Privacy Policy

MaderaStyle CO., LTD. (hereinafter referred to as “the Company”) hereby establishes the following Privacy Policy (hereinafter referred to as “this Policy”) regarding the handling of personal information in the various services provided by the Company.

1. Business Entity Information

• Company Name: MaderaStyle CO., LTD.
• Address: 16-1 Mokuzai-cho, Kishiwada-shi, Osaka-fu 596-0011, 2F
• Representative: Masaaki Hattori
• Personal Information Protection Manager: Masaaki Hattori

2. Scope of Application

This Policy applies to personal information and related information that we collect through our website, online shop, inquiry forms, purchases, and related services, including information processed on our behalf by service providers.

3. Categories of Information to be Collected

We may collect the following categories of information:

• Identification and Contact Information: Name, address, telephone number, email address
• Transaction and Payment Information: Payment details processed via payment providers (including tokenized data handled by card companies), purchase history
• Device/Usage Information: Browsing history, cookie identifiers, IP address and derived approximate location, device and browser information, pages visited and interactions
• Inquiry Forms and Communications: Information entered in inquiry forms, files you choose to upload, order details you provide, and related communication logs

We do not intentionally collect sensitive personal information as defined by certain U.S. state privacy laws.

4. Purpose of Use

We use the above information for the following purposes:

• Product shipment, payment processing, cancellations/returns
• Responding to inquiries, providing customer support, and sending transactional or service-related communications
• Operation, maintenance, security, and improvement of our services; developing new functions
• Compliance with laws and regulations; prevention of misconduct; ensuring the safety of users and our services
• Creating statistical data after processing into a form that does not permit identification of individuals

5. Provision to Third Parties

We do not provide personal information to third parties without prior consent, except where permitted or required by law, including where necessary to protect life, body, or property; to improve public health or promote the sound upbringing of children; or when cooperating with government agencies pursuant to lawful requests.

6. Management of Service Providers

We use service providers only as needed to operate our business, including Shopify (online store, cart, checkout, and order- and payment-related processing), Google (Google Tag Manager and Google Analytics 4), Vercel (hosting, privacy-focused Web Analytics, security, and rate limiting), Cloudflare (Turnstile bot protection), Resend (delivery of inquiry-form emails), and delivery carriers. These providers process information under their own terms and privacy notices and may process information outside Japan. We select and supervise service providers as appropriate and require proper handling of personal information.

7. Cookies and Similar Technologies

We use cookies and similar technologies to operate our site, remember preferences, and measure performance. You can manage cookies through your browser settings; if you disable certain cookies, parts of the site may not function properly.

• Strictly Necessary/Functional Cookies (first-party)
  • Locale Routing Cookie (“NEXT_LOCALE”): We use this first-party cookie to remember your language preference. It is a session cookie and expires when you close your browser.
• Google Tag Manager and Google Analytics 4
  • We use Google Tag Manager to load and manage Google Analytics 4 (GA4). GA4 uses first-party cookies, including “_ga” and cookies beginning with “_ga_”, to help us understand how visitors use our site, measure site performance, and identify technical issues. Google may process information collected through these cookies, including the IP address at the time of collection, to derive an approximate location. Full IP addresses are not shown in our Google Analytics reports. These cookies may be retained for up to 24 months unless you delete them earlier through your browser controls.
  • We use Google Analytics data for analytics, site improvement, and technical monitoring purposes.

Vercel Web Analytics

We also use Vercel Web Analytics to measure aggregated page views and site performance. According to Vercel, this service does not use third-party cookies and does not associate analytics data with an individual or IP address.

• Shopping Cart Cookie
  • Shopping Cart Cookie (“cart”): When you add an item to your cart, we store a cart identifier in a first-party cookie named “cart” so that we can retrieve and maintain your shopping cart. The cart contents are stored and processed by Shopify, our e-commerce service provider, rather than in browser Local Storage. This cookie expires 14 days after it is set.

Your Choices:

• Browser Controls: Most browsers allow you to block or delete cookies. Please refer to your browser’s help pages.
• Google Analytics Opt-out: You may install the Google Analytics Opt-out Browser Add-on (https://tools.google.com/dlpage/gaoptout) or manage Google ad settings at https://adssettings.google.com/.

Do Not Track:

• There is currently no industry standard for responding to “Do Not Track” (DNT) signals; therefore, our site does not respond to DNT signals. This does not affect the operation of our site.

Use of Cloudflare Turnstile

We use Cloudflare Turnstile, provided by Cloudflare, Inc., to protect inquiry forms against abuse and automated bot submissions. Turnstile processes browser, device, and network signals needed to distinguish legitimate users from automated traffic. Cloudflare states that Turnstile does not access, store, or transmit form entries or other page inputs. For details, please refer to Cloudflare’s Turnstile Privacy Addendum.

8. Safety Management Measures

• Organizational: Appointment of information management officers; internal rules and procedures
• Human: Employee training; confidentiality undertakings
• Physical: Access controls; secure storage
• Technical: Access controls; encryption; monitoring and logging; vulnerability and incident management

9. Requests Regarding Personal Data We Hold

You (or your authorized representative) may request notification of the purpose of use, disclosure, correction, addition, deletion, suspension of use, or cessation of provision to third parties, in accordance with procedures prescribed by the Company. A reasonable fee may apply to certain requests as permitted by law.

10. Cross-border Data Transfers

If we use cloud services or providers located outside your jurisdiction, we will take appropriate measures consistent with applicable laws (e.g., contractual safeguards, due diligence regarding the destination country’s data protection framework).

11. Children’s Privacy (Under 13)

Our services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information as quickly as possible. If you believe that a child under 13 may have provided us with personal information, please contact us at shop@enjuboard.jp.

12. Amendments to This Policy

We may revise this Policy in response to legal changes or business needs. If changes materially affect individual rights, we will notify users on our website and implement the changes after a reasonable period.

13. U.S. State Privacy Disclosures

For users residing in certain U.S. states (e.g., California, Colorado, Connecticut, Utah, Virginia), you may have rights to access, correct, delete, or obtain a copy of personal information, and to opt out of certain processing, where applicable. We do not “sell” personal information and do not “share” personal information for cross-context behavioral advertising as those terms are defined in the California Consumer Privacy Act (as amended by the CPRA). To exercise rights available to you, please contact us at the email address below. We may need to verify your identity before fulfilling a request. Authorized agents may submit requests on your behalf where permitted by law.

14. Contact

For inquiries or consultations regarding the handling of personal information, please contact:

• E-Mail: shop@enjuboard.jp