Published: June 24, 2020
Last updated: [June 24, 2020]
We collect, use and generate the following categories of your personal data:
・Your basic personal information to identify you and contact you, including name, gender, date of birth, email address, phone number and residential address;
・Your interaction with our website, including browsing history, purchase records (order date, item purchased, payment information and processing state), items in shopping cart, items in wish list and your inquiry records; and
・Your interaction with social recommendation buttons (Facebook and Instagram) embedded in our website, including items of your recommendation and your account information with such social networks.
We collect, use and generate your personal data described above for the following purposes on the respective lawful basis:
・Responding to your inquiries, proceeding with your orders, facilitating your payment, delivering purchased items to you, contacting you about your purchase and delivering member services to you, on the lawful basis that it is necessary for the performance of our contract with you or in order to take steps at your request prior to entering into such contract;
・Notifying our payment service provider (Stripe) of your intention to let them keep your credit card information for future reuse, only if you give consent to such retention;
・Delivering various marketing programs including delivering member newsletters, running loyalty programs, only if you give us consent to such processing;
・Personalizing our advertising based on your interaction with our website (e.g. items purchased, pages browsed, etc.), only if you give consent to such processing;
・Improving the quality of our products and your experience with our website, on the lawful basis that it is necessary for the purpose of our legitimate interest; and
・Monitoring security of our website, on the lawful basis that it is necessary for the purpose of our legitimate interest.
Where the lawfulness of our processing your personal data is based on your consent, you can revoke at any time your consent with effect for the future.
We usually don’t collect and/or use sensitive categories of your personal data as defined in Articles 9 or 10 of GDPR on our website.
Cookie is a small text file that our website sends to your terminal device for the purpose of keeping certain records.
By using cookies:
The cookie identifies your terminal device, typically your web browser, but it cannot identify your individual identity. You can choose whether to allow us or third-parties (our Adtech partners) to set performance cookies and advertising cookies.
We will retain your personal data during your membership with our service and for further 5 years after you quit your membership. After that time we will anonymize your personal data so that we can’t identify you any longer by reference to any data we retain.
As shown in the table below, we disclose certain categories of your personal data in so far as may be necessary for the purposes described above to the respective recipients.
|Categories of personal data to be disclosed||recipients|
|Your order information necessary for delivering purchased items to you||Acca International and DHL, our logistics partners|
|Your order information necessary for facilitating payment||Stripe and PayPal, our payment service providers|
|Your basic contact information and interaction with our website necessary for contacting you on your purchase or responding to your inquiries||Acca International, our customer relations service provider|
|Your browsing history on our website (dependent on your consent)||Google, our web-analytics service providers|
|Your recommendation of our items together with information about your social network account and your web browser identification (dependent on your consent)||Facebook, Instagram and Twitter, whose social plugins are embedded on our website|
|Your browsing history and interaction on our website that enables our Adtech partners to personalize our advertising exposure to you||Facebook, Twitter, Google and Double Standard, Our Adtech Partners|
|Your personal data retained in our website system||Our contractors that assist us in operating our website|
Where such service providers are “data processors” in the meaning of GDPR, we make sure that such data processors have in place appropriate data protection measures by virtue of data processing contracts between such processors and us in compliance with Article 28 of GDPR.
Our website is located in Japan, which means your personal data are processed in Japan. We do not transfer your personal data to any entities located in any third countries outside of the European Economic Area (EEA) or Japan. In the event that we transfer your data to an entity located outside the EEA or Japan, we either ask for your prior consent thereto or protect your rights with personal data by virtue of a data transfer contract with the relevant recipient in accordance with GDPR and PDPA, which impose on such recipients contractual obligations to ensure adequate level of data protection equivalent to those laid down by GDPR and PDPA.
Provided that certain conditions are met, you have legal rights to request from us the following:
・Revocation of previously given consent to our processing of your personal data
・Access to your personal data and to certain supplementary information covered by this notice;
・Correction of your personal data if inaccurate or incomplete;
・Erasure of your personal data in certain circumstances;
・Suspension of using your personal data in certain circumstances;
・Stopping processing your personal data in certain circumstances;
・Obtaining your personal data in a structured, commonly used, and computer-readable format.
If you wish to exercise your right, please contact us.
You can lodge complaints about our way of processing your personal data with data protection supervisory authorities.