This page says what personal data HIRUandon Store collects, why, and who sees it. The shop is run by HIRUandON, 281-21 Haibara, Uda-shi, Nara, Japan.
What we collect
- Order data: name, delivery address, email address, phone number (if you give it), and what you ordered.
- Payment data: it goes straight to our payment provider. We never see or store your full card number.
- Messages you send us.
- Technical data in server logs, such as IP address and browser, kept for security.
- Two cookies for the shop itself: one remembers your cart, one remembers the country you chose (30 days). We do not use advertising or analytics cookies.
Why we use it
- To deliver your order and answer you (needed to carry out the contract).
- To keep records the law requires, such as accounts and customs papers.
- To keep the shop secure and prevent fraud (our legitimate interest).
Who gets it
- Japan Post and other carriers, and customs offices, for delivery and import.
- Our payment provider, to take payment.
- Tax or customs intermediaries, where a country needs them to collect duties or VAT.
- Our hosting and email providers.
We do not sell your data.
Transfer to Japan
We are in Japan, so your data is processed there. The European Commission and the UK treat Japan as providing adequate protection for personal data.
How long we keep it
Order records for up to 7 years, because Japanese tax law requires it. Messages for up to 2 years. Server logs for up to 90 days.
Your rights
You can ask to see, correct or delete your data, to object to its use, or to get a copy. If you live in California, you also have the rights set out in the CCPA, and we do not sell or share personal data. Write to info@hiruandon.biz. If you are in the EU or UK, you can also complain to your local data protection authority.
Children
The shop is not for children under 16 and we do not knowingly collect their data.
Changes
When we change this page we change the date below.
Last updated 20 October 2026.