Privacy Policy

Last updated: May 13, 2026

1. Introduction

Japan Clothing is committed to protecting your privacy and your personal data. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit japan-clothing.com (the "Site"), browse our products, create an account, place an order, contact our customer service, or otherwise interact with us.

This policy complies with the European General Data Protection Regulation (Regulation EU 2016/679 — GDPR), the French Loi Informatique et Libertés as amended, the UK Data Protection Act 2018 and UK GDPR, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), the Connecticut Data Privacy Act (CTDPA), the Utah Consumer Privacy Act (UCPA), and other applicable data protection laws worldwide.

By using the Site or placing an order, you acknowledge having read and understood this Privacy Policy. Identity and contact details of the data controller are set out in the final section of this policy.

2. Scope of This Policy

This Privacy Policy applies to all personal data processed by us in the context of:

  • Your visit to japan-clothing.com;
  • The creation of a customer account;
  • The placing and fulfillment of an order;
  • Your communications with us by email, SMS, or any other channel;
  • Your subscription to our marketing communications, where applicable;
  • Your use of any feature of the Site (reviews, contact forms, cart, etc.).

It does not apply to third-party websites linked from the Site, which have their own privacy policies and over which we have no control.

3. Data We Collect

3.1 Information you provide directly

  • Identity: first name, last name;
  • Contact: email address, postal address (billing and delivery), phone number for carrier contact;
  • Order data: items purchased, sizes, quantities, order history, delivery preferences;
  • Payment data: payment is processed exclusively by our certified payment providers (see section 8). We do not store full credit card numbers or CVV codes on our servers;
  • Communications: messages you send us via email or SMS, including their content;
  • Customer reviews: any content (text, ratings, photos) you submit through our product review system;
  • Marketing preferences: your subscription/unsubscription status to our newsletters and promotional communications.

3.2 Information collected automatically

  • Technical data: IP address, browser type and version, device type, operating system, language settings, screen resolution;
  • Browsing data: pages visited, time spent on pages, internal navigation, referral source, date and time of visit;
  • Cookies and similar technologies: see our Cookie Policy for the full list of cookies used and their purposes.

3.3 Sensitive data

We do not knowingly collect or process special categories of personal data as defined in article 9 of the GDPR (racial or ethnic origin, political opinions, religious beliefs, health data, sexual orientation, biometric or genetic data, etc.). Please do not include such information in messages sent to our customer service.

4. Legal Bases for Processing (GDPR)

Under article 6 of the GDPR, we process your personal data based on the following legal grounds:

  • Contract performance (art. 6.1.b): to process your orders, deliver your products, handle returns and refunds, manage your account, and respond to your customer service requests;
  • Legal obligations (art. 6.1.c): to comply with accounting, tax, customs, and consumer protection laws (notably article L123-22 of the French Code de commerce, which requires retention of accounting records for 10 years);
  • Legitimate interest (art. 6.1.f): to operate, improve, and secure the Site, prevent fraud and abuse, conduct internal analytics, and provide responsive customer support. Where this basis is used, we have balanced our interest against your rights and freedoms;
  • Your consent (art. 6.1.a): for marketing emails and newsletters, for non-essential cookies, and for any optional features. You can withdraw your consent at any time without affecting the lawfulness of processing carried out before that withdrawal.

5. How We Use Your Data

We use your personal information strictly for the following purposes:

  • Processing and fulfilling your orders (preparing parcels, shipping, tracking, invoicing);
  • Providing customer service via email or SMS, including pre-sales advice and post-sales support;
  • Sending transactional emails: order confirmations, shipping updates, return instructions, refund notifications;
  • Sending marketing newsletters and promotional offers — only if you have explicitly opted in;
  • Personalizing your shopping experience on the Site;
  • Improving our website, our products, and our services;
  • Preventing and detecting fraud, abuse, payment disputes, and chargebacks;
  • Managing returns, refunds, and the legal guarantees of conformity and hidden defects;
  • Complying with applicable legal, regulatory, and tax obligations;
  • Enforcing our Terms of Service and protecting our legal rights where necessary.

6. Marketing Communications

If you have opted in to receive marketing communications, we may send you newsletters, product announcements, and promotional offers by email. You may unsubscribe at any time by:

  • Clicking the "unsubscribe" link at the bottom of any marketing email;
  • Emailing us at support@japan-clothing.com with "Unsubscribe" in the subject line.

Unsubscribing from marketing communications does not affect transactional emails related to your orders (order confirmations, shipping notifications, return instructions), which we are legally required to send.

7. Cookies and Similar Technologies

The Site uses cookies and similar tracking technologies to ensure proper functioning of the Site, analyze browsing patterns, secure transactions, and, with your consent, deliver personalized content and marketing. The categories of cookies used are:

  • Strictly necessary cookies: required for the Site to function (shopping cart, secure checkout, language preference, etc.). These cookies do not require your consent;
  • Analytics cookies: help us understand how visitors use the Site (e.g. Google Analytics). Used only with your consent;
  • Marketing cookies: used to deliver relevant advertising on third-party platforms. Used only with your consent;
  • Preference cookies: remember your settings (language, currency). Used only with your consent.

You can manage your cookie preferences at any time through our cookie banner or by contacting us. Full details are in our Cookie Policy.

8. Data Sharing and Third-Party Service Providers

We do not sell your personal information to third parties. We share your data only with trusted service providers, strictly to the extent necessary to operate our business and fulfill our contractual obligations to you. Each of these providers is bound by data protection agreements compliant with the GDPR and applicable laws:

  • Shopify Inc. (Canada/USA) — e-commerce platform hosting our Site and processing transactions;
  • Payment processors — Stripe (Ireland/USA), PayPal (Luxembourg/USA), Shop Pay (Shopify), Apple Pay, Google Pay, or equivalent depending on the payment method you select. Payment data is processed directly by these providers under their own privacy policies;
  • Shipping carriers — national postal services, DHL, FedEx, UPS, and regional last-mile delivery partners, varying based on destination and parcel;
  • Logistics partners — third-party fulfillment warehouses in France, the European Union, and Asia, depending on product line, who receive shipping data strictly to prepare and dispatch your parcel;
  • Google LLC (USA) — Google Analytics, used with your consent for traffic analysis;
  • Judge.me — product review and rating system;
  • Email service providers — for transactional and marketing email delivery (e.g. Klaviyo, Shopify Email, or equivalent);
  • Customer service tools — for ticketing and SMS handling, where applicable.

We may also share your data with public authorities where legally required (e.g. court order, tax audit, customs inspection, regulatory investigation). Any addition of new service providers in the future will be reflected by an update to this Privacy Policy.

9. International Data Transfers

Because we operate internationally and many of our service providers are based in the United States, Canada, or Asia, your personal data may be transferred outside the European Economic Area (EEA) and outside the United Kingdom. When such transfers occur, we rely on appropriate safeguards in accordance with chapter V of the GDPR, including:

  • Standard Contractual Clauses (SCC) approved by the European Commission;
  • Adequacy decisions issued by the European Commission for the recipient country (currently applicable to several jurisdictions);
  • EU-US Data Privacy Framework certifications, where the recipient is certified;
  • Other legally recognized transfer mechanisms as appropriate.

A copy of the specific safeguards applicable to any given transfer is available on request at support@japan-clothing.com.

10. Data Retention

We retain your personal data only for as long as necessary for the purposes outlined in this policy. Specific retention periods include:

  • Order and invoice data: 10 years, in compliance with article L123-22 of the French Code de commerce (accounting obligation);
  • Customer account data: as long as your account is active, plus 3 years of inactivity (after which the account is archived or deleted);
  • Marketing data (newsletter subscribers): until you unsubscribe, plus 3 years for evidentiary purposes, in accordance with CNIL recommendations;
  • Customer service communications: up to 5 years after the last interaction, to manage legal guarantees and disputes;
  • Cookies and analytics data: up to 13 months for consent-based cookies, in accordance with CNIL guidelines; up to 26 months for Google Analytics data;
  • Payment data: we do not store payment data ourselves; retention by payment processors is governed by their respective policies.

After the applicable retention period, data is either anonymized or securely deleted.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, loss, or destruction. These include:

  • SSL/TLS encryption (HTTPS) for all data transmitted between your browser and our servers;
  • Secure hosting via Shopify Inc., a Level 1 PCI-DSS certified provider;
  • Access controls limiting who can view or process personal data within our organization;
  • Regular security audits and updates of our systems;
  • Multi-factor authentication on administrative accounts;
  • Logging and monitoring of access to personal data.

No internet-based system is 100% secure. In the event of a personal data breach likely to result in a high risk to your rights and freedoms, we will notify you and the competent supervisory authority (in France: the Commission Nationale de l'Informatique et des Libertés — CNIL) within the timeframes set out in articles 33 and 34 of the GDPR.

12. Your Rights Under GDPR (EU/EEA Residents)

If you are located in the European Union or the European Economic Area, you have the following rights regarding your personal data:

  • Right of access (art. 15): request a copy of the personal data we hold about you;
  • Right of rectification (art. 16): request correction of inaccurate or incomplete data;
  • Right of erasure / "right to be forgotten" (art. 17): request deletion of your personal data, subject to legal retention obligations;
  • Right to restrict processing (art. 18): limit how we use your data;
  • Right to data portability (art. 20): receive your data in a structured, commonly used, machine-readable format;
  • Right to object (art. 21): object to certain types of processing, including direct marketing;
  • Right not to be subject to automated decision-making (art. 22): we do not engage in automated decision-making producing legal effects on you;
  • Right to withdraw consent (art. 7.3): at any time, without affecting the lawfulness of processing carried out before withdrawal;
  • Right to lodge a complaint: with the French data protection authority (CNIL) at www.cnil.fr, or with the data protection authority of your country of residence.

To exercise any of these rights, contact us at support@japan-clothing.com. We will respond within one month of receiving your request, in accordance with article 12.3 of the GDPR. We may ask you to verify your identity before responding, in order to protect your data from unauthorized access.

13. Your Rights Under UK GDPR

If you are located in the United Kingdom, you have rights equivalent to those listed in section 12 above, under the UK GDPR and the UK Data Protection Act 2018. The UK supervisory authority is the Information Commissioner's Office (ICO), accessible at ico.org.uk.

14. Your Rights Under CCPA/CPRA (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

  • Right to know: what categories of personal information we collect, use, disclose, and share;
  • Right to access: obtain a copy of the specific personal information we have collected about you in the past 12 months;
  • Right to delete: request deletion of your personal information, subject to legal exceptions;
  • Right to correct: request correction of inaccurate information we hold about you;
  • Right to opt-out of sale or sharing: the right to opt-out of the sale or sharing of your personal information ("Do Not Sell or Share My Personal Information");
  • Right to limit use of sensitive personal information: the right to limit how we use information classified as sensitive under CPRA;
  • Right to non-discrimination: we will not discriminate against you for exercising any of these rights.

Do Not Sell or Share My Personal Information: We do not sell your personal information to third parties for monetary consideration. To exercise any CCPA/CPRA right, contact us at support@japan-clothing.com with "CCPA Request" in the subject line. We will verify your identity before responding.

15. Your Rights Under Other US State Privacy Laws

If you reside in a US state that has enacted a consumer privacy law (including Virginia under the VCDPA, Colorado under the CPA, Connecticut under the CTDPA, Utah under the UCPA, and other states as they enact similar legislation), you have rights similar to those listed in section 14. To exercise these rights, contact us at support@japan-clothing.com indicating your state of residence and the right you wish to exercise.

16. Children's Privacy

Our Site and services are intended for users aged 18 or older. We do not knowingly collect personal information from minors under the age of 16 in the EU, or under the age of 13 in the United States (in accordance with the Children's Online Privacy Protection Act — COPPA), without verifiable parental consent. If you believe we have inadvertently collected information from a minor, please contact us immediately at support@japan-clothing.com so that we can delete it.

17. Automated Decision-Making and Profiling

We do not make decisions based solely on automated processing of your personal data (including profiling) that produce legal effects concerning you or similarly significantly affect you, within the meaning of article 22 of the GDPR. Any decision regarding orders, refunds, or customer service is reviewed by a human team member before being communicated to you.

18. Customer Reviews

Our product reviews come from verified customers who have purchased the corresponding product. We comply with the FTC Endorsement Guides (USA) and articles L111-7-2 and L121-4 of the French Code de la consommation regarding the moderation and transparency of online reviews. Reviews are not incentivized, not edited beyond moderation of unlawful or off-topic content, and represent genuine customer feedback. Any future paid endorsements or affiliate partnerships will be clearly disclosed.

19. Accessibility

We are committed to making our Site accessible to all users, including those with disabilities. We strive to comply with the Web Content Accessibility Guidelines (WCAG 2.1 AA), the Americans with Disabilities Act (ADA), and the European Accessibility Act. Accessibility improvements are an ongoing effort. If you encounter any accessibility issue, please contact us at support@japan-clothing.com and we will address it promptly.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, in the services we use, in applicable laws or regulations, or in our business operations. The version applicable to your interaction with the Site is the one in force on the date of that interaction. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or by a prominent notice on the Site before the changes take effect.

21. Governing Law and Jurisdiction

This Privacy Policy is governed by French law. It complements — and does not limit — any mandatory consumer protection or data protection rights applicable under your local law.

For Customers residing in France, any dispute concerning the interpretation or application of this policy shall, in the absence of an amicable resolution, fall under the jurisdiction of the competent French court applying the rules of article R631-3 of the French Code de la consommation.

For Customers residing outside France, your mandatory local data protection and consumer rights remain fully applicable. You retain the right to bring proceedings before the courts of your place of residence, before your local data protection authority, or before the French courts.

22. Severability

If any provision of this policy is held to be invalid, illegal, or unenforceable by a competent court or regulatory authority, the remaining provisions shall remain in full force and effect. The invalid provision shall be deemed replaced by a valid provision reflecting as closely as possible the original intent.

23. Language

This Privacy Policy is drafted in English for the international market served by japan-clothing.com. In the event of a conflict between this version and any translation, the English version shall prevail, except where mandatory consumer protection or data protection law requires the application of a translated version.

24. Contact and Identity of the Data Controller

The entity responsible for the processing of your personal data described in this policy is:

  • Delaplace François, operating under the commercial name DAJE (and trading as Japan Clothing on japan-clothing.com)
  • Legal form: Entrepreneur individuel (micro-entreprise) registered in France
  • SIREN: 841 395 429
  • SIRET: 841 395 429 00027
  • RCS: Narbonne 841 395 429 — registered 08/03/2023
  • Intra-community VAT number: FR16841395429
  • NAF/APE code: 47.91A (Distance selling — general catalogue)
  • Registered office: 7 rue du Tangor, 11100 Narbonne, France
  • Email: support@japan-clothing.com
  • SMS support: +1 332-249-4051 (text messages only — no voice calls)

As a sole trader (entrepreneur individuel) operating a small-scale activity, the data controller does not meet the criteria of article 37 of the GDPR requiring the appointment of a Data Protection Officer (DPO). All data protection matters are handled directly by the data controller. For any data privacy question, including the exercise of your rights, please contact us at support@japan-clothing.com. We will respond within one month, in accordance with the GDPR.