Privacy policy

Data controller

Yabaizoo (⟨Registered legal name — 商号⟩), ⟨Registered office in Japan — 所在地⟩, is the controller of the personal data collected through this site. You can reach us at keeper@yabaizoo.example.

What we collect

We collect only what we need to run the shop:

• Order & contact data: name, email, delivery address, phone, order history.
• Payment data: handled directly by our payment providers — we receive a confirmation and the last digits, never your full card number.
• Technical data: information your browser sends (IP, device, pages viewed) needed to serve and secure the site.
• Preferences you set: region/currency, cart contents and sound setting, stored locally in your browser (see the Cookie policy).
• Marketing data: your email, only if you opt in to our newsletter.

Why we use it & our legal basis

• To process and deliver your order and provide support — performance of our contract with you.
• To meet legal obligations, e.g. keeping invoices and accounting records — legal obligation.
• To secure the site and prevent fraud — our legitimate interest.
• To send marketing, if you asked for it — your consent, which you can withdraw at any time.

Who we share it with

We share data with the service providers (processors) that make the shop work, only as needed:

• Print & fulfilment partners: Printful (EU/US) and Printify (Asia), to produce and ship your order.
• Payment providers, to take payment.
• Hosting, email and, where used, analytics providers.

Some of these providers may process data outside the EU; where they do, appropriate safeguards (such as the EU Standard Contractual Clauses) are in place. We never sell your personal data.

How long we keep it

Order and invoicing records are kept for the period the law requires of us as a Japanese business — under the Corporation Tax Act, books and vouchers are retained for 7 years (10 in some loss-carry-forward cases). Marketing data is kept until you unsubscribe. Other data is kept only as long as needed for the purpose it was collected.

Your rights

Under the GDPR you can ask to access, correct, delete, restrict or port your data, and object to certain processing. Where we rely on consent, you can withdraw it at any time.

To exercise any of these, email keeper@yabaizoo.example. You also have the right to complain to a data-protection authority: in Japan, the Personal Information Protection Commission (ppc.go.jp); in the EU, your national authority (in France, the CNIL — cnil.fr); in the UK, the ICO (ico.org.uk).

We are established in Japan, which the European Commission recognises as providing an adequate level of data protection — so your data reaching us is not a transfer that needs extra safeguards. Where we use processors elsewhere, we rely on the European Commission's standard contractual clauses.

Cookies & local storage

How we use browser storage is described in our Cookie policy.

Updates

We may update this policy; the date at the top shows the latest version.