Privacy policy

SITE POLICIES

DARUMARU PRIVACY POLICY

Privacy Policy

Effective Date: September 14, 2026

BEAUTEX Co., Ltd. (hereinafter referred to as “we,” “us,” or “our”) handles customers’ personal information collected through “DARUMARU” (hereinafter referred to as “this Site”), which we operate, as follows.

Table of Contents

1. Operation of Each Policy and Governing Language
2. Business Operator Information
3. Definition of Personal Information
4. Information We Collect
5. Purposes of Use
6. Legal Basis for Processing
7. Retention Period
8. Provision to Third Parties
9. Provision to Third Parties Located in Foreign Countries
10. Outsourcing of Operations
11. Cookies and External Data Transmission
12. Security Measures
13. Requests for Disclosure, Correction, Deletion, etc.
14. Rights of EU and UK Residents
15. Rights of California Residents
16. Children's Personal Information
17. Revisions to This Policy
18. Contact and Complaint Submission

01Operation of Each Policy and Governing Language

When using this Site (including browsing, account registration, and placing orders), please review the contents of each of our policies. Your agreement to each policy is established when you indicate your consent during the order process.

The content of this Site and each policy is prepared in Japanese, and versions in other languages are translations provided for reference. In the event of any discrepancy between the Japanese version and versions in other languages, the definitions and interpretation of the Japanese version shall prevail. However, where this treatment is limited by mandatory consumer protection laws in your country or region of residence, such laws shall prevail.

This Policy applies together with our other policies (Terms of Use, Order and Shipping Policy, Refund and Return Policy, and Legal Notice under the Act on Specified Commercial Transactions).

02Business Operator Information

The person responsible for managing the handling of personal information (Administrator/Data Controller) is as follows.

03Definition of Personal Information

“Personal information” in this Policy means personal information as defined in Article 2, Paragraph 1 of the Act on the Protection of Personal Information (Act No. 57 of 2003). Where the EU General Data Protection Regulation (GDPR) and the UK GDPR apply, this includes “personal data” as defined therein.

04Information We Collect

We collect the following information.

(1) Information You Provide

• Name, email address, and telephone number
• Shipping address and billing address
• Order details and purchase history
• Account information (email address and authentication information. If you log in using an external service such as a Google Account, your name and email address provided by that service)
• Information provided in inquiries, reviews, and surveys

(2) Information Collected Automatically

• IP address and identifiers such as cookies
• Browser type and language settings, operating system, and device type
• Referring URL, pages viewed, date and time of viewing, and activity history on the Site
• Whether emails we send are opened and links are clicked

(3) Payment Information

05Purposes of Use

We use the personal information we collect within the scope of the following purposes. If we use it for any other purpose, we will obtain your prior consent.

1. Sale of products, order processing, shipping, and import and export procedures
2. Confirmation of order details and communications regarding shipping status and other transactions
3. Responding to inquiries, returns, exchanges, defects, and other consultations
4. Account management and identity verification
5. Billing, payment, and accounting processing
6. Prevention of and response to fraudulent orders, impersonation, and unauthorized access
7. Delivery of marketing information, such as email newsletters (only to those who wish to receive them)
8. Improvement of product assortment, services, and the Site through analysis of Site usage
9. Delivery of advertisements and measurement of their effectiveness
10. Compliance with laws and regulations concerning tax and imports and exports

06Legal Basis for Processing

For customers residing in the EU and the United Kingdom, we process personal data based on the following legal bases.

You may withdraw your consent at any time for processing based on consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

07Retention Period

We retain personal information only for the period necessary to achieve the purpose of use and for the retention period required by law. After the retention period expires, we delete it or process it in a manner that makes restoration impossible.

08Provision to Third Parties

We will not provide personal information to third parties without obtaining your prior consent, except in the following cases.

• Where required by law
• Where necessary to protect a person’s life, body, or property, and obtaining your consent is difficult
• Where it is necessary to cooperate with a national agency, local government, or a person entrusted by either in carrying out duties prescribed by law, and obtaining your consent may impede the performance of such duties
• Where necessary for the exercise of our rights or response to legal claims (including disclosure to lawyers, tax accountants, and other professionals subject to confidentiality obligations)
• Where business operations are succeeded due to a merger, company split, business transfer, or other reason

Please note that provision to service providers specified in the following articles does not constitute “provision to third parties” under applicable laws.

09Provision to Third Parties Located in Foreign Countries

To operate this Site and provide international shipping, we entrust the handling of personal data to the following businesses located in foreign countries.

Personal Information Protection Systems in Destination Countries

For information on personal information protection systems in each country, please refer to the Personal Information Protection Commission's survey results on foreign systems (Personal Information Protection Commission website).

Measures Taken by Recipients

We enter into data processing agreements with each recipient and transfer data outside the EU based on appropriate safeguards, such as Standard Contractual Clauses (SCCs). To request details of these safeguards, please contact our inquiries desk.

10Outsourcing of Operations

To the extent necessary to achieve the purposes of use, we may outsource operations such as product storage and shipment, delivery, payment processing, system operation and maintenance, email delivery, and data analysis. When outsourcing, we assess the suitability of contractors, impose security management obligations by contract, and provide necessary and appropriate supervision.

11Cookies and External Data Transmission

This website uses Cookies and similar technologies for the following purposes.

For customers accessing this website from the EU, the United Kingdom, or other countries or regions where prior consent is required, we display a banner to obtain consent before using non-essential Cookies. You may change your consent settings at any time through this website's Cookie settings.

You can refuse or delete Cookies through your browser settings. However, if you disable essential Cookies, the shopping cart and login functions may not work properly.

12Security Measures

We take necessary and appropriate measures to prevent leakage, loss, or damage of personal data and to ensure other security controls.

• Establishment of Basic Policy
  To ensure the proper handling of personal data, we have established this Policy and comply with applicable laws, regulations, and guidelines.
• Organizational Security Measures
  We appoint a person responsible for handling personal data and establish a system to monitor handling practices. We establish reporting and communication procedures in the event of incidents such as data breaches.
• Personnel Security Measures
  We provide employees with training on the handling of personal data and establish confidentiality requirements.
• Physical Security Measures
  We take measures to prevent theft or loss of equipment handling personal data and, when transporting equipment, take measures to ensure that personal data cannot be readily identified.
• Technical Security Measures
  We limit access to personal data to the minimum number of personnel who require it and implement multi-factor authentication. Communications are encrypted using SSL/TLS.
• Understanding External Environments
  We handle personal data in Canada and the United States. We understand the systems for the protection of personal information in these countries and take necessary and appropriate measures for secure management.

13Requests for Disclosure, Correction, Deletion, etc.

You may request notification of the purpose of use, disclosure (including provision in electronic records), correction, addition, or deletion of content, suspension of use or erasure, and suspension of provision to third parties with respect to personal data we hold.

We may be unable to comply with your request if it does not meet the requirements prescribed by law or if the information is required by law to be retained. In such cases, we will contact you with the reason.

14Rights of EU and UK Residents

Where the GDPR and UK GDPR apply, you have the following rights. If you wish to exercise them, please contact our inquiries desk.

• Right to Request Access to Your Personal Data
• Right to Request Rectification of Inaccurate Personal Data
• Right to Request Erasure of Personal Data (Right to Be Forgotten)
• Right to Request Restriction of Processing
• Right to Receive Personal Data in a Structured, Commonly Used Format and Transfer It to Another Controller (Data Portability)
• Right to Object to Processing Based on Legitimate Interests and to Direct Marketing
• Right to Withdraw Consent at Any Time
• Right Not to Be Subject Solely to Automated Decision-Making Producing Legal Effects

If you are dissatisfied with our response, you have the right to lodge a complaint with the supervisory authority in your country of residence. In the United Kingdom, the Information Commissioner's Office (ICO) is the supervisory authority.

15Rights of California Residents

If you reside in California, you may request disclosure of the categories of personal information we collect and the purposes for which we use it, as well as deletion, correction, and cessation of sharing for advertising purposes. Requests may be submitted through the Contact Form. We will not discriminate against you for exercising your rights.

We do not sell personal information for monetary consideration. If we share personal information for interest-based advertising, you may opt out through this website's Cookie settings.

16Children's Personal Information

This website is not intended for children. We do not knowingly collect personal information from individuals under the age of 16 (or under the lower age specified by the laws of their country of residence). If you are a minor, please use this website only with the consent of your parent or guardian. If we become aware that we have collected such information, we will promptly delete it.

17Revisions to This Policy

We may revise this Policy in response to amendments to laws and regulations or changes to our services. If revised, we will post the revised content and the date of the last revision on this page. In the event of material changes, we will notify you in advance through a notice on this website or by email.

18Contact and Complaint Submission

For questions, requests, or complaints regarding the handling of personal information, please contact the following desk.

View Other Policies