KOYORI Privacy Policy

Effective June 2025

KOYORI is a brand name representing a group of companies working in partnership. (“KOYORI,” “we,” “us,” or “our”) recognizes the importance of protecting personal information and is committed to handling it responsibly in accordance with applicable laws and regulations.
This Privacy Policy applies to the processing of personal data that we collect from individuals in the European Economic Area (EEA) under the General Data Protection Regulation (GDPR), from individuals in the United Kingdom under the UK GDPR, and from residents of California under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). It also applies to individuals in Japan, other Asian countries, other U.S. states with applicable privacy laws, and other regions where our data practices are subject to local data protection requirements.

1. Scope

This Privacy Policy applies to the personal data we collect via:

  • - Contact forms and inquiry submissions
  • - Newsletter subscriptions
  • - Cookies and analytics
  • - Business cards and other business communications

2. What We Collect

We may collect and store the following categories of personal data:

  • - Contact Information: Name, company/organization, job title, e-mail address, phone number, address, and social media IDs
  • - Technical Data (from website visitors): IP address, browser type, device type, OS, cookie data, and usage behavior
  • - Voluntary Submissions: Any information you provide in forms, e-mails, or conversations with our team (e.g. feedback or inquiries)

We do not intentionally collect sensitive personal data (e.g. medical or biometric data) unless required by law.

3. Purpose of Use

We process personal data for the following purposes:

  • - To respond to inquiries and requests
  • - To send newsletters or product information (only if consent is given)
  • - To manage and improve our website and content
  • - To maintain internal records and communication with partners
  • - To analyze visitor behavior for performance and marketing insights
  • - To comply with legal obligations or respond to legal claims

4. Legal Basis

We process personal data on the following legal grounds:

  • - Consent (e.g. for newsletter subscriptions)
  • - Legitimate Interest (e.g. analytics, business operations)
  • - Legal Obligations (e.g. responding to lawful requests)

Where required, we will request your explicit consent before processing your data.

5. Retention

We retain personal data only as long as necessary for the purposes described above, or as required by law. Data may be securely deleted or anonymized when no longer needed.

6. Sharing of Personal Data

We do not sell personal data. We may share data with:

  • - Service providers (e.g. newsletter delivery, IT support)
  • - Regulatory authorities if required by law
  • - Partner companies involved in KOYORI brand activities, for limited administrative purposes

All third parties are contractually bound to protect your information.

7. Transfers Outside Your Country

KOYORI is headquartered in Japan. If we transfer personal data from the EEA or UK to Japan, the transfer is permitted under Japan’s adequacy decision by the European Commission. For other cross-border transfers, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs).

8. Your Rights

Depending on your location, you may have the following rights:

  • - Access your data
  • - Correct inaccuracies
  • - Request deletion
  • - Withdraw consent
  • - Object to or restrict certain uses
  • - Request data portability (EU/UK only)

To exercise any of these rights, please contact us using the details below.

9. Cookies

We use cookies and similar technologies to enhance your browsing experience, measure website traffic, and support site functionality. You may control cookie settings through your browser or refer to our Cookie Policy.

10. Data Security

We implement appropriate technical and organizational safeguards to protect personal data against loss, misuse, and unauthorized access. Access is restricted to authorized personnel only.

11. Data Breaches

In the event of a data breach, we will act swiftly to assess the impact and notify affected individuals and authorities when required under applicable laws.

12. California Residents

California residents have specific rights under the CCPA/CPRA:

  • - The right to know what personal data we collect and share
  • - The right to delete personal data (with exceptions)
  • - The right to correct inaccurate data
  • - The right to opt-out of sale or sharing (we do not sell data)
  • - The right to non-discrimination for exercising these rights

Requests may be submitted using the contact details below.

13. External Links

Our website may contain links to third-party websites. We are not responsible for their content or privacy practices. Please review their privacy policies separately.

14. Contact Us

For questions, concerns, or to exercise your privacy rights, please contact:
KOYORI
Attn: Privacy Manager
info@koyori-jp.com

15. Changes to This Policy

This Privacy Policy may be updated from time to time. Any updates will be posted on this page with the date of revision noted. Please check back periodically.

Last updated: June 2025