Do Not Sell My Data
Last Updated: 11 April 2025
TOKYO TO YOU (hereinafter referred to as "the Company") has established this Privacy Policy (hereinafter referred to as "this Policy") to properly handle the personal information of customers (hereinafter referred to as "Users") using the Company's website and services (hereinafter referred to as "this Service").
By using this Service, Users are requested to read and agree to this Policy.
1. Collected Personal Information
The Company may collect the following personal information (personal data) as necessary for operating this Service.
Information Directly Provided by Users
- Name, address, phone number, email address
- Payment information (Note: Credit card information is processed through a payment service provider and is not stored by the Company)
- Purchase history, shipping details
- Any other information provided by the User
Information Automatically Collected
- IP address, browser information, device information
- Cookies, access logs, browsing history
- Advertising identifiers (e.g., mobile device ad IDs)
Information Obtained from Third-Party Services
- Usage and analytics data obtained via tools such as Shopify and Google Analytics
- Information provided through social media integration, depending on User settings and agreements with social media providers
2. Purpose of Using Personal Information
The Company uses personal information for the following purposes:
- Order Processing, Shipping, and Payment Confirmation (Order verification, payment processing, shipping arrangements, and communication)
- Customer Support (Responding to inquiries, providing support, handling complaints)
- Marketing Activities (Newsletters, campaigns, and new product information, based on User consent or legal basis)
- Site Improvement and Analysis (Usage analysis and statistical processing for service enhancement)
- Legal Compliance (Compliance with legal obligations and responding to regulatory authorities)
3. Cookies
The Company's website may use cookies to enhance User convenience and analyze site usage. Users can refuse or delete cookies via browser settings, though some functionalities may be restricted.
- Use of Tools like Google Analytics
- Data obtained through these tools is used to improve service quality and marketing.
- Refer to the privacy policies of the tool providers for more details.
4. Provision of Personal Information to Third Parties
The Company does not provide personal information to third parties except in the following cases:
- Legal Compliance (When required by courts, law enforcement, or legal obligations)
- Service Providers (Delivery companies, payment processors, etc., with appropriate contractual safeguards)
- User Consent (Personal data is shared only with the User's prior consent)
Additionally, when the Company uses overseas service providers (e.g., Shopify, Ship&Co, DHL), personal data may be transferred internationally, with appropriate protective measures in place as required by law.
5. Personal Information Management and Protection
The Company takes the following measures to prevent unauthorized access, loss, destruction, alteration, or leakage of personal information:
- Access Control (Restricting database access to authorized personnel only)
- Technical Measures (SSL encryption, firewalls, antivirus software)
- Physical Measures (Secure handling of documents and devices containing personal data)
- Employee Training (Regular privacy protection training and policy enforcement)
6. Regional-Specific Provisions
The Company complies with applicable data protection laws in each country, respecting User rights.
- Philippines (DPA 2012)
- United States (CCPA & CPRA for California Residents)
- European Union (GDPR)
- ASEAN Countries (PDPA)
For specific regional details, please refer to the relevant section of this Policy.
---
7. User Rights and How to Exercise Them
Users have the following rights concerning their personal information:
- Access Request (Confirm personal information held by the Company)
- Correction/Update (Request corrections for inaccurate or outdated data)
- Deletion Request (Request deletion of personal information under specific conditions)
- Data Portability (Request to receive data in a machine-readable format or transfer it to another entity, if applicable)
- Objection/Restriction of Processing (Request to object to or restrict data processing)
- Opt-Out Rights (Refusal of data sale or sharing, where applicable)
Users can exercise these rights by contacting the "Inquiry Contact" section below.
8. Data Retention Period
The Company retains personal information only as long as necessary for its intended purposes and securely disposes of or anonymizes data afterward, except when required by law.
- Transaction Data (Retained for the necessary period for accounting and tax purposes)
- Marketing Data (Retained until the User opts out or requests deletion)
- Log Data (Retained as needed for security and service improvement)
9. Updates to the Privacy Policy
This Policy may be updated due to legal changes or service modifications. Important updates will be announced on the Company’s website or directly to Users. The revised Policy takes effect upon its publication, unless otherwise specified.
10. Contact Information
Company Name: LUNA
Address: Isumi, Chiba Ken, Japan
Email: info@tokyotoyoushop.com
Business Hours: 8am to 10pm JST (Excluding weekends, public holidays, and year-end holidays)
If you do not agree with this Policy, please refrain from using the Company's services or contact us via the above details.