Privacy Policy (GDPR Compliance)

Privacy Policy

This Privacy Policy describes how Art&Stationery (art-stationery-jp.com, the “Site” or “we”) collects, uses, and discloses your Personal Information when you visit or make a purchase from the Site.

Last updated: June 16, 2026

1. Collecting Personal Information

When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support. In this Privacy Policy, we refer to any information that can uniquely identify an individual as “Personal Information”.

Device Information

  • Examples of Personal Information collected: version of web browser, IP address, time zone, cookie information, pages or products you view, search terms, and how you interact with the Site.
  • Purpose of collection: To load the Site accurately for you, and to perform analytics on Site usage to optimize our Site.
  • Source of collection: Collected automatically when you access our Site using cookies, log files, web beacons, tags, or pixels.
  • Disclosure for a business purpose: Shared with our processor Shopify.

Order Information

  • Examples of Personal Information collected: Name, billing address, shipping address, payment information (including encrypted credit card numbers), email address, and phone number.
  • Purpose of collection: To provide products or services to you to fulfill our contract; to process your payment information; arrange for shipping; provide you with invoices and/or order confirmations; communicate with you; screen orders for potential risk or fraud; and, in line with your preferences, provide you with information or advertising relating to our products or services.
  • Source of collection: Collected from you.
  • Disclosure for a business purpose: Shared with our processor Shopify, our payment provider PayPal, and our delivery provider Japan Post & Fedex.

Customer Support Information

  • Examples of Personal Information collected: Name, email address, order details, and any other information you voluntarily provide when contacting us for support.
  • Purpose of collection: To provide customer support.
  • Source of collection: Collected from you.
  • Disclosure for a business purpose: Not shared with third parties beyond what is necessary to resolve your inquiry.

2. Minors

The Site is not intended for individuals under the age of 16. We do not intentionally collect Personal Information from children. If you are the parent or guardian and believe your child has provided us with Personal Information, please contact us at info@art-stationery-jp.com to request deletion.

3. Sharing Personal Information

We share your Personal Information with service providers to help us provide our services and fulfill our contracts with you, as described above. Specifically:

  • We use Shopify to power our online store. Our store is hosted by Shopify, and Shopify collects and processes your personal data for purposes including providing services such as personalized experiences and relevant advertising. Information about your activity on our store may be shared with Shopify and with third parties located in other countries. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy. You can also review Shopify’s Consumer Privacy Policy here: https://www.shopify.com/legal/privacy/app-users. To exercise your rights regarding Shopify’s processing of your data, visit: https://privacy.shopify.com.
  • We use PayPal as a payment provider. You can read PayPal’s Privacy Policy here: PayPal Privacy Policy.
  • We use Japan Post as a delivery provider. You can read Japan Post’s Privacy Policy here: Japan Post Privacy Policy.
  • We may share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful request for information we receive, or to otherwise protect our rights.

Our shop will not share your information for marketing purposes with companies outside of our business.

4. Using Personal Information

We use your Personal Information to provide our services to you, which includes: offering products for sale, processing payments, shipping and fulfillment of your order, and keeping you up to date on new products, services, and offers.

5. Cookies

We use cookies and similar tracking technologies to improve your browsing experience on our Site. Cookies are small data files placed on your device.

We use the following types of cookies:

  • Strictly necessary cookies: Required for the Site to function and cannot be switched off.
  • Analytics cookies: Help us understand how visitors interact with our Site (e.g., pages visited, time spent).
  • Marketing cookies: Used to deliver relevant advertisements.

If you are located in the European Economic Area (EEA) or United Kingdom (UK), we will ask for your consent before placing non-essential cookies on your device. You can withdraw your consent at any time by adjusting your cookie preferences via the cookie banner on our Site.

6. Lawful Basis (GDPR)

Pursuant to the General Data Protection Regulation (“GDPR”), if you are a resident of the European Economic Area (“EEA”) or United Kingdom (“UK”), we process your personal information under the following lawful bases:

  • Your consent — for example, for non-essential cookies and marketing communications.
  • Performance of a contract — to fulfill your order and process payments.
  • Compliance with legal obligations — for example, tax and accounting requirements.
  • Protection of vital interests — in rare circumstances where necessary to protect life.
  • Legitimate interests — which do not override your fundamental rights and freedoms. These legitimate interests include: preventing risk and fraud; providing and improving our products and services; providing reporting and analytics; and assisting with marketing, advertising, or other communications. We process personal data for these purposes only after considering the potential risks to your privacy.

We generally process your information when we need to do so to fulfill a contractual obligation (for example, to process your payments for goods or services), or where we or our partners need to use your personal data for a reason related to our business. Laws in the EEA and UK call these reasons “legitimate interests”.

We may also process your personal data where you have provided your consent. At any time, you have the right to withdraw your consent by contacting us at info@art-stationery-jp.com or by adjusting your preferences via the cookie banner on our Site.

7. Retention

When you place an order through the Site, we will retain your Personal Information for as long as necessary to fulfill our legal and contractual obligations. Specifically:

  • Order information is retained for up to 7 years for tax and accounting purposes.
  • Device and analytics data is retained for no longer than 26 months.
  • Customer support information is retained for as long as necessary to resolve your inquiry and for a reasonable period thereafter.

After the applicable retention period, your data will be securely deleted or anonymized. For more information on your right of erasure, please see the ‘Your Rights’ section below.

8. Automatic Decision-Making

If you are a resident of the EEA or UK, you have the right to object to processing based solely on automated decision-making (which includes profiling), when that decision-making has a legal or otherwise significant effect on you.

We do not engage in fully automated decision-making that has a legal or otherwise significant effect using customer data.

Our processor Shopify uses limited automated decision-making to prevent fraud that does not have a legal or otherwise significant effect on you. This includes:

  • Temporary denylist of IP addresses associated with repeated failed transactions (persists for a small number of hours).
  • Temporary denylist of credit cards associated with denylisted IP addresses (persists for a small number of days).

9. Your Rights

GDPR Rights (EEA and UK Residents)

If you are a resident of the EEA or UK, you have the following data protection rights:

  • Right of access — You have the right to request a copy of the personal data we hold about you.
  • Right of rectification — You have the right to request correction of inaccurate or incomplete personal data.
  • Right to erasure — You have the right to request deletion of your personal data in certain circumstances.
  • Right to restriction of processing — You have the right to request that we restrict the processing of your personal data.
  • Right to data portability — You have the right to receive your personal data in a structured, commonly used, machine-readable format.
  • Right to object — You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
  • Right to withdraw consent — Where processing is based on consent, you have the right to withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@art-stationery-jp.com. We will respond to your request within 30 days. In some cases, we may need to verify your identity before processing your request. If we are unable to fulfill your request, we will explain the reason.

Your Personal Information will be initially processed in Ireland and then transferred outside of Europe for storage and further processing, including to Canada and the United States. For more information on how data transfers comply with the GDPR, see Shopify’s GDPR Whitepaper: https://help.shopify.com/en/manual/your-account/privacy/GDPR.

Right to Lodge a Complaint

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority:

California Residents (CCPA)

Our Site does not sell Personal Information as defined by the California Consumer Privacy Act of 2018 (“CCPA”).

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. We encourage you to review this page periodically for the latest information.

11. Contact Us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by email:

Art&Stationery
Owner: Koichi Iwamoto
Email: info@art-stationery-jp.com