Privacy Policy

1. Who is responsible

Act Inc., Japan, operates kachicollect.com and kachishop and is the controller of your personal information. Contact for privacy matters: [email protected].

2. What we collect

Account: name, email address, phone number and a hashed password. Orders: shipping name and address, the items you buy, prices, currency, order status and tracking numbers. Payment: handled entirely by Stripe; we receive a confirmation and the last four digits of your card, never the full card number. Support: the messages, photos and order details you send us by email or WhatsApp. Personal-shopper requests: the product link, notes and email you submit. Technical: IP address, browser type, the pages you visit and cookies described in section 7.

3. Why we use it

To create and secure your account (including email verification and password resets); to process, pack, ship and track your orders; to prepare the customs declaration your parcel legally requires; to send order confirmations, shipping updates and replies to your questions; to prevent fraud and abuse; to comply with Japanese tax and commercial record-keeping laws; and to send account holders news and offers by email. You can stop these emails at any time with the unsubscribe link in each email or in My Page (settings); order and account emails are still sent.

4. Who we share it with

We share personal information only with service providers who process it for us, and only what they need: Stripe (payment processing, fraud prevention; your shipping address is stored with Stripe to pre-fill checkout), Resend (sending transactional emails), Railway and Neon (hosting and database, servers located in Singapore), Cloudflare (content delivery and security), Google Analytics (aggregated usage statistics; see section 7), Japan Post and the delivery partner in your country (name, address, phone and parcel contents for delivery and customs), and for pre-owned cameras or requested items, the Japanese shop we buy from does not receive your details. We do not sell your personal information and we do not use advertising networks.

5. International transfers

We are based in Japan and our servers are in Singapore. If you live in the Philippines, Singapore, Malaysia, Thailand, France, Belgium, Luxembourg, Monaco, Switzerland, Canada, South Korea or elsewhere, your information is transferred to Japan and Singapore to fulfil your order. We rely on the safeguards required by Japan’s Act on the Protection of Personal Information and on contracts with our providers that require them to protect your data.

6. How long we keep it

Account information is kept while your account is open. Order and payment records are kept for 7 years after the order to meet Japanese accounting and tax rules, then deleted or anonymised. Support conversations are kept for 2 years. Technical logs are kept for up to 90 days.

7. Cookies

We use a small number of first-party cookies that are necessary for the site to work: your sign-in session, your chosen shipping country and language, and the contents of your cart. Stripe sets its own cookies on the checkout page for fraud prevention. We also use Google Analytics to understand how the site is used (pages visited, country, device, and whether a visit leads to a cart or an order); IP addresses are anonymized and we do not use advertising or cross-site tracking cookies. If you visit from the EU, the UK or Switzerland, Google Analytics cookies are only set after you accept them in the banner, and you can change your choice by clearing the site's local storage. You can delete cookies in your browser settings; the site will then forget your sign-in and cart.

8. Your rights

You can ask us to show you the personal information we hold about you, correct it, or delete it, and you can close your account at any time by emailing [email protected]. We answer within 30 days. We may need to keep order records we are legally required to retain. If you are in a country with a data protection authority, you also have the right to complain to it.

9. Security

All traffic to the site is encrypted (HTTPS). Passwords are stored hashed. Payment details never touch our servers. Access to order data is limited to staff who handle orders and support.

10. Children

kachishop is for adults. We do not knowingly collect information from anyone under 18; if you believe a minor has created an account, contact us and we will delete it.

11. Changes

We will post any changes here with a new date. If a change significantly affects how we use your information, we will email account holders.