Privacy Policy

CIELOHUK operates this store and website, including its information, content, features, tools, products and services (the "Services"). Our store is powered by Shopify, which enables us to provide the Services.

This Privacy Policy explains how we collect, use and disclose personal information when you visit or use the Services, make a purchase or another transaction, or otherwise communicate with us. If this Policy conflicts with our Terms of Service concerning the collection, processing or disclosure of personal information, this Policy takes priority.

Please read this Policy carefully. By accessing or using the Services, you acknowledge that you have read this Policy and understand the collection, use and disclosure of information described here.

Personal information we collect or process

"Personal information" means information that identifies, or can reasonably be linked to, you or another individual. It does not include information collected anonymously or anonymised so that it cannot identify an individual.

Depending on how you use the Services, where you live and what applicable law permits or requires, we may collect or process the following categories of information, including inferences drawn from them:

• Contact details: your name, address, billing address, shipping address, telephone number and email address.
• Financial and payment information: credit-card, debit-card or financial-account details, payment information, transaction details, payment methods, payment confirmations and other payment-related information, as applicable to the payment service you use.
• Account information: your username, password or other login information, security questions, preferences and settings, where applicable to the account features you use.
• Transaction information: products you view, add to your cart or wishlist, purchase, return, exchange or cancel, and your previous transaction history.
• Communications with us: information you include in messages, such as customer-support enquiries.
• Device information: information about your device, browser and network connection, your IP address and other unique identifiers.
• Usage information: how and when you access the Services and how you navigate or interact with them.

Sources of personal information

We may collect personal information:

• Directly from you: when you create an account, visit or use the Services, communicate with us or otherwise provide information.
• Automatically through the Services: from your device when you use the Services or visit our website, including through cookies and similar technologies.
• From our service providers: where we engage them to provide technology or collect or process information on our behalf.
• From partners and other third parties.

How we use personal information

Depending on your interaction with us and the Services you use, we may use personal information for the purposes below.

Providing, personalising and improving the Services

We use information to fulfil our contracts with you, process payments, handle orders, remember preferences and products of interest, send account-related notices, and process purchases, returns, exchanges and other transactions. We also use it to create and manage accounts, arrange delivery, support returns and exchanges, enable reviews and provide a personalised shopping experience, such as recommending products related to purchase history. Information may also help us personalise and improve the Services.

Marketing and advertising

We may use information for marketing and promotional purposes, including sending marketing, advertising or promotional communications by email, text message or post. We may also display advertising through the Services or other websites based on products you have purchased or added to your cart and other interactions with the Services.

Security and fraud prevention

We use information to authenticate accounts, provide secure payment and shopping experiences, and detect, investigate or respond to suspected fraudulent, unauthorised, unlawful, unsafe or malicious activity. We also use it to protect public safety and the security of the Services.

If you create an account, you are responsible for keeping your credentials secure. Do not share your username, password or other access information with others.

Communicating with you

We use information to provide customer support, respond to enquiries, deliver effective service and maintain our business relationship with you.

Legal purposes

We use information to comply with applicable law and respond to legitimate legal processes, including requests from law-enforcement or government authorities. We may also use it to participate in or investigate disclosure proceedings, potential or actual litigation and other disputes, and to investigate or enforce potential violations of our Terms or policies.

How we disclose personal information

In appropriate circumstances, we may disclose personal information to third parties for legitimate purposes consistent with this Policy, including:

• Shopify, vendors and service providers acting on our behalf, such as providers of IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and delivery.
• Business and marketing partners providing marketing services or advertising. Where we use Shopify features that support personalised advertising with third-party services, information may be used in connection with your online activity across merchants and websites. These partners use information under their own privacy policies. Depending on applicable law, you may have rights to direct us not to share information for targeted advertising or marketing.
• Third parties you instruct, request or consent to us sharing information with, such as for delivery, social-media widgets or login integrations.
• Affiliates or other members of our corporate group.
• Parties involved in a business transaction or legal matter, including a merger or bankruptcy, compliance with legal obligations or requests, enforcement of our Terms and policies, or protection of the Services and the rights of us, users or others.

Our relationship with Shopify

Shopify hosts the Services and collects and processes personal information about access to and use of the Services to provide and improve them. Information you submit may be transmitted to or shared with Shopify and third parties located outside your country of residence for these purposes.

Where we use Shopify's enhanced features to protect, develop or improve our business, those features may incorporate data about your interactions with our store, other merchants and Shopify. For those purposes, Shopify may use personal information collected from those interactions. Shopify is responsible for that processing and for responding to requests to exercise rights concerning its use of information for those purposes.

To learn more, see the Shopify Consumer Privacy Policy. Depending on where you live, you may be able to exercise certain rights through the Shopify Privacy Portal.

Third-party websites and links

The Services may contain links to websites or online platforms operated by third parties. If you follow a link to a site we do not control or operate, review its privacy, security and other terms. We do not guarantee the privacy or security of those sites, or the accuracy, completeness or reliability of their information, and do not assume responsibility for them.

Information you post in public or semi-public areas, such as third-party social-media platforms, may be visible to other users and used by us or third parties without restrictions imposed by us. Including a link does not itself endorse a platform, its content or its operator, unless we expressly state otherwise.

Children's information

The Services are not directed at children. We do not knowingly collect personal information from children below the age of majority in their jurisdiction. If you are a parent or guardian and believe that your child has provided us with personal information, contact us using the details below to request deletion.

As of this Policy's effective date, we have no actual knowledge that we "sell" or "share" personal information of individuals under 16, as those terms are defined under applicable law.

Security and retention

No security measure is perfect or impenetrable, and we cannot guarantee absolute security. Information sent to us may also be insecure while in transit. Please avoid using insecure communication channels to send confidential or sensitive information.

How long we retain information depends on factors such as maintaining your account, providing the Services, complying with legal obligations, resolving disputes, and enforcing applicable agreements or policies.

Your rights and choices

Depending on applicable law, you may have some or all of the rights below. These rights are not absolute. They may apply only in certain circumstances, and we may decline a request where permitted by law.

• Access or the right to know: request access to personal information we hold about you.
• Deletion: request deletion of personal information we hold about you.
• Correction: request correction of inaccurate personal information we hold about you.
• Data portability: receive a copy of your information or request its transfer to another service in certain circumstances, subject to applicable exceptions.
• Communication preferences: unsubscribe from promotional emails using the unsubscribe option in the message. We may still send non-promotional communications, such as important notices about your account or orders.

You can exercise applicable rights using the options provided through the Services or by contacting us below. For more information about Shopify's use of information and rights relating to data processed by Shopify, visit the Shopify Privacy Portal.

We will not discriminate against you for exercising applicable rights. Where permitted or required by law, we may need to verify your identity before processing a request. You may appoint an authorised agent where applicable law allows. Before accepting an agent's request, we may require evidence of your authorisation and may also ask you to verify your identity directly with us. We respond within the time required by applicable law.

Complaints

If you have a concern about how we handle personal information, contact us below. Depending on applicable law, you may have the right to appeal our decision or complain to the relevant data-protection authority.

International transfers of personal information

We may transfer, store or process personal information outside your country of residence. Where applicable law requires safeguards for an international transfer, we use recognised transfer mechanisms unless the destination has been recognised as providing an adequate level of protection.

Changes to this Policy

We may update this Policy to reflect changes in our practices or for other operational, legal or regulatory reasons. We will publish the revised Policy on this website, update its last-updated date and provide any notice required by applicable law.

Contact us

For questions about our privacy practices or this Policy, or to exercise applicable rights, contact us at:

• Telephone: +81 3-6821-6895
• Email: [email protected]
• Operator: 合同会社Cielosiro (a Japanese limited liability company)
• Address: Room 402, 7-19-9 Nishi-Shinjuku, Shinjuku-ku, Tokyo 160-0023, Japan