Privacy policy

Personal Information Protection Policy

Paintory Co., Ltd. (hereinafter "the Company"), believing that it has a responsibility as a company contributing to society to set a standard for the appropriate handling of personal information, recognizes the importance of properly handling personal information. The Company hereby establishes this Personal Information Protection Policy, which its officers and employees will observe as one, in order to make every effort to protect personal information and the rights and interests of individuals.

When acquiring personal information, the Company will, to the extent possible, specify the purpose of use and acquire personal information only to the extent necessary to achieve that purpose.
When personal information is acquired directly from the individual in writing, the Company will acquire it within the necessary scope after informing the individual of the Company's name, the name and contact information of the person responsible for personal information protection, and the purpose of use.
The Company will use personal information only within the scope of the purpose of use consented to by the individual, and will establish and implement the procedures necessary to prevent use beyond that purpose.
The Company will manage the personal information it holds by appropriate means and will not disclose or provide it to third parties without the individual's consent.
The Company will manage the personal information it holds accurately and up to date within the scope necessary for the purpose of use, and will take reasonable security measures to prevent and correct any risk of leakage, loss, or damage of personal information.
When outsourcing the processing of personal information to an outside party, the Company will contractually obligate the outsourced party not to leak the information or provide it to third parties, and will implement appropriate management of such outsourced party.
The Company will respond to complaints and inquiries regarding the personal information it holds by having the individual contact the Company's inquiry desk.
The Company will comply with the laws and regulations, national guidelines, and other norms concerning the handling of personal information.
The Company will establish a personal information protection management system, review it periodically, and continuously improve it.

Established: January 16, 2023
Yuta Katayama, Representative Director, Paintory Co., Ltd.

Contact regarding this Personal Information Protection Policy
Paintory Co., Ltd. Personal Information Consultation Desk
60-2 Motouo-cho, Tsuyama-shi, Okayama 708-0061, Japan
TEL: 0120-931-853

Privacy Policy

This Privacy Policy (hereinafter "this Policy") explains how Paintory Co., Ltd. (hereinafter "the Company") handles information about users of the online store (hereinafter "the Service") provided on the online site operated by the Company (hereinafter "the Site").

Article 1 (Scope of Application)

This Policy applies to the use of the Service. In addition, where the Company sets forth provisions regarding the handling of user information in a privacy policy, other personal information protection policy, terms of use, or similar document published on the Service, such provisions shall also apply; where such provisions conflict with this Policy, this Policy shall take precedence.
This Policy does not apply to external services with which the Company partners in connection with the Service, or to other services provided by parties other than the Company (hereinafter "Partner Services"). Regarding the handling of user information in Partner Services, please refer to the privacy policy or similar document separately established by the operator of the relevant Partner Service.

Article 2 (Information Collected by the Company)

In order to achieve the purposes of use set forth in the following Article, the Company collects the following information (hereinafter "User Information"), including personal information (meaning "personal information" as defined in Article 2, Paragraph 1 of the Act on the Protection of Personal Information; the same shall apply hereinafter) concerning customers who use the Service (including individuals who wish to register for use of the Service or individuals who wish to make a purchase; hereinafter "User").

Information provided by Users in connection with their use of the Service
Name, company/department name, address, phone number, email address, credit card information, information regarding the delivery destination of products (name, address, phone number), information regarding purchased products, information entered or submitted by Users through input forms on the Service, and other information designated by the Company for the Service
Information collected by the Company in connection with the use of the Service
Device ID, advertising identifiers, IP address, device location information, server access log information, Cookies, other information sent by users through the Service (search history, text data, images, videos, posts to the Service, etc.), and information obtained from Partner Services based on User consent (such as User IDs on Partner Services)

Article 3 (Purpose of Use)

The Company will appropriately handle User Information within the scope of the purposes set forth in the following items.
- To review registration for use of the Service
- To provide the Service and to verify User identity
- To confirm product orders and related matters under the Service
- To provide products under the Service (including e-commerce services on the Site, payment collection, and shipment of products to designated delivery addresses)
- To respond to inquiries and provide information regarding the Service
- To notify Users of changes to the terms of use or this Policy, suspension, discontinuation, or termination of the Service, and other important notices regarding the Service
- To maintain and improve the Service and to consider new services
- To investigate and analyze the status of use of the Service
The Company may change the purposes of use set forth in the preceding paragraph to the extent reasonably deemed relevant to the purposes prior to the change. If the Company makes such a change, it will announce the change to Users by notice, posting on the Service or the Site, or other easily understandable means.

Article 4 (Provision to Third Parties)

The Company will not provide personal data (meaning "personal data" as defined in Article 16, Paragraph 3 of the Act on the Protection of Personal Information; the same shall apply hereinafter) to third parties without the consent of the individual, except where it provides such data to third parties (including those located outside Japan) in the cases set forth below.

Where personal data such as name, phone number, email address, and information regarding the internet usage environment (IP address, device information, etc.) is provided for the purpose of fraud detection and prevention conducted by credit card issuers. If the card issuer used by a User is located overseas, this information may be transferred to the country in which the issuer is located. As the Company cannot identify, from the information collected from Users, which card issuer is being used or in which country that issuer is located, the Company is unable to provide the following information regarding personal information protection measures.
- The name of the foreign country in which the recipient is located
- Information regarding the personal information protection system of that country
- Personal information protection measures taken by the issuer

Information regarding personal information protection systems in various countries is available on the website of the Personal Information Protection Commission (available in Japanese).

Where personal data such as a User's name, address, phone number, and purchase history is provided to a consignor (partner company, etc.) that has entrusted the Company with the sale of products under the Service, for the purposes of shipping products, managing inventory, reporting sales results, and other after-sales service.
Where such personal data is provided in connection with entrusting the handling of all or part of the personal data, within the scope necessary to achieve the purposes of use set forth in this Policy.
Where personal data is provided in connection with the succession of business due to a merger or other reason.
Where personal data to be jointly used with a specific party is provided to that party, and the Company has, in advance, notified the individual of, or placed the individual in a position to readily know, that fact, together with the items of personal data to be jointly used, the scope of the joint users, the purpose of use by the users, and the name of the person responsible for managing the personal data.
Where otherwise required under the Act on the Protection of Personal Information or other applicable laws and regulations, in addition to the preceding items.
Where personal data such as name, address, phone number, and purchase information is provided to the e-commerce platform provider used by the Company to operate the Service (Shopify Inc. and its affiliates) and to payment service providers (PayPal Pte. Ltd., Apple Inc., Google LLC, etc.) for the purposes of providing the Service, processing payments, and preventing fraudulent use. These providers are located outside Japan; please refer to the privacy policy separately established by each such provider regarding its handling of personal information.

Article 5 (Joint Use)

The Company may jointly use personal information obtained from Users with operators providing Partner Services, within the scope necessary for the provision of the Service, as set forth below.

Scope of joint users: The Company and each company belonging to the giftee Inc. group
Items of personal data to be jointly used: Personal data included in the User Information set forth in Article 2
Purpose of use by joint users: The same as the purposes of use set forth in Article 3
Person responsible for managing the jointly used personal data:
60-2 Motouo-cho, Tsuyama-shi, Okayama 708-0061, Japan
Yuta Katayama, Representative Director, Paintory Co., Ltd.

Article 6 (Use of Information Collection Modules)

The Service incorporates the following information collection modules selected by the Company in order to analyze the status of use of the Service and the effectiveness of advertising. In connection with this, the Company may provide User Information to the providers of the information collection modules listed below (including those located outside Japan). These information collection modules collect User Information without including information that identifies a specific individual, and the information collected is managed in accordance with the privacy policy or other rules established by each information collection module provider.

Google Analytics (provider: Google LLC)

The Site displays a Cookie consent banner and obtains User consent for the use of Cookies for analytics, advertising, and similar purposes. Users may change or withdraw the scope of their consent at any time via "Cookie Settings" in the banner.

Article 7 (Behavioral Targeting Advertising)

The Company uses programs provided by advertising distribution companies to analyze information such as website browsing history and purchase history obtained from Users through websites operated by the Company, and to provide the Service and deliver behavioral targeting advertisements. Such browsing history and purchase history do not include information that can identify a specific individual.

Article 8 (Rights to Disclosure, Correction, etc. of Personal Information)

Where a User requests, in accordance with the Act on the Protection of Personal Information, notification of the purpose of use of, disclosure of, disclosure of records of provision to third parties of, correction, addition, or deletion of, or suspension of use, deletion, or suspension of provision to third parties of, personal data held in the Company's database (hereinafter "Disclosure Request, etc."), the Company will respond without delay after confirming that the request is made by the User in question. However, this shall not apply where the Company is not obligated to do so under the Act on the Protection of Personal Information or other applicable laws and regulations.

For a Disclosure Request, etc., please contact the inquiry desk set forth in Article 13.

Article 9 (Voluntary Nature of Providing Personal Information)

The provision of personal information required by the Company to provide the Service is voluntary. If a User does not provide such information, the Company may be unable to provide various aspects of the Service.

Article 10 (Automatic Collection of Information)

The Company will never collect personal information by means that a User cannot easily recognize (such as Cookies or web beacons).

Article 11 (Security Control Measures)

The Company takes necessary and appropriate measures for the security control of personal data it handles, including the prevention of leakage, loss, or damage, and other security control of personal data. The Company also exercises necessary and appropriate supervision when providing personal data to its employees or outsourced parties (including sub-contractors). The main security control measures for personal data are as follows.

Formulation of basic policies: The Company has formulated basic policies regarding "compliance with relevant laws and guidelines" and "the desk for questions and complaint handling," among other matters, to ensure the appropriate handling of personal data.
Establishment of rules for handling personal data: The Company has established basic handling methods for the acquisition, use, storage, and other handling of personal data.
Organizational security control measures: A responsible person confirms that personal data is handled in accordance with the established handling methods. The Company has also established a reporting and communication structure from employees to the responsible person.
Personnel security control measures: The Company provides regular training to employees regarding matters to be noted in the handling of personal data.
Physical security control measures: The Company implements measures so that persons other than employees authorized to handle personal data and the individual concerned cannot easily view personal data. The Company also implements measures to prevent theft or loss of devices, electronic media, and similar items.
Technical security control measures: The Company clarifies the devices that may be used to handle personal data and the employees who may handle such devices, and has introduced measures to prevent unnecessary access and a system to protect against unauthorized software.

Article 12 (Changes to This Policy)

The Company will review, as appropriate, the operational status of its handling of User Information and strive for continuous improvement, and may change this Policy from time to time as necessary. However, when changing the content of Articles 3 through 10 or Article 13, the Company will obtain the consent of Users by a method separately determined by the Company.
Regarding this Policy after any change, the Company will announce the fact that this Policy has been changed, the content of this Policy after the change, and the effective date thereof, by posting on the Site or the Service, by notice to Users via email or other electromagnetic means, or by other easily understandable means. However, when making a change of a nature that requires the consent of Users under applicable laws and regulations, the Company will obtain the consent of Users by a method separately determined by the Company.

Article 13 (Contact)

For opinions, questions, requests for disclosure, complaints, or any other inquiries regarding the Company's handling of User Information, please contact the inquiry desk below.

Contact for inquiries regarding this Privacy Policy and personal information (including specific personal information)

Name: Paintory Co., Ltd.
Address: 60-2 Motouo-cho, Tsuyama-shi, Okayama 708-0061, Japan
Personal Information Protection Manager: Leader, General Affairs Unit, Corporate Division
Contact: info@paintory.com

Established: April 1, 2026
Yuta Katayama, Representative Director, Paintory Co., Ltd.