Home › Privacy Policy
⚠️ This is a draft. UK GDPR applies to your UK customers, India's **DPDP Act
2023 to your Indian customers, and Japan's Act on the Protection of Personal
Information** throughout. Have it reviewed before publishing.
Japan Proxy Service ("we", "us") handles the personal information we collect through the Service as set out below.
Effective: [DATE]
1. What we collect
| Category | What | How |
|---|---|---|
| Contact details | Name, email address, telephone number | Your request form |
| Delivery details | Shipping address, country, postal code | Your reply to our quote |
| Order details | Item URLs, item names, quantities, budget, notes | Request form and email |
| Transaction records | Amounts invoiced, payment status, tracking numbers | Our own business records |
| Identity documents | ID, where required for high-value or unusual orders | Provided by you |
We never collect or store your card details. Those go directly to our payment processor, Stripe, Inc.
2. Why we use it
- To provide the Service — buying, storing, packing and shipping your goods
- To contact you — quotes, progress updates, answers to your questions
- To prepare the documents customs requires
- To invoice you and confirm payment
- To prevent fraud and verify identity
- To keep records the law requires us to keep
We do not use your information for anything else without your consent, and we do not send marketing email.
3. Who we share it with
The Service cannot work without passing some information to others. We pass on the minimum needed.
| Recipient | What they receive | Why |
|---|---|---|
| Sellers in Japan | Your name, a Japanese delivery address | To buy and receive the goods |
| Carriers (Japan Post, FedEx, DHL and others) | Name, delivery address, phone number, contents | International shipping and customs |
| Customs authorities (Japan and your country) | What appears on the waybill and invoice | Export and import clearance |
| Stripe, Inc. | Email address, amount | Payment processing |
| Google LLC | Your form responses | Receiving and managing requests |
| Cloudflare, Inc. | IP address (anonymised immediately) | Serving the website and counting visits |
We do not sell, rent or otherwise pass your personal information to anyone else.
4. International transfers
We are based in Japan. Your information is handled in Japan and transferred to your destination country as far as delivery requires.
Stripe, Inc. and Google LLC are based in the United States and handle information under their own privacy policies.
5. How long we keep it
| Information | Retention |
|---|---|
| Order and transaction records | 7 years (Japanese bookkeeping requirements) |
| Shipping records and tracking numbers | 3 years |
| Correspondence | 3 years |
| Identity documents | Deleted as soon as verification is complete |
After that we delete it, or destroy it so that it cannot be recovered.
6. Your rights
You may ask us to:
- Tell you what personal information we hold about you
- Correct or complete anything inaccurate
- Erase your information
- Stop using it, or stop passing it to others
- Give you a copy in a machine-readable form (where UK GDPR applies)
Write to the address below. We will verify who you are and respond within 30 days.
⚠️ While an order is in progress, and for records the law requires us to keep,
we may not be able to erase everything you ask us to.
7. If you are in the UK or the EU (UK GDPR)
- Our lawful bases for processing
Performance of a contract — providing the Service
Legal obligation — bookkeeping and customs documentation
Legitimate interests — preventing fraud - You have the right to complain to the Information Commissioner's Office (ICO) in the UK.
- We do not have a representative in the UK. Please contact us at the address below.
8. If you are in India (DPDP Act 2023)
You have the right to access, correct and erase your personal data, and to withdraw consent. Please contact us at the address below.
9. Cookies and analytics
This website does not use cookies.
We use Cloudflare Web Analytics to see how the site is being used. It sets no cookies and stores nothing on your device.
We see only aggregate figures:
- which pages were viewed
- where visitors arrived from
- country or region
- browser and device type
- how quickly pages loaded
These are aggregated so that no individual visitor can be identified, including by us. IP addresses are anonymised at the point of counting and are not stored.
Because no cookies are set, we do not need your consent for analytics under the UK PECR or UK GDPR.
If we ever adopt an analytics or advertising tool that does use cookies, we will
revise this section and put a consent mechanism in place first.
10. How we protect it
- Access is limited to what the work requires
- Traffic is encrypted with SSL/TLS
- The devices and accounts used for the business have two-factor authentication
- Identity documents are deleted as soon as verification is complete
11. Changes to this policy
We may change this policy. If we change anything significant, we will post it on this website.
12. Contact
⚠️ Fill this in before publishing.
| Business | Japan Proxy Service |
| Data protection contact | [Name] |
| Address | [Address] |
| [privacy@yourdomain] |