Privacy policy

Last updated: December 30, 2025

Kozaru Japanese Crafts operates this store and website, including all related information, content, features, tools, products and services (the "Services"). Kozaru Japanese Crafts is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us.

For the purposes of the General Data Protection Regulation (GDPR), Kozaru Japanese Crafts is the Data Controller of your personal information.

1. Personal Information We Collect

When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support.

A. Information you provide to us

  • Examples: Name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number.
  • Purpose: To provide products or services to you to fulfill our contract, to process your payment information, arrange for shipping, and provide you with invoices and/or order confirmations, communicate with you, and screen our orders for potential risk or fraud.
  • Legal Basis: Performance of a contract (Art. 6 (1) (b) GDPR).

B. Information we collect automatically (Cookies & Log Files)

  • Examples: IP address, time zone, cookie information, what sites or products you view, search terms, and how you interact with the Site.
  • Purpose: To load the Site accurately for you, and to perform analytics on Site usage to optimize our Site.
  • Legal Basis: Legitimate Interest (Art. 6 (1) (f) GDPR) for technical necessity; Consent (Art. 6 (1) (a) GDPR) for analytics and marketing cookies via our Cookie Banner.

2. How We Use Your Personal Information

We use your personal Information to provide our services to you, which includes: offering products for sale, processing payments, shipping and fulfillment of your order, and keeping you up to date on new products, services, and offers.

Legal Basis for Processing (GDPR)
If you are a resident of the European Economic Area (EEA), we process your personal information under the following lawful bases:

  • Your consent (e.g., for newsletters or non-essential cookies);
  • The performance of the contract between you and the Site (e.g., to fulfill your order);
  • Compliance with our legal obligations (e.g., tax laws);
  • Our legitimate interests, which do not override your fundamental rights and freedoms (e.g., to prevent fraud and improve our services).

3. Sharing Personal Information

We share your Personal Information with service providers to help us provide our services and fulfill our contracts with you, as described above.

  • Shopify: We use Shopify to power our online store. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.
  • Shipping & Payment: We share data with payment processors and shipping companies solely to fulfill your orders.
  • Legal Requirements: We may share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

International Transfer
Our store is hosted by Shopify Inc. Your data may be transferred to Canada and the United States. Transfers to Canada are covered by an Adequacy Decision by the European Commission. Transfers to the USA are conducted under Standard Contractual Clauses (SCCs) to ensure a high level of data protection.

4. Your Rights (GDPR)

If you are a resident of the EEA, you have the right to access the Personal Information we hold about you, to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased.

You have the following rights:

  • Right of Access (Art. 15 GDPR)
  • Right to Rectification (Art. 16 GDPR)
  • Right to Erasure (Art. 17 GDPR)
  • Right to Restriction of Processing (Art. 18 GDPR)
  • Right to Data Portability (Art. 20 GDPR)
  • Right to Object (Art. 21 GDPR)

If you would like to exercise these rights, please contact us through the contact form on our website or via the contact details below.

5. Data Retention

When you place an order through the Site, we will retain your Personal Information for our records unless and until you ask us to erase this information. Please note that we are required by German tax law to keep certain order data (invoices) for 10 years (Art. 6 (1) (c) GDPR).

6. Cookies

We use cookies to improve your experience. You have the right to accept or reject non-essential cookies via our Cookie Banner settings upon entering the site.

7. Changes

We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.

8. Contact

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at kozaru.shop@gmail.com or by mail using the details provided below:

Kozaru Japanese Crafts
Schützengasse 1, 01067 Dresden, Germany