Privacy Policy (プライバシーポリシー)

SUZUKI & CO., LTD. (株式会社鈴木商会, "Suzuki") respects Customer privacy. This Policy explains how Suzuki collects, uses, shares, retains, and protects personal information when Customers access the website https://szk1982.com and related services.

Suzuki is the data controller (個人情報取扱事業者) for personal information collected through the website, and complies with Japan's Act on the Protection of Personal Information (APPI) (個人情報保護法). By using the website, Customers acknowledge that they have read this Policy. This Policy is an integral part of the Terms of Service.

2.1 Information Provided by Customers

• Account information: full name, email address, phone number, password (one-way encrypted), preferred language and currency.
• Shipping information: recipient name, address, phone number, postal code, country. This information is printed on shipping labels and customs declarations.
• Payment information: method type, last four digits of the card, cardholder name, bank name, and account number when refunds are made by bank transfer. Full card numbers and security codes are not stored on Suzuki's systems; they are processed by licensed payment partners.
• Verification information: identity documents or other documents when Suzuki needs to verify identity under the Terms of Service or at the request of a payment partner.
• Communications content: messages, emails, Product questions, complaints, images or videos attached to return requests, Product reviews.
• Purchase needs: when Customers use the feature to submit purchase needs or chat with the assistant on the website.

2.2 Information Collected Automatically

• Transaction data: Order history, Products viewed, favorites, price offers, shipping status, refund history, changes in Suzuki Balance.
• Technical data: IP address, device type, operating system, browser, language, referrer page, access time, error logs.
• Cookies and similar technologies: see Section 9.

2.3 Information from Third Parties

• Payment processing and fraud check results from payment partners;
• Shipping status from carriers;
• Name, email, and profile picture when Customers log in with a Google account, according to the scope permitted by the Customer.

Suzuki does not intentionally collect sensitive information and asks Customers not to send such information.

Suzuki does not use personal information for purposes other than those stated above without notice and, where required by law, without the Customer's consent.

Suzuki does not sell Customers' personal information. Suzuki shares information only with the following parties, to the extent necessary for each purpose:

Parties processing data on behalf of Suzuki are contractually bound to use the data only for the purposes designated by Suzuki and must keep it confidential.

Suzuki is a Japanese legal entity and serves Customers in many countries. Personal information is processed in Japan, Singapore, and the countries where Suzuki's service providers host servers. When transferring data to third parties overseas, Suzuki complies with the provisions of Japan's Act on the Protection of Personal Information (APPI): transfers are made only to countries recognized as having an equivalent level of protection, to parties that have committed to applying equivalent protective measures, or with the Customer's consent.

Identity verification documents are deleted after verification is completed, unless retention is required by law. Marketing emails stop immediately when Customers unsubscribe. After the retention period expires, data is deleted or anonymized in a manner that cannot be restored.

Suzuki applies reasonable technical and organizational measures to protect personal information: transmission encryption, one-way encrypted passwords, card numbers processed by PCI DSS-compliant payment partners, employee access controls, periodic backups, and employee training on handling personal information.

No system is absolutely secure. If a leakage incident occurs that may affect Customers' rights and interests, Suzuki will notify Customers and the Personal Information Protection Commission of Japan in accordance with regulations.

Customers have the right to:

• Access: request a copy of the information held by Suzuki;
• Correction: correct inaccurate or outdated information, which may be done by the Customer in the account;
• Deletion: request deletion of the account and data according to the instructions on the Account Deletion page on the website, except for data that Suzuki must retain by law;
• Suspension of use or sharing: when information is used beyond the disclosed purposes or collected improperly;
• Marketing unsubscribe: via the link in each email or in account settings;
• Withdrawal of consent: for processing based on consent, without affecting prior processing;
• Complaint: to Suzuki through the information in Section 13, or to the Personal Information Protection Commission of Japan (個人情報保護委員会).

To exercise their rights, Customers must send a request by email to info@szk1982.com from the registered email address. Suzuki may require identity verification before processing and will respond within 30 days. Suzuki does not charge a fee for ordinary requests.

On first access, the website displays a cookie selection panel for Customers to accept all cookies or keep only strictly necessary cookies. Customers may change their selection at any time in the cookie settings at the bottom of the page or through browser settings.

The website may contain links to other websites, such as social networks, carrier Order tracking pages, and payment portals. This Policy does not apply to those websites. Customers should read each party's privacy policy.

Suzuki's services are intended for persons aged 18 or older. Suzuki does not intentionally collect information from children. If it discovers that it has collected information from an underage person without the consent of a guardian, Suzuki will delete that information. Parents or guardians who discover such a case are requested to contact Suzuki.

Suzuki may update this Policy when its data processing methods, laws, or services change. The new version will be published on the website together with the effective date. For material changes, Suzuki will provide notice by email or on the website before they take effect.

Data controller and point of contact for requests related to personal information:

• SUZUKI & CO., LTD. (株式会社鈴木商会)
• Corporate Number: 9010001047428
• Person responsible for personal information protection: Representative Director
• Address: 6F Nihonbashi YT Building, 1-21-7 Nihonbashi-Kakigaracho, Chuo-ku, Tokyo 103-0014, Japan
• Email: info@szk1982.com
• Phone: +81 3 3667 7108, 10:00–18:00 JST, Monday to Friday, excluding Japanese public holidays

If the Customer resides in the EU/EEA or the United Kingdom:

• Legal bases for processing: performance of a contract (Order processing, shipping, support); legal obligations (accounting, customs); legitimate interests (fraud prevention, security, service improvement); consent (marketing, non-essential cookies).
• Additional rights: the right to data portability, the right to restrict processing, the right to object to processing based on legitimate interests, and the right not to be subject to decisions based solely on automated processing that have legal effects.
• Data transfers: Japan is recognized by the European Commission as providing an adequate level of protection. For providers in other countries, Suzuki applies the EU Standard Contractual Clauses.
• Complaints: Customers have the right to lodge a complaint with the data protection authority in their country of residence.

If the Customer resides in California:

• In the past 12 months, Suzuki has collected the following categories of information: identifiers (name, email, address, IP), commercial information (purchase history), internet activity (cookies, pages viewed), limited financial information (last four digits of card), and inferences from purchasing behavior (Product preferences).
• Suzuki does not sell personal information. Advertising cookies may be considered "sharing" as defined by the CCPA; Customers can disable them in the cookie selection panel or send a "Do Not Sell or Share My Personal Information" request by email.
• Customers have the right to know, delete, and correct, and not to be discriminated against for exercising their rights. An authorized agent may submit a request on behalf of a Customer together with proof of authorization.