NBEworks

Privacy Policy

Effective Date: 2025–02–14
Last Updated: 2025–02–14

Welcome to NBEworks. Your privacy is critically important to us. This Privacy Policy explains how we collect, use, disclose, and protect your personal data in compliance with the General Data Protection Regulation (GDPR) (for EU/EEA residents), the Act on the Protection of Personal Information (APPI) (for residents of Japan), and other applicable data protection laws.

This policy applies to all information collected through our website and any related services, sales, marketing, or events (we refer to them collectively in this privacy policy as the “Services”).

1. Information We Collect

  • Data Controller: NBEworks
  • Contact Email: [email protected]
  • Statement: In accordance with the Japanese Act on Specified Commercial Transactions (特定商取引法に基づく表記), and to comply with data protection regulations, we will disclose the operator’s name, address, and phone number without delay upon request. Please contact us at [email protected] to request this information.

When you interact with our Services, we may collect the following personal data (personal information):

  • Information You Provide Directly:
    • When making a purchase: Name, Email Address, Shipping Address, Phone Number, billing information (processed by third-party payment processors – see Section 4).
    • For customer support and account management: Any data you voluntarily provide via contact forms, email, or other communication channels. This may include details about your inquiries, feedback, or any other information you choose to share.
  • Information Collected Automatically:
    • For analytics purposes: IP Address, Browser Type, Operating System, Referring URLs, Device Information, and Cookies (see Section 8 for details).
    • Website Usage Data: Pages visited, time spent on pages, links clicked, and other actions taken on our website.
  • Information from Cookies and Similar Technologies: See Section 8 “Cookies & Tracking”

2. How We Use Your Information

We process your personal data for the following purposes, based on the legal bases described in Section 3:

  • Fulfilling Orders: To process, fulfill, manage, and deliver your purchased products or services; including sending order confirmations, shipping updates, and invoices. This includes contacting you regarding your order.
  • Customer Support: To respond to your inquiries, provide technical assistance, troubleshoot problems, and address any concerns you may have.
  • Account Management: To create and manage your customer account (if applicable), maintain your preferences, and provide personalized services.
  • Analytics & Improvements: To analyze website traffic (via Google Analytics), understand user behavior, improve our Services, develop new features, and optimize our website’s performance and user experience.
  • Marketing Communications (with your consent): To send you information about new products, promotions, special offers, and other updates. You can opt-out of these communications at any time (see Section 6).
  • Legal Compliance: To comply with applicable laws and regulations, including tax and accounting requirements, and to respond to lawful requests from public authorities.
  • Fraud Prevention and Security: To detect, prevent, and address fraudulent activities, security breaches, and other illegal or harmful actions.

3. Legal Basis for Processing

Under GDPR (for EU/EEA users) and APPI (for users in Japan), we process your personal data based on the following legal bases:

  • Contractual Necessity (GDPR Article 6(1)(b)): We process data necessary to perform a contract with you, such as fulfilling your orders.
  • Legitimate Interests (GDPR Article 6(1)(f)): We process data for our legitimate business interests, such as providing customer support, improving our website, and preventing fraud. We carefully balance these interests against your rights and freedoms.
  • Consent (GDPR Article 6(1)(a) / APPI): We process data based on your explicit consent, such as for marketing communications and certain types of cookies. You can withdraw your consent at any time.
  • Legal Obligation (GDPR Article 6(1)(c)): We process data to comply with legal obligations, such as tax reporting requirements.

4. Data Sharing with Third Parties

We only share your personal data with third parties when it is necessary to provide our Services or as required by law. We ensure all third parties we work with are compliant with GDPR, APPI, and other applicable data protection regulations. We may share your information with the following categories of third parties:

  • Logistics Providers: We share your shipping address and phone number with shipping companies (e.g., Japan Post, Sagawa Express, Yamato Transport, FedEx, DHL, etc.) to deliver your orders.
  • Payment Processors: We use secure third-party payment processors (PayPal & Stripe) to handle all payment transactions. We do not store your complete payment card details on our servers. However, we may receive and retain limited payment information (e.g., last four digits of your card, card type, transaction ID) for accounting and record-keeping purposes.
  • Analytics Tools: We use Google Analytics to track website usage. Google Analytics collects data such as IP addresses and cookie information. Google’s use of your data is governed by their own privacy policy. (https://policies.google.com/privacy)
  • Cloud Service Providers: We may use cloud service providers (e.g., for website hosting, data storage, email services) to store and process data. These providers are contractually obligated to protect your data.
  • Legal Authorities: We may disclose your information to legal authorities if required by law or legal process, such as a court order or subpoena.
  • Business Transfers: If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information..

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The specific retention periods depend on the type of data and the purpose of processing:

  • Order Information: We retain order information (name, address, email, phone number, purchase history) for 7 years to comply with Japanese tax and accounting regulations.
  • Customer Support Communications: We retain customer support communications for 7 years to improve our services and resolve disputes.
  • Account Data: If you create an account, we retain your account information until you request deletion or close your account.
  • Analytics Data: Google Analytics data is retained according to Google’s data retention policies. See Section 8 for more details.
  • Marketing Data: We retain your contact information for marketing purposes until you unsubscribe or withdraw your consent.

After the retention period expires, we will securely delete or anonymize your personal data.

6. Your Rights

Under GDPR and APPI, you have the following rights regarding your personal data:

  • Right of Access (GDPR Article 15 / APPI): You have the right to request a copy of the personal data we hold about you, along with information about how we process it.
  • Right to Rectification (GDPR Article 16 / APPI): You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
  • Right to Erasure (“Right to be Forgotten”) (GDPR Article 17 / APPI): You have the right to request that we delete your personal data under certain circumstances, such as when it is no longer necessary for the purposes for which it was collected, or when you have withdrawn your consent. Note that there are exceptions to this right, such as when we need to retain data for legal compliance.
  • Right to Restriction of Processing (GDPR Article 18 / APPI): You have the right to request that we restrict the processing of your personal data under certain circumstances, such as when you contest the accuracy of the data or when the processing is unlawful.
  • Right to Object (GDPR Article 21): You have the right to object to the processing of your personal data based on legitimate interests, including direct marketing. We will stop processing your data unless we have compelling legitimate grounds that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.
  • Right to Data Portability (GDPR Article 20): You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller. This right only applies to data processed based on consent or contractual necessity.
  • Right to Withdraw Consent (GDPR Article 7(3) / APPI): If we process your personal data based on consent, you have the right to withdraw your consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
  • Rights Related to Automated Decision-Making (GDPR Article 22): If we use automated decision-making, including profiling, that produces legal effects or significantly affects you, you have the right to obtain human intervention, express your point of view, and contest the decision.
  • Right to Lodge a Complaint (GDPR Article 77): You have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement, or with the Personal Information Protection Commission (PPC) in Japan.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month (GDPR) or within a reasonable timeframe (APPI), and we may need to verify your identity before fulfilling your request.

7. Security Measures

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, use, disclosure, alteration, or destruction. These measures include:

  • SSL Encryption: We use Secure Sockets Layer (SSL) encryption to protect data transmitted between your browser and our website.
  • Secure Payment Processing: All payment transactions are processed through secure third-party payment processors (PayPal and Stripe). We do not store your full payment card details.
  • Access Controls: We restrict access to your personal data to authorized personnel only.
  • Data Minimization: We collect and process only the personal data that is necessary for the specified purposes.
  • Regular Security Assessments: We regularly review and update our security measures to address evolving threats.
  • Data Breach Notification: In the case of a data breach we will notify you and the relevant authorities as required by law. Important addition

While we strive to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee absolute security.

8. Cookies & Tracking

We use cookies and similar tracking technologies (e.g., web beacons, pixels) to collect information about your browsing activity on our website. Cookies are small text files that are stored on your device when you visit a website.

  • Types of Cookies We Use:
    • Strictly Necessary Cookies: These cookies are essential for the operation of our website and enable you to navigate and use its features (e.g., adding items to your cart, accessing secure areas).
    • Performance Cookies: These cookies collect information about how visitors use our website, such as which pages are visited most often and if users receive error messages. We use this information to improve the performance and usability of our website (e.g., Google Analytics).
    • Functionality Cookies: These cookies allow our website to remember choices you make (e.g., your username, language preference) and provide enhanced, more personalized features.
    • First-party vs Third-party cookies: We use both first-party (set by us) and third-party (set by another domain, like Google) cookies.
  • Managing Cookies: You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies, or to set preferences for certain websites. However, please note that blocking or deleting cookies may affect the functionality of our website and your ability to use certain features. You can find more information about how to manage cookies in your browser’s help documentation.
  • Google Analytics: We use Google Analytics. You can prevent Google’s collection and use of data (cookies and IP address) by downloading and installing the browser plug-in available under https://tools.google.com/dlpage/gaoptout?hl=en.

9. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by:

  • Posting a prominent notice on our website.
  • Sending you an email notification (if we have your email address and you have not opted out of receiving such notifications).

The “Last Updated” date at the top of this Privacy Policy indicates when it was last revised. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

10. Contact Us

For privacy-related inquiries, including exercising your rights under GDPR or APPI, please contact us at:

📧 Email: [email protected]
🌍 Website: https://nbe.works