MOZU
EN | JA

Privacy Policy

1. Data Controller

MOZU Collect (Market Of Zero-access Uniques) is a sole proprietorship based in Ebina City, Kanagawa Prefecture, Japan, operating the website mozujapan.com.

For privacy inquiries: support@mozujapan.com

2. Personal Data We Collect

Information you provide: Full name, email address, shipping address, phone number (optional), and order notes when placing an order.

Payment information: All payments are processed by Stripe, Inc. We never collect, store, or access your credit card details. Stripe is PCI DSS Level 1 certified.

Automatically collected: IP address, browser type, device information, pages visited, referring website, and language preference — through server logs and (with consent) Google Analytics.

3. How We Use Your Data

  • Processing and fulfilling orders (legal basis: contract performance)
  • Sending order confirmation and shipping notifications (contract performance)
  • Customer support (contract performance / legitimate interest)
  • Tax and legal compliance — records retained for 7 years (legal obligation)
  • Website analytics and improvement (legitimate interest)
  • Marketing communications — only with your opt-in consent

4. Cookies

Essential (always active): Session management, cart data (localStorage), language preference, cookie consent.

Analytics (consent required): Google Analytics — collects anonymized browsing data. You can opt out anytime via cookie settings.

5. Third-Party Data Sharing

  • Stripe, Inc. — payment processing (name, email, payment info)
  • DHL / Japan Post (EMS) — delivery (name, address, phone)
  • Google Analytics — anonymized browsing data (with consent only)

We do not sell or share your data with any other third parties for marketing purposes.

6. International Data Transfers

Your data is processed in Japan. The EU has recognized Japan as providing adequate data protection (Adequacy Decision, January 2019), permitting transfers from the EU/EEA without additional safeguards.

7. Data Retention

  • Order data: 7 years (Japanese tax law)
  • Support correspondence: 3 years
  • Analytics data: 26 months

8. Your Rights (GDPR — EU/EEA Residents)

You have the right to: access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, objection, and withdrawal of consent.

To exercise these rights, contact support@mozujapan.com. We respond within 30 days.

9. Children's Privacy

We do not knowingly collect data from children under 16.

10. Security

We use HTTPS encryption, Stripe PCI DSS Level 1 compliance, and access controls. No credit card data is stored on our servers.

11. Changes

We may update this policy. Significant changes will be posted on our website.

Last updated: February 9, 2026