Privacy Policy

Privacy PolicyLast updated: April 15, 2025

This Privacy Policy applies to the use of the Services by ONAIL ("Website", "we", "us" or "our") when you visit our website (the "Site") or otherwise interact with us (collectively, the "Services"). For purposes of this Privacy Policy, "you" and "your" refer to you as a user of the Services, whether you are a customer, website visitor, or any other individual about whom we collect information pursuant to this Privacy Policy.

Please read this Privacy Policy carefully. By using and accessing the Services, you consent to the collection, use and disclosure of your information as described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use or access any of the Services.

Changes to this Privacy Policy We may update this Privacy Policy from time to time, including to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last Updated" date, and take any other steps required by applicable law.

How we collect and use your personal information To provide our Services, we have collected personal information about you over the past 12 months from a variety of sources, as described below: The information we collect and use depends on how you interact with us.

In addition to the specific uses listed below, we may use the information we collect about you to communicate with you, to provide the Services, to comply with applicable legal obligations, to enforce applicable Terms of Use, and to protect or defend the Services and our rights in the Services, and the rights of our users or others.

Personal Information We Collect The types of personal information we obtain about you depend on how you interact with our Website and use our Services. When we use the term "personal information", we mean information that identifies, relates to, describes, or may relate to you. The following sections describe the categories and specific types of personal information we collect.

Information We Collect Directly From You Information that you submit directly to us through our Services may include:

Basic contact information, such as name, address, phone number, and email.
Order information may include your name, billing address, shipping address, payment confirmation, email address, and phone number.
Your account information includes your username, password, and security questions.
Shopping information, such as items you viewed, items you placed in your shopping cart, and items you added to your wish list.
Customer support information includes information you choose to include in your communications with us, such as when you send us a message through the Services.
Certain features of the Service may require you to provide certain information about yourself directly to us. You can choose not to provide this information, but doing so may prevent you from using or accessing those features.

Information we collect through cookies We also automatically collect certain information about your interaction with the Service ("Usage Data"). To do this, we may use cookies, pixels, and similar technologies ("Cookies"). Usage Data may include information about how you access and use our Site and your account, including device information, browser information, information about your network connection, your IP address, and other information about your interaction with the Service.

Information We Obtain from Third Parties Finally, we may obtain information about you from third parties, such as vendors and service providers, who collect information on our behalf.

Companies that power our website and services, such as Shopify.
Our payment processor collects payment information (such as bank account, credit or debit card information, and billing address) to process your payment in order to fulfill your order and provide the products or services you have requested to perform our contract with you.
When you visit our website, open or click on emails we send you, or interact with our services or advertisements, we or third parties with whom we partner may automatically collect information using online tracking technologies (such as pixels, web beacons, software developers, certain information packages, third-party libraries, and cookies).
Any information we obtain from third parties will be treated in accordance with this Privacy Policy. We are not responsible for the accuracy of information provided by third parties, nor are we responsible for the policies or practices of third parties. For more information, see the "Third Party Sites and Links" section below.

How we use your personal information Providing products and services: We use your personal information to provide you with services, to perform our contract with you, such as processing payments, fulfilling your orders, sending you communications related to your account, purchases, returns, exchanges, or other transactions, creating, maintaining, and otherwise administering your account, arranging for shipping, facilitating returns and exchanges, and enabling you to post reviews.
Marketing and Advertising: We use your Personal Information for marketing and promotional purposes, such as sending you marketing, advertising and promotional communications via email, text message and postal mail, and displaying advertisements for products and services. This may include using your Personal Information to better tailor our services and advertising on our Site and other websites.
Security and Fraud Prevention We use your Personal Information to detect, investigate, or take action regarding potentially fraudulent, illegal, or malicious activities. If you choose to use the Service and register an account, you are responsible for keeping your account credentials secure. We encourage you not to share your username, password, or other access information with anyone. If you believe that your account has been compromised, please contact us immediately.
Communications with You We use your personal information to provide you with customer support and improve our services. This is in line with our legitimate interests to respond to you promptly, provide you with an effective service, and maintain our business relationship with you.
Cookies Like many websites, we use cookies on our Site. For specific information about the cookies we use in connection with powering your store with Shopify, please see https://www.shopify.com/legal/cookies. We use cookies to enhance and improve our Site and our Services (including remembering your actions and preferences), perform analytics and better understand how you interact with the Services (for our legitimate interests of managing, improving and optimizing our Services). We may also allow third parties and service providers to use cookies on our Site to better tailor our services, products and advertising on our Site and other websites.

Most browsers automatically accept cookies by default, but you can set your browser to remove or reject cookies through browser controls. Please note that removing or blocking cookies may negatively affect your user experience and may cause problems with some of our Services, including: Also, blocking cookies may not completely prevent information from being shared with third parties, such as advertising partners.

How We Disclose Your Personal Information In certain circumstances, we may disclose your personal information to third parties for legitimate purposes in accordance with this Privacy Policy.

With vendors or other third parties who perform services on our behalf (such as IT management, payment processing, data analysis, customer support, cloud storage, fulfillment and shipping).
We work with business and marketing partners, such as Shopify, to provide our Services and advertise to you. We use Shopify to support personalized advertising through third-party services. Our business and marketing partners use your information in accordance with their respective privacy notices.
When you instruct, request, or otherwise agree to us disclosing certain information to third parties, such as through product delivery or the use of social media widgets or login integrations, with your consent.
To our affiliates or others within our group, for our legitimate interests in running our business successfully.
In connection with a business transaction, such as a merger or bankruptcy, to comply with applicable legal obligations (including responding to subpoenas, search warrants, and similar requests), to enforce applicable Terms of Service, and to protect or defend the Services, our rights, and the rights of our users or others.
Over the past 12 months, we have disclosed the following categories of Personal Information and Sensitive Personal Information (denoted with an *) about our users for the purposes described above under "How We Collect and Use Personal Information" and "How We Disclose Personal Information":

Categories Recipient Categories
  • Identifiers such as basic contact details, specific order and account information
  • Commercial information, such as order information, shopping information, and customer support information
  • Internet or other similar network activity (e.g., usage data)
  • Vendors and third parties who perform services on our behalf (such as internet service providers, payment processors, fulfillment partners, customer support partners, and data analytics providers)
  • Business and Marketing Partners
  • Affiliates

We do not use or disclose sensitive personal information to infer characteristics about you.

Over the past 12 months, we have "sold" and "shared" (as those terms are defined under applicable law) personal information for the purpose of engaging in advertising and marketing activities, as described below.

Types of personal information Recipient Categories
Identifiers such as basic contact details, specific order and account information Business and Marketing Partners
Commercial information, such as records of purchased goods and services, shopping information, etc. Business and Marketing Partners
Internet or other similar network activity (e.g., usage data) Business and Marketing Partners

User-Generated Content. The Service may enable you to post product reviews and other user-generated content. If you choose to submit user-generated content to public areas of the Service, this content will be public and accessible by anyone.

We cannot control who has access to the information you choose to make public to others, and cannot guarantee that parties with access to such information will respect your privacy or keep it secure. We are not responsible for the privacy or security of any information you make public, or the accuracy, use, or misuse of any information you disclose or receive from third parties.

Third-Party Websites and Links Our Site may provide links to websites or other online platforms operated by third parties. If you follow a link to a site that is not affiliated with or controlled by us, you should review that site's privacy and security policies and other terms of use. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness or reliability of any information found on those sites. Any information you provide in public or semi-public areas, including information you share on third-party social networking platforms, may be viewed by other users of the Services and/or users of those third-party platforms, without any restriction on its use by us or by third parties. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or their owners or operators, unless disclosed on the Services.

Children's Data The Services are not intended for use by children and we do not knowingly collect personal information about children. If you are a parent or guardian of a child who has provided us with personal information, you may contact us using the contact details provided below to request deletion of that personal information.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we have “shared” or “sold” (as those terms are defined under applicable law) the personal information of individuals under the age of 16.

Security and Retention of Your Information Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." Additionally, any information you transmit to us may not be secure during transmission. We encourage you not to use insecure channels to transmit sensitive or confidential information to us.

The length of time that we retain your personal information depends on a variety of factors, including whether the information is needed to maintain your account, provide services, comply with our legal obligations, resolve disputes, or enforce other applicable agreements or policies.

Your Rights and Choices Depending on where you live, you may have some or all of the following rights regarding your personal information. However, these rights are not absolute and may only apply in certain circumstances, and in some cases, we may deny your request where permitted by law.

Access/Right to Know. You may have the right to request access to the personal information we hold about you, including details about how we use and share your information.
The right to erasure. You may have the right to request that we erase the personal information we hold about you.
The right to rectification. You may have the right to request that we correct any inaccurate personal information we hold about you.
Right to portability. You may have the right to receive a copy of the personal information we hold about you and to ask us to transmit it to a third party, subject to certain circumstances and exceptions.
Right to Opt Out of Sales, Sharing, or Targeted Advertising. You may have the right to instruct us not to "sell" or "share" your personal information or to opt out of the processing of your personal information for purposes that may be considered "targeted advertising," as those terms are defined under applicable privacy laws. If you visit our Site with the opt-out preference signal enabled in the Global Privacy Controls, we may do so automatically, depending on your location, based on the device and browser you use to access the Site.
Right to Limit and/or Opt-Out of Use and Disclosure of Sensitive Personal Information. You may have the right to instruct us to limit the use and/or disclosure of your Sensitive Personal Information to only that information necessary to perform the services or provide the goods that the average individual would reasonably expect.
Restriction of Processing: You may have the right to ask us to stop or restrict the processing of your personal information.
Withdrawing Consent: Where we process your personal information on the basis of consent, you may have the right to withdraw this consent.
Objection: If we refuse to process your request, you may have the right to object to our decision, which you can do by replying directly to our refusal.
Managing your communication preferences: We may send you promotional emails, which you can opt out of receiving at any time by using the unsubscribe options provided in any email we send you. If you opt out, we may still send you non-promotional emails, such as emails about your account or orders.
You can exercise these rights where indicated on our site or by contacting us using the contact details below.

We will not discriminate against you for exercising these rights. We may need to collect information from you to verify your identity, such as your email address and account information, before providing a substantive response to your request. Consistent with applicable law, you may designate an authorized agent to make requests to exercise rights on your behalf. Before accepting such a request from an agent, we may require the agent to provide evidence that you have authorized them to act on your behalf, and in some cases, we may require you to verify your identity directly with us. We will respond to your request in a timely manner as required under applicable law.

We use Shopify's advertising services, such as Shopify Audiences, to personalize the ads you see on third-party websites. To limit Shopify merchants that use these advertising services from using your personal information for such services, please visit https://privacy.shopify.com/en.

Complaints If you have a complaint about how we process your personal information, please contact us using the contact details provided below. If you are not satisfied with how we have responded to your complaint, depending on where you live, you may have the right to challenge our decision by contacting us using the contact details provided below, or to lodge a complaint with your local data protection authority.

International Users Please be aware that we may transfer, store, and process your personal information outside your country of residence, including in the United States. Your personal information will also be processed by staff, third-party service providers and partners in those countries.

When we transfer your personal information outside of Europe, we rely on approved transfer mechanisms, such as the European Commission's Standard Contractual Clauses, or equivalent agreements issued by the relevant competent authority in the UK, unless the data transfer is to a country deemed to provide an adequate level of protection.

Contact Us If you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any rights available to you, please contact us by email at service@onail.jp.

For the purposes of applicable data protection laws, we are the data controller of your personal information. Our representative in Japan is ONAIL.