Privacy Policy

1. Introduction

Welcome to Nippon Postcards ("we", "us", "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.nipponpostcards.com and use our postcard sales and mailing services (collectively, the "Service").

This policy applies to information we collect through our website and in email or other electronic messages between you and this website.

Please read this Privacy Policy carefully. By using the Service, you agree to the terms of this Privacy Policy. If you do not agree, please do not access the site or use the Service.

We are the data controller for the information collected via this Service. Our contact details are provided at the end of this policy. Our operations are based in Toyohashi, Aichi, Japan.

2. Information We Collect

We collect personal information that you voluntarily provide to us and information that is automatically collected when you use our Service.

3. How We Use Your Information

We use the information we collect for various purposes:

• To Provide and Manage the Service: Fulfill your postcard orders, including printing recipient addresses and messages, applying postage, and mailing the postcards from Japan.
• To Process Payments: Facilitate payment transactions for your orders via our third-party payment processors.
• To Communicate With You: Send order confirmations, shipping updates, respond to inquiries, and provide customer support.
• For Marketing Purposes (with your consent): Send newsletters or promotional materials, but only if you have opted-in to receive them. You can opt-out at any time.
• To Improve Our Service: Analyze usage data to understand how our website is used, identify trends, and improve user experience and offerings.
• For Security and Fraud Prevention: Monitor for and prevent fraudulent transactions and other illegal activities; protect the security of our website and Service.
• To Comply with Legal Obligations: Meet legal requirements, such as tax laws or responding to lawful requests from authorities.

4. Legal Basis for Processing Personal Information (GDPR & relevant laws)

If you are from the European Economic Area (EEA) or other regions with similar data protection laws, our legal basis for collecting and using the personal information described above depends on the information concerned and the specific context:

• Performance of a Contract: Processing is necessary to fulfill our contract with you (i.e., to process and mail your postcard order).
• Consent: Where you have given us explicit consent (e.g., for marketing emails, non-essential cookies). You can withdraw consent at any time.
• Legitimate Interests: Where processing is necessary for our legitimate interests (e.g., improving our Service, fraud prevention, analytics), provided these interests are not overridden by your data protection interests or fundamental rights and freedoms.
• Legal Obligation: Where processing is necessary to comply with a legal obligation we are subject to.

5. How We Share Your Information

We do not sell your personal information. We may share your information with third parties only in the ways described below:

• Postal/Shipping Carriers: We share the recipient's name and address with postal services (e.g., Japan Post) to deliver your postcard.
• Payment Processors: We share payment information with secure third-party payment processors (e.g., Stripe, PayPal) to complete transactions. They have their own privacy policies.
• Service Providers: We may share information with third-party vendors who perform services on our behalf (e.g., website hosting, analytics providers like Google Analytics, email service providers). These providers only have access to the information needed to perform their functions and are obligated to protect it.
• Legal Requirements: We may disclose your information if required by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction.

6. International Data Transfers

Your information, including personal data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ.

As we operate from Japan, information provided by users outside Japan will be processed in Japan.

We will take steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and applicable law.

7. Data Security

We use administrative, technical, and physical security measures to help protect your personal information. We use HTTPS encryption for data transmitted to/from our website.

Despite our efforts, no security measures are perfect or impenetrable.

8. Data Retention

We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy.

Usage data is generally retained for a shorter period.

9. Your Data Protection Rights

Depending on your location, you may have the following rights regarding your personal data:

• The right to access: You can request copies of your personal information.
• The right to rectification: You can request that we correct inaccurate or incomplete information.
• The right to erasure: You can request that we erase your personal information.
• The right to restrict processing.
• The right to object to processing.
• The right to data portability.
• The right to withdraw consent.
• The right to lodge a complaint with a data protection authority.

To exercise these rights, please contact us. We may need to verify your identity.

10. Cookies and Tracking Technologies

We use cookies and similar technologies. Please refer to our Cookie Policy.

11. Children's Privacy

Our Service is not intended for children under 18 years old.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

By email: cyberjapanservices@gmail.com