Privacy policy

Ari Buff Co., Ltd. handles the personal information this shop holds as set out below. What we hold Your name, email address, delivery address, phone number, your date of birth if you gave one, your order and delivery history, the points you earn and spend, anything you write to us, and the connection records your browser sends while you use the shop. The payment processor receives full card numbers and security codes; we do not store or display them. We store and display the card brand, last four digits and expiry date so you can identify and manage your saved cards. Passwords are kept in a form that cannot be read back, and staff cannot see them. Why we use it To take an order and its payment, to dispatch the goods and tell you where they are, to issue receipts and invoices, to run your membership and your points, to answer you, to stop fraudulent orders, to keep the books Japanese law requires, and — only where you asked for it — to send you news. You can withdraw that last consent in your account at any time. Who else sees it Nobody outside the company, except with your consent or where the law requires it. Some work is carried out for us under contract: a payment processor (card payment and card storage), a fulfilment warehouse and the carriers (recipient name, address and phone), an email sending service, and a cloud provider whose machines run in Tokyo. Each one is supervised by us. Customers in Taiwan Orders are handled in Japan, so your information is transferred to Japan and stored there. Under Taiwan’s Personal Data Protection Act you may ask to see it, take a copy, correct it, stop its use, or have it deleted; write to the address below. How long we keep it Order and receipt records are kept for seven years, as Japanese law requires. Membership information is deleted once an account closure has gone through. A record of consent is kept for a period afterwards, so that consent can still be evidenced. Your rights and how to reach us You can see and correct your registered details in your account. For access, suspension of use, deletion, or any question about this notice, write to pokebuff.support@ari-buff.com. We answer without delay once we have confirmed who you are. Signing in with Google When you choose Google sign-in and give permission, we receive your name, email address, profile picture and account identifier from Google. We use these for shop registration, sign-in, account linking and security. We do not receive your Google password or request access to Gmail messages, Google Drive files or contacts. We do not sell information received from Google or use it for personalized advertising. Information needed for sign-in is stored in our membership system operated in Japan, with processing supported by our contracted cloud provider. We exchange information needed for authentication with Google when you sign in. Google's handling is also covered by its privacy policy (https://policies.google.com/privacy). You can revoke access from your Google Account's connections settings. To delete membership information stored by this shop, use account closure in your member page or contact pokebuff.support@ari-buff.com. Revoking Google access alone does not delete your shop account. Legally required order and accounting records and necessary security records remain subject to the retention policies above.