Privacy Policy

We obtain the following information by lawful and fair means. (1) Information you enter or provide ・Member registration and My Account: name, display name (nickname), email address, password (stored in a form that cannot be restored, so the Company cannot know the password itself), phone number, LINE ID, address, member type, company name (for business members), invitation code, and email and SMS marketing preferences ・Orders: delivery details (name, address, phone number), email address, order details, payment method, and the remitter name for bank transfers ・Balance, points and coupons: top-up requests (amount, remitter name, etc.), history of points and coupons obtained and used, and order numbers from other sales channels entered when claiming points ・Business customers: corporate number, qualified invoice issuer registration number, company name, phone number, signature records of the Basic Wholesale Agreement (signer's name and company, date and time of signing, IP address, etc.), and records of API key issuance and use ・Inquiries and chat: name, email address, phone number, company name, country/region, requested quantity, inquiry content, and chat messages and attachments ・Reviews: rating, title, text, display name, photos and videos (2) Information obtained from other businesses ・When you sign in with a Google account: name, email address and Google account identifier provided by Google ・When you enter a corporate or registration number: trade name and other information published by the National Tax Agency of Japan ・From our payment service provider (Stripe): payment results, payment IDs and payment method type ・From Amazon.co.jp: order information provided when you purchase our products (order number, order details, delivery details, etc.) (3) Information collected automatically when you use this Site ・IP address, browser and device information (user agent), access date and time, pages viewed, login history, and Cookie information (Article 6) ・In records such as login attempts and member registrations, the IP address and user agent are converted into a form that cannot be restored (a hash value) before being stored. (4) When you use KTEBO Label Print ・The information listed in that extension's privacy policy (account information, Amazon order numbers registered to add label credits, label issuance records, etc.)

We use the personal information we obtain for the following purposes. ① Member registration, identity verification, login and account management ② Selling products (receiving and confirming orders, billing and payment processing, shipping and delivery, delivery status updates, and confirming receipt) ③ Returns, exchanges, refunds and other after-sales service ④ Granting, using and managing balance, points and coupons (including checking the status and amount of the order with the order number entered in a point claim against our order information) ⑤ Services for business customers (verifying businesses, business pricing and wholesale transactions, quotations, issuing qualified invoices and receipts, and providing the API) ⑥ Responding to inquiries, chat and messages, and improving the quality of our responses and training our staff ⑦ Receiving, reviewing and publishing reviews (published reviews are shown on this Site together with the display name), and sending requests to write reviews ⑧ Sending important notices about orders, accounts and services (order confirmations, shipping notices, notices of changes to the Terms of Service or this Policy, etc.) ⑨ Informing you about our products, services and campaigns. Marketing emails and SMS are sent only to customers who have agreed to receive messages through the respective channel. The new preference uses one optional checkbox for both email and SMS. Existing email-only consent is not treated as SMS consent. You can stop marketing messages at any time in My Account, and each message includes instructions to stop them. Necessary order and delivery notices will continue after you stop marketing messages. ⑩ Preventing and responding to misuse such as impersonation, fraudulent payments and improper acquisition of points, and keeping this Site secure ⑪ Analyzing use of this Site and our services, improving them, and developing new products and services (including creating statistical information that does not identify individuals) ⑫ Responding to violations of the Terms of Service and handling disputes ⑬ Fulfilling legal obligations (keeping accounting and tax records, etc.) ⑭ Providing KTEBO Label Print (managing accounts and label credits, checking order numbers to add label credits, etc.). Information sent from that extension to our servers is used only within the purposes set out in that extension's privacy policy and is not used for advertising or sales promotion, unless you have agreed in My Account on this Site to receive information by email. Information about customers who purchased our products on Amazon.co.jp is used only for the purposes in ②, ③, ⑥, ⑩, ⑫ and ⑬, for creating statistical information that does not identify individuals under ⑪, and to check order numbers in order to grant points or label credits at the customer's request; it is not used for the information in ⑨. The names and contact details of persons in charge at our business partners (including suppliers and customers of our logistics and warehouse services) are used for business negotiations, concluding and performing contracts, communication, and billing and payment; information about job applicants is used for selection and communication; and information about employees is used for personnel and labor management.

Except in the following cases, we do not provide personal data to third parties without your prior consent. We do not sell your personal information. ・Where required by laws and regulations ・Where necessary to protect a person's life, body or property and it is difficult to obtain your consent ・Where especially necessary to improve public health or promote the sound growth of children and it is difficult to obtain your consent ・Where it is necessary to cooperate with a national agency, local government, or a person entrusted by them in performing duties prescribed by laws and regulations, and obtaining your consent is likely to interfere with the performance of those duties Providing personal data in connection with entrusting work under Article 4, or in connection with the succession of business due to a merger or other reasons, is not provision to a third party.

We may entrust all or part of the handling of personal data to others to the extent necessary to achieve the purposes of use. In such cases, we select contractors that handle personal data appropriately and supervise them as necessary and appropriate. Our main contractors and the services we use are as follows. ・Delivery of products: Japan Post Co., Ltd. and Sagawa Express Co., Ltd. ・Payment processing: Stripe (Article 5) ・Email and business tools: Google (Google Workspace) ・Servers: Alibaba Cloud (data is stored in a data center in Japan (Tokyo)) ・Generative AI services: to handle work such as responding to inquiries, processing orders and deliveries, and compiling data efficiently, our staff may have personal data processed using generative AI services provided by U.S. companies. We use only services whose business contracts provide that the information entered is not used for AI training (under the provider's terms, it may be retained for a certain period to monitor misuse).

(1) For payment methods processed through Stripe, such as credit cards, WeChat Pay and Alipay (the methods available are shown on the order screen), you enter payment information such as your card number directly on Stripe's payment page. This information does not pass through our servers, and we do not retain it. (2) To process payments, we provide Stripe with the order number, product names, quantities, amounts and your email address. Our counterparty to the data processing agreement with Stripe is Stripe Payments Europe, Limited (Ireland). In addition to processing payments, Stripe also uses this information under its own responsibility for purposes such as fraud prevention and legal compliance, and may transfer it to the United States and other countries in accordance with its privacy policy (https://stripe.com/privacy). By confirming your order with a payment method processed through Stripe after reviewing the notice on the order screen, you agree to this provision. (3) If you choose WeChat Pay or Alipay, information needed for the transaction (amount, merchant name, transaction number, etc.) is sent through Stripe to the operator of that service (a Tencent group company for WeChat Pay, an Ant group company for Alipay) to process the payment. The country where the recipient is located cannot be identified, because it is determined by the contracts between Stripe and each operator and we cannot choose it; it is expected to include the People's Republic of China, Hong Kong and Singapore. The People's Republic of China has a Personal Information Protection Law, but it also has systems, such as obligations on businesses to cooperate with government information-gathering activities, that may significantly affect the rights and interests of individuals (according to materials published by Japan's Personal Information Protection Commission). We are not in a position to confirm the measures the recipient takes to protect personal information and therefore cannot provide information about them. By confirming your order with WeChat Pay or Alipay after reviewing the notice on the order screen, you agree to this provision to a third party in a foreign country.

(1) This Site uses Cookies and browser local storage and similar technologies ("Cookies") for the following purposes. ・Keeping you logged in (ktebo_session; valid for 20 days) ・Keeping chat connected (ktebo_chat_session; valid for 90 days) ・Saving your language setting (ktebo_locale, NEXT_LOCALE; valid for 1 year) ・Saving your cart, the display state of notices, and entries in progress (stored only in your browser) ・Access analysis (Google Analytics) (2) When pages are displayed and in similar situations, information is sent to outside businesses as follows. ・Google Analytics (Google LLC): URL of the page viewed, referrer, date and time, browser and device information, IP address, Cookie identifier, and actions on this Site (viewing products, adding to cart, starting and completing checkout, submitting inquiries, etc.). This is used to analyze usage and improve this Site. We have configured our settings so that information that directly identifies you, such as your name, email address, phone number or address, is not sent to Google Analytics. For how Google uses this information, see https://policies.google.com/technologies/partner-sites. ・Google Fonts (Google LLC): IP address, browser information and this Site's domain, sent when fonts are fetched to display text ・Sign in with Google (Google LLC): browser information and similar data, sent to display the sign-in screen and verify your identity when you choose to sign in with Google ・Address lookup from postal code (zipcloud): the postal code entered, IP address and browser information, sent to fill in the address automatically (3) You can stop information being sent to Google Analytics with the opt-out browser add-on provided by Google (https://tools.google.com/dlpage/gaoptout). You can also disable Cookies in your browser settings, but some functions of this Site, such as login, will then be unavailable. (4) We do not use Cookies to deliver advertising based on your browsing history.

We take the following measures to prevent leakage, loss or damage of personal data and otherwise keep it secure. (1) Basic policy: we have established this Policy to ensure that personal data is handled properly. (2) Handling rules: we have established handling rules that set handling methods and the persons in charge for each stage such as obtaining, using, storing, providing and deleting. (3) Organizational measures: the Representative Director is responsible for the handling of personal data, and the staff who handle personal data and the scope of their handling are limited. We have set procedures for reporting and responding when a leak or similar incident occurs or may have occurred. (4) Human measures: we inform our staff in writing of the handling rules and the points to note in handling personal data. (5) Physical measures: we prevent theft and loss of equipment and documents used to handle personal data, and prevent persons without authorization from viewing it. (6) Technical measures: access to our management system is restricted by each person's permissions, and access is logged. Our database cannot be connected to directly from outside, and backups are stored in a non-public area. Communication with this Site is encrypted with HTTPS (TLS), and passwords are stored in a form that cannot be restored. When generative AI services are given access to data in our management system, the connection is read-only and limited to data other than member account information. (7) Understanding the external environment: we handle personal data using services of businesses located in the following foreign countries. We understand each country's system through materials published by Japan's Personal Information Protection Commission and other sources, and take measures such as contractual limits on handling, management of access permissions, and periodic checks of contractors. ・Singapore: country where the provider of our servers (Alibaba Cloud) is located. The servers storing data are in Japan (Tokyo). ・United States: country where the provider of our email and business tools (Google Workspace) is located. The country where the servers storing data are located cannot be identified, because the provider does not specify the storage location. ・United States: country where the providers of generative AI services are located ・Ireland (EU): country where our payment service provider (Stripe Payments Europe, Limited) is located. U.S. companies are also involved in payment processing as its contractors. For contractors located in foreign countries, we choose businesses that have established, by contract, systems for taking measures consistent with the purpose of the APPI, and we periodically check their implementation. On request, we will inform you of the details in accordance with the law. Summaries of each country's system are published on the website of Japan's Personal Information Protection Commission (https://www.ppc.go.jp/enforcement/infoprovision/laws/).

We keep personal information for the period necessary to achieve the purposes of use and endeavor to delete personal information promptly once it is no longer needed. Information that we are required by law to keep, such as records of orders and payments, is kept for the period prescribed by law. When you deactivate your account, we delete your registration information such as your name, email address, phone number and address, and the account can no longer be restored. However, order history, delivery details, records of inquiries, chat and reviews, and points history are kept for a certain period to handle returns and refunds, prevent misuse and comply with laws. If you would like this information deleted, please make a request under Article 9. However, information that must be kept by law, for example, may not be deletable; in that case we will tell you why.

(1) You may make the following requests to the Company regarding your retained personal data ("Requests for Disclosure, etc."). ・Notification of the purposes of use ・Disclosure (you may specify the method, such as provision as electronic records; including disclosure of records of provision to third parties) ・Correction, addition or deletion of content ・Suspension of use or erasure ・Suspension of provision to third parties (2) Please send Requests for Disclosure, etc. by email to the contact set forth in Article 12. We will tell you what the request needs to include and how we will verify your identity. (3) We verify your identity by, for example, contact from your registered email address and matching against your registration information. Only where necessary, we may ask for a copy of an identity document. For customers who purchased on Amazon.co.jp, we verify identity by, for example, matching the order number and delivery details. If the request is made by an agent, documents confirming the agent's authority are also required. (4) We do not charge a fee for requests for notification of the purposes of use or for disclosure. (5) When we receive a request, we will respond without delay in accordance with the law. If we cannot comply with a request under the law, we will inform you of that and the reasons. (6) You can check and change your registration information and change your email and SMS marketing settings at any time in My Account. You can also deactivate your account in My Account at any time, unless you have an order that has not been completed.

Minors who register as members or place orders should do so with the consent of a parent or other legal representative.

(1) We may change this Policy in response to amendments to laws, changes to this Site or our services, and other circumstances. (2) We change the purposes of use only within the scope reasonably recognized as related to the purposes before the change, and we publish the changed purposes on this Site. If we handle personal information beyond that scope, we will obtain your consent in advance. (3) Changes that require your consent under the law, such as changes concerning provision to third parties, will be made only after obtaining your consent in advance. (4) When we change this Policy, we will post the changed content and the date from which it applies on this Site. For changes with a significant effect on you, we will give notice a reasonable period before that date and will also endeavor to inform members by display in My Account or other means. (5) The Japanese version of this Policy is the authoritative text. The Chinese and English versions are translations provided for reference; in the event of any discrepancy, the Japanese version prevails. (6) This Policy sets out matters to be published under the APPI and similar matters, and is not one of the individual rules referred to in Article 1 of the Terms of Service. Where we ask for your consent based on this Policy, we will indicate what you are consenting to each time.

For inquiries, opinions or complaints about the handling of personal information and for Requests for Disclosure, etc., please contact us below. KTEBO Co., Ltd. Address: 〒558-0022 1-7-25 Sugimoto, Sumiyoshi-ku, Osaka, Japan Representative: Xiangfei Xu, Representative Director Contact: email info@ktebo.co.jp / phone +81-6-7777-7365 Hours: weekdays 9:00 - 18:00 (JST) The Company is not a covered business of an accredited personal information protection organization.