7

SONY will apply a maximum of 5 years retention period from the date of the collection of the Collected Data.

Please note that SONY may retain Collected Data for an appropriate period when it needs to respond to your requests or inquiries, to detect, prevent, address and analyze security or technical issues, or to the extent permitted by applicable law.
If SONY no longer needs to retain the Collected Data, we will either de-identify or delete it in accordance with our information security policy.

7. Policy Regarding Children

SONY is committed to complying with all applicable laws and regulations regarding the collection, storage and use of the Collected Data concerning children, including the Children's Online Privacy Protection Act in the United States and applicable local legislation in other countries/regions. The Services are intended for a general audience; the Services are not directed to and do not knowingly collect personal information from children younger than age 18. Depending on your country/region of residence, this threshold age for a child may differ. If you are a parent or guardian and are concerned that your child has provided a SONY with personal information (as defined by applicable law), you should contact us as indicated below.

8. Changes

This Privacy Policy may be updated from time to time for any reason. We will notify or request your consent (if necessary under applicable law) of any changes to this Privacy Policy. With regard to notification, it may be sent to you through different channels, for example, a notice on our website or notification on the Device”.

9. Contact Information

If you have any questions or comments about our practices regarding your Collected Data or about this Privacy Policy, please contact us at:
United States:
Sony Electronics Inc.
115 West Century Rd., Suite 250
Paramus, NJ 07652
Attn: Privacy Office
Telephone: 1-833-681-9900
Email: privacy@am.sony.com

Canada:
Sony of Canada ULC,
Attn: Privacy Officer, Law Department
2235 Sheppard Avenue East, Suite 800 Toronto, ON M2J 5B5
Telephone, toll-free (within Canada): 1-888-494-7669
Email: privacy@am.sony.com

10. Your Privacy Rights/Jurisdiction Specific Notices

In some jurisdictions, you have certain rights with respect to the Collected Data that SONY holds about you. These may include the right to request access to the Collected Data and/or you may request that SONY corrects, amends, deletes, erases, destroys, blocks/restrict processing and/or use of such Collected Data. You may also object to SONY’s processing of Collected Data. These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests in keeping. If you would like to exercise any rights available to you, please contact us as described in “9. Contact Information”.

(i) Notice to Residents of U.S. States (excluding CA)

We set forth in our Privacy Policy, and in Table 1 the categories of personal data we process, the purpose for processing personal data, the categories of personal data shared, and the categories of third parties with whom personal data is shared.

Consumers in certain states with comprehensive privacy laws may have the following rights:
Right to Know: the right to confirm whether we are processing personal data about you.
Right to Correct: the right to correct inaccurate Personal Data we hold about you.
Right to Delete: the right to delete the Personal Data provided by you or obtained about you.
Right to Access and Data Portability: the right to access your personal data and obtain a copy of the Personal Data previously collected by us and, to the extent feasible, in a readily usable format to allow data portability.
Right to Appeal: If for any reason you would like to appeal a decision made by us relating to your request to exercise privacy rights, you have the right to submit an appeal to us. Please include your full name, the basis for your appeal, and any additional information to consider.
If you would like to submit a request to exercise one of the rights listed above, you can do so by completing this form: Data Requests
Right to Opt-Out of Targeted Advertising: Your local Sony electronics company may engage in online advertising and analytics practices that may be considered “targeted advertising” or a “sale” of data under applicable state law.
To exercise your rights to opt-out targeted advertising, please ensure that the settings for such advertising are disabled and you may also submit a request here: Opt-out of Targeting Advertising

  • You can change the settings above by the following methods:
    • The setting of the Device
      [Settings] > [About phone] > [Xperia service setting] or
    • The setting of the Application “Support”
      [Settings] > [About phone] > [Xperia service setting]

Right to Opt-Out of Profiling or Sale of Personal Information: While state laws may permit you to opt-out of the sale of your Personal Data and out of profiling in furtherance of decisions that produce legal or similarly significant effects, we do not engage in either of these activities at this time.
Right to Opt-Out of Automated Decision Making: SONY does not use personal information to render any decisions based exclusively on an automated processing of such information and thus does not provide this right at this time.

(ii) Notice to California residents: California Privacy Notice

This California Privacy Notice is effective as of 2024-04.

This California Privacy Notice supplements our Privacy Policy and applies only to California residents. This notice sets forth the disclosures and rights for California Consumers regarding their personal information, as required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act, and any implementing regulations adopted thereunder (“CPRA”). Terms (including defined capitalized terms) used in this California Privacy Notice have the same meanings given in the CPRA, unless otherwise defined.

  • California Consumer Rights. Subject to certain exceptions, as a California consumer, you may have the following rights regarding your Personal Information:
    • Right to Know. Request information regarding what Personal Information we collect, use, disclose, and sell, including the right to request that we provide you with the categories and /or specific pieces of Personal Information we have collected about you.
    • Right to Delete. Request deletion of the Personal Information we collect about you.
    • Right to Correct. Request correction of inaccurate Personal Information that we maintain about you.
    • “Do Not Sell or Share My Personal Information.” Request to opt-out of the “sale” of your Personal Information or the “sharing” of your Personal Information to a third party for cross-context behavioral advertising (i.e., targeted advertising). As we do not knowingly collect Personal Information of residents younger than the age of 16, we also do not knowingly sell or share for cross-context behavioral advertising their Personal Information.
    • “Limit the Use and Disclosure of Sensitive Personal Information.” Under the CPRA, a business must provide the Right to Limit the Use and Disclosure of Sensitive Personal Information when Sensitive Personal Information is collected or processed for the purpose of inferring characteristics about a consumer or does not fall under certain statutory exceptions. SONY does not use or disclose Sensitive Personal Information in connection with the Services.

Agents. If you are an authorized representative submitting a request on a consumer’s behalf, please complete the applicable request per the instructions below. We will follow up to request a signed, written permission signed by the individual who is the subject of the request authorizing you to make the request on their behalf. The written permission must state your full legal name, the full legal name of the individual who is the subject of the request, and a clear description of the permission granted. Alternatively, you may submit a copy of a power of attorney under applicable state law. In either case, please also indicate in your email the nature of your request. The consumer’s identity, in addition to your own, will need to be independently verified in order for us to be able to fulfill your request. We may also ask the consumer to directly confirm with us that they provided you permission to submit the request. Please keep in mind that if we do not receive adequate proof that you are authorized to act on the consumer’s behalf, we may deny the request.

Verifying Requests. In your request, you must provide enough information to allow us to verify you are the person about whom we collected Personal Information, or their authorized representative. You must also describe your request with enough detail so that we can understand, evaluate and respond to it. We will only use the information you provide in a request to verify your identity.
When you exercise your Right to Know, Right to Delete, and/or Right to Correct, we may ask that you provide us with additional information in order to verify your identity and fulfill your request. If we are unable to verify your identity, we will not be able to process the request.

Exercising Your Rights.

Right to Know; Right to Delete; Right to Correct
If you are a California Consumer and would like to exercise your Right to Know, Right to Delete, and/or Right to Correct, please submit your request at: Data Requests; or you may call us toll-free at 1-833-681-9900.
Do Not Sell or Share for Cross Context Behavioral Advertising
Right to Opt-Out of Sale/Sharing
To opt-out of the “sale” or sharing of your personal information for cross-context behavioral advertising, please ensure that the settings for such advertising are disabled and you may also submit a request at: Do Not Sell/Share My Personal Information

  • You can change the settings above by the following methods:
    • The setting of the Device
      [Settings] > [About phone] > [Xperia service setting] or
    • The setting of the Application “Support”
      [Settings] > [About phone] > [Xperia service setting]

Data Retention. SONY retains personal information for as long as reasonably necessary for the purposes outlined in this California Privacy Notice. In particular, we retain your personal information as long as you use the Services.

  • Collected Data listed in 1.1
    SONY will apply a maximum of 10 years retention period from the date of the collection of the Collected Data.
  • Collected Data listed in 1.2
    SONY will apply a maximum of 30 dates retention period from the date of the collection of the Collected Data.
  • Collected Data listed in 1.3, 1.4, 1.5, 1.6 and 1.7
    SONY will apply a maximum of 5 years retention period from the date of the collection of the Collected Data.

Please note that SONY may retain Collected Data for an appropriate period when it needs to respond to your requests or inquiries, to detect, prevent, address and analyze security or technical issues, or to the extent permitted by applicable law.
If SONY no longer needs to retain the Collected Data, we will either de-identfy or delete it in accordance with our information security policy.

Data Reporting

Click here to access our data reporting metrics for the previous calendar year.

Right to Non-Discrimination for the Exercise of a Consumer’s Privacy Rights

California Consumers have the right to not receive discriminatory treatment for exercising CPRA rights. We will not discriminate against you for exercising your CPRA rights.

Notice of Financial Incentive

Under California regulations, if we offer certain loyalty or similar program(s) directly or reasonably related to the collection, retention or deletion of your Personal Information, such program may be considered a “financial incentive”. In such case, we will be required to make additional disclosures to you, which we will provide when you agree to participate.

Personal Information We Collect & Purposes for Collection

The Personal Information we collect about you will depend upon how you use the Services. Accordingly, we may not collect all of the below information about you. In addition to the below, we may collect and/or use additional types of information and will do so after providing notice to you and obtaining your consent to the extent such notice and consent is required by applicable law.
We may have used Personal Information for the business or commercial purposes described in Table 1:

[Table 1]
Categories of Personal Information Collected Purposes for Collection of Personal Information Who We Share Personal Information With for a Business Purpose Third Parties We Sell To, or Share With for Cross Context Behavioral Advertising
Identifiers:
Such as: Email address; your name, postal code, online identifier such as IP address; Device ID, Android Advertising ID, Identifier for Advertisers
  • Keeping Services running
  • Improving SONY products and services
  • Marketing and advertisement
  • Providing tailored support
  • Your local Sony office
  • IT Service Providers; Customer Support Providers;
  • Data Analytics Providers; Legal Authorities (as required by law); Business Transfer Recipients.
  • Your local Sony office
Electronics and Network Information:
Such as: usage status and usage history of Application, Installed Device and Related Devices
  • Improving SONY products and services
  • Marketing and advertisement
  • Providing tailored support
  • Your local Sony office
  • IT Service Providers; Customer Support Providers;
    Legal Authorities (as required by law); Business Transfer Recipients.
  • Your local Sony office
Inferences Drawn from Other Information and Consumer Characteristics:
These may relate to demographics (e.g., gender, age, region/general location), interests or hobbies, and inferences drawn from collected information.
  • Improving SONY products and services
  • Marketing and advertisement
  • Your local Sony office
  • IT Service Providers; Customer Support Providers;Data Analytics Providers; Legal Authorities (as required by law); Business Transfer Recipients.
  • Your local Sony office
Surveys for products improvement and marketing
To send out surveys to understand how to improve our products and what marketing will be of interest.
  • Improving SONY products and services
  • Marketing and advertisement
  • Your local Sony office
  • IT Service Providers; Data Analytics providers; Legal Authorities (as required by law); Business Transfer Recipients.
  • Your local Sony office

For more information about our local Sony electronics affiliate’s California privacy practices, please refer to this California-specific information here: Calif. Privacy Notice

Additional Notice to California Residents:

If you are a California resident, under the California “Shine the Light” law, you have the right to receive: a) information identifying any third party company(ies) to which we may have disclosed, within the past year, personal information pertaining to you and your family for that company's direct marketing purposes; and b) a description of the categories of personal information disclosed. To obtain such information, please email your request to privacy@am.sony.com, and include your name, email address, mailing address or zip code, and a reference to “Your California Privacy Rights –Services.” We are not responsible for requests that are not labeled or sent properly, or do not have complete information.

(iii) Notice to Nevada Residents:

If you are a Nevada resident, you have the right to opt-out of the sale of certain personally identifiable information we have collected about you to third parties. SONY does not currently sell your personally identifiable information as those terms are defined under Nevada law. However, if you wish to submit a request to opt-out of the sale of such information if SONY were to engage in such a sale in the future, you may submit your request in writing to: privacy@am.sony.com. Your request must reference “Your Nevada Rights – Services” and include your name, mailing address, zip code, and email address. We are not responsible for requests that do not come through the designated request mechanism or do not contain sufficient information to allow us to process your request. We will respond to valid requests within 60 days.

(iv) Further Information for Residents in Québec, Canada

This notice sets forth disclosures and rights for consumers residing in Québec, Canada regarding their personal information, as required by the Québec’s Data Privacy Law 25. All SONY personnel handling personal information will be subject to a duty of confidentiality and to ensure that all personal information is handled in accordance with standard security measures. By using the Services, you acknowledge and agree that your personal information will be transferred outside of Quebec.
We will only use your personal information for the purposes stated at the point of collection, or as otherwise noted in this privacy policy.
Automated Decision Making: SONY does not use personal information to render any decisions based exclusively on an automated processing of such information.
Profiling: We may use personal information for profiling, such as to assess your interests or preferences. You may opt-out of profiling by withdrawing your consent to our use of your data by the following methods:

  • The setting of the Device
    [Settings] > [About phone] > [Xperia service setting] or
  • The setting of the Application “Support”
    [Settings] > [About phone] > [Xperia service setting]

Location Tracking: We may use automated technologies to collect information about your general location, such as your country. However, we do not track your location without your consent.
Consumer Rights:Subject to certain exceptions, you may have the following rights regarding your personal information:

  • Right to Inform/Access. Request to confirm the existence of the personal information, communicate it to you, and allow you to obtain a copy of it;
  • Right to Erasure. Request that we remove information we have collected from you.
  • Right to Rectify. Request rectification of inaccurate personal information we maintain about you.
  • Right to Withdraw/Restrict Processing. Request withdraw previously provided consent to process your personal information.
    You may also ask us to clarify the categories of persons that have access to your personal information and the applicable retention period.

Exercising your rights: If you are a Quebec resident and wish to exercise your right(s) listed above, please submit your request here: SOCAN Privacy Request Webform; or you may call our toll-free (within Canada) number 1-888-494-7669.
Your request or complaint must include your full name, street address, city, province, postal code, and an email address so that we are able to contact you if needed regarding this request.
Our Privacy Officer is in charge of the protection of personal information.
Contact information for SONY’s Privacy Officer:
Sony of Canada Ltd.,
Attn: Privacy Officer, Law Department
2235 Sheppard Avenue East, Suite 800 Toronto, ON M2J 5B5
Telephone: 1-888-494-7669 (toll free within Canada)
Email: privacy@am.sony.com
You may submit a complaint to the Commision d’accès à l’information du Québec (CAI) by visiting: https://www.cai.gouv.qc.ca/a-propos/nous-joindre/.