Privacy policy

This policy explains what personal data Umekaze collects, why, and what rights you have. Umekaze is the controller responsible for your personal data. For any privacy question, use the contact details at the end of this policy.

What we collect

Information you give us: your name, delivery address, email address, phone number and order details when you contact us or place an order.

Information collected automatically: your IP address, device and browser information, and traffic logs when you visit the site. This is handled by our hosting and content-delivery provider, described under 'Overseas delegation' below.

Storage on your device: we keep two items in your browser's local storage — your country and language choice ('umekaze-locale') and the contents of your bag ('umekaze-cart'). These are first-party, used only to make the site work, are not used for tracking or advertising, and are never sent to us or to third parties.

Why we use it and our legal basis

We use your data to fulfil and deliver your order and to respond to enquiries (to perform our contract with you); to keep the site secure and working (our legitimate interest); and to meet tax, accounting and other legal obligations.

Who we share it with

We share personal data only with shipping carriers to deliver your order, our payment processor to take payment once checkout is enabled, our hosting and content-delivery provider (Cloudflare, Inc.), our professional advisers, and public authorities where the law requires it. We do not sell your personal data.

Overseas delegation / consignment of data processing

To operate this website we entrust the processing of certain data to a provider located outside your country, which is an overseas transfer. The details are set out below. This transfer is necessary to provide the site and is carried out under a data-processing agreement with the recipient.

Recipient: Cloudflare, Inc.

Country: United States (and its global network locations)

Items transferred: IP addresses, device information, traffic logs, and data passing through the network (where specific storage tools are used)

Purpose: Website performance optimization, CDN caching, DDoS protection, and security application management

Retention period: Deleted automatically after the purpose is achieved, or according to the provider's log lifecycle policies

How long we keep it

Order records are kept as long as needed to fulfil the order and to meet tax and accounting requirements, generally up to seven years. Enquiry emails are kept for up to two years. Automatically collected logs are kept only for the period described above. Local-storage items stay on your device until you clear them.

Your rights

You have the right to complain to your data-protection authority. These rights apply under Singapore's PDPA, Korea's PIPA and Japan's APPI; the exact scope depends on where you live.

Security

We use HTTPS, access controls and a security and DDoS-protection layer. No method of transmission or storage is completely secure, but we take reasonable steps to protect your data and will notify you and the relevant authority of a data breach where the law requires.

Children

This site is not directed at children. We do not knowingly collect data from children under 16. If you believe a child has given us personal data, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed, and significant changes will be highlighted on this page.

Contact

For any privacy request, email umekazegroup@gmail.com.