Privacy Policy
At Hestejarin (“Hestejarin,” “we,” “us,” or “our”), we respect your privacy and are committed to handling personal information responsibly. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit our website, browse our products, place an order, communicate with our customer service team, or otherwise interact with our online store.
Our online store is operated through Shopify. Personal information may be processed by Shopify and other service providers to support website functionality, payment processing, order fulfillment, customer service, analytics, and other disclosed business purposes.
We aim to provide transparent information about our privacy practices and to respect privacy rights available under applicable United States federal and state laws. The rights and obligations described in this policy depend on the nature of the information, our business activities, your location, and the laws that apply.
1. Scope and Application
I. This Privacy Policy applies to personal information collected through our online store and related customer service channels, including information provided when browsing our website, creating or using an account where available, placing an order, requesting a return or refund, contacting customer support, or subscribing to marketing communications.
II. This policy covers information collected directly from you, information generated through your use of our website, and information received from service providers or other sources where permitted by applicable law.
III. This policy does not override separate privacy notices presented by third-party websites, payment services, social media platforms, or other services that operate under their own privacy practices.
2. Categories of Personal Information We Collect
The information collected depends on how you interact with our website, the features enabled on our store, and the services used to complete your transaction.
I. Identity and Contact Information. We may collect your name, email address, telephone number, billing address, shipping address, and other contact details you provide.
II. Order and Transaction Information. We may collect order numbers, products purchased, quantities, purchase history, order status, delivery information, return requests, refund records, and transaction-related communications.
III. Payment-Related Information. We may receive payment method details, payment status, transaction identifiers, billing information, and payment confirmations. Full payment card details may be collected and processed directly by the applicable payment processor. Our access to payment information depends on the payment method and service configuration.
IV. Device and Technical Information. We may collect IP addresses, browser types, operating systems, device identifiers, language settings, approximate location inferred from technical information, referral information, and website access logs.
V. Browsing and Interaction Information. Depending on the technologies enabled, we may collect pages viewed, products viewed, search activity, shopping cart interactions, session information, referring URLs, and interactions with website features.
VI. Communications and Preferences. We may collect information contained in messages you send to us, customer service requests, feedback, marketing preferences, consent records, and privacy requests.
VII. Information from Service Providers. We may receive transaction confirmations, fraud-prevention signals, delivery updates, analytics reports, or other information from payment processors, shipping providers, website service providers, and other authorized partners.
We seek to collect information reasonably necessary for the purposes described in this policy. Please do not submit passwords, full payment card numbers, card security codes, or other sensitive information through ordinary customer service messages unless a secure and specifically designated process requires it.
3. How We Collect Personal Information
I. Information You Provide Directly. We collect information when you complete checkout, submit forms, contact customer service, provide delivery details, subscribe to communications, or otherwise voluntarily provide information.
II. Information Collected Automatically. Our website and its enabled technologies may automatically collect technical, device, browsing, and interaction information when you access or use the store.
III. Information from Service Providers. We may receive information from Shopify, payment processors, shipping providers, fraud-prevention services, analytics providers, and other service providers involved in operating our store or completing your transactions.
IV. Information from Other Sources. Where permitted by law and relevant to our business activities, we may receive information from advertising platforms, referral partners, publicly available sources, or other third parties. We will handle such information in accordance with applicable legal requirements and the purposes described in this policy.
4. Cookies and Similar Technologies
4.1 Types of Cookies and Tracking Technologies
Cookies are small data files stored on your device. We and our service providers may also use pixels, tags, scripts, local storage, and similar technologies to support website operations and understand how visitors interact with our store.
I. Essential Technologies. These technologies support necessary functions such as shopping cart operation, checkout, session management, security, fraud prevention, and other features required to provide requested services.
II. Preference Technologies. Where enabled, these technologies remember settings such as language, region, or other browsing preferences.
III. Analytics Technologies. Where enabled, these technologies help us understand website traffic, page performance, visitor interactions, and opportunities to improve the shopping experience.
IV. Advertising and Measurement Technologies. Where enabled, these technologies may measure advertising effectiveness, attribute purchases to marketing campaigns, or support personalized advertising and audience measurement.
4.2 Cookie Consent and Controls
I. We will request consent before activating non-essential cookies or similar technologies where applicable law requires prior consent. The available cookie interface may allow you to accept eligible technologies, reject non-essential technologies, or manage individual preferences.
II. Essential technologies may operate without separate consent where permitted by applicable law or necessary to provide a service you have requested.
III. You may change your preferences through the cookie settings available on our website, where provided. You may also manage cookies through your browser settings. Blocking certain technologies may affect shopping cart functionality, checkout, or other website features.
IV. Where applicable law requires us to recognize a valid browser-based privacy signal, including Global Privacy Control (GPC), we will process that signal in accordance with the relevant legal requirements and the scope of the signal.
V. Withdrawing consent does not invalidate processing that was lawful before the withdrawal. It may affect future processing that relies on that consent.
For more information, please review our Cookie Policy.
5. How We Use Personal Information
We use personal information for legitimate and disclosed business purposes, subject to applicable legal requirements.
I. Order Management and Fulfillment. To confirm purchases, process orders, coordinate payment, arrange shipment, provide delivery updates, and manage cancellations, returns, exchanges, and refunds.
II. Customer Service. To respond to inquiries, investigate order problems, provide requested assistance, address complaints, and communicate about transactions.
III. Website Operation. To operate, maintain, troubleshoot, and improve our website, checkout process, product presentation, and customer experience.
IV. Payment Security and Fraud Prevention. To verify transactions, detect suspicious activity, reduce payment fraud, protect our store, and prevent unauthorized or abusive use of our services.
V. Marketing Communications. Where permitted by law and consistent with your preferences, to send promotional emails, product updates, newsletters, or other marketing communications. You may unsubscribe from marketing emails through the unsubscribe mechanism provided in the communication.
VI. Analytics and Advertising. Where enabled and legally permitted, to measure website usage, evaluate advertising performance, understand customer interests, and improve the relevance and effectiveness of marketing activities.
VII. Legal Compliance and Business Protection. To maintain business records, meet applicable tax and accounting obligations, respond to valid legal requests, enforce our terms, resolve disputes, and establish, exercise, or defend legal claims.
VIII. Other Disclosed Purposes. To carry out a purpose disclosed to you when information is collected or for another purpose permitted by applicable law.
We will not intentionally use personal information for materially incompatible purposes without providing any notice or obtaining any consent required by law.
6. How We Disclose Personal Information
We may disclose personal information to the following categories of recipients when reasonably necessary for the purposes described in this policy.
I. Shopify and Website Service Providers. Shopify and relevant technical service providers may process information to host and operate our online store, support checkout, maintain website functionality, provide security features, and assist with customer privacy requests. Their processing is subject to the applicable service terms, privacy documentation, and data processing arrangements.
II. Payment Processors and Financial Service Providers. Payment providers may receive transaction and billing information to authorize payments, detect fraud, process refunds, and perform related payment functions.
III. Shipping, Fulfillment, and Logistics Providers. We may provide names, delivery addresses, telephone numbers, order details, and shipment information to carriers, fulfillment partners, warehouses, and logistics providers as necessary to deliver purchases and manage returns.
IV. Analytics and Advertising Providers. Where enabled and permitted, analytics services and advertising platforms may receive technical identifiers, browsing information, event data, or other information to measure website activity, attribute sales, or deliver advertising. Certain disclosures may qualify as a sale, sharing, or targeted advertising under applicable state privacy laws even if no money is exchanged.
V. Customer Communication Providers. Email, customer service, and communication providers may process contact details and message content to deliver requested communications, manage customer inquiries, or administer marketing subscriptions.
VI. Professional Advisers. We may disclose relevant information to legal advisers, accountants, auditors, insurers, and other professional advisers when reasonably necessary for their services.
VII. Authorities and Legal Recipients. We may disclose information to courts, regulators, law enforcement agencies, government authorities, or other relevant parties when required by applicable law, valid legal process, or necessary to protect legal rights, safety, or property.
VIII. Business Transactions. If a merger, acquisition, restructuring, financing, or sale of business assets occurs, personal information may be disclosed or transferred as part of the transaction, subject to applicable confidentiality, notice, and privacy requirements.
We do not authorize service providers to use personal information beyond the purposes permitted by applicable agreements and law. However, a recipient's legal status and permitted processing may vary depending on the service, configuration, and applicable privacy requirements.
7. International Data Transfers
7.1 Countries Where Information May Be Processed
Hestejarin's business contact address is located in Japan. Because our online store operates through Shopify and may use third-party service providers, personal information may be transferred to, accessed from, or processed in countries other than the country in which it was collected.
I. Japan. Personal information may be received or accessed in Japan in connection with our business operations, customer service, recordkeeping, and administration.
II. United States. Personal information may be processed in the United States by relevant service providers, payment-related providers, analytics providers, advertising platforms, or other recipients, depending on the services enabled and the applicable arrangements.
III. Canada and Singapore. Shopify's published international transfer documentation identifies Canada and Singapore among the countries in which Shopify, its affiliates, or service providers may operate or process customer personal information. Whether a particular transaction involves either country depends on the applicable Shopify services and processing arrangements.
IV. Other Countries. Personal information may also be processed in other countries where Shopify affiliates, subprocessors, or our other service providers operate, depending on the services used and their processing locations. The actual recipient countries may vary over time and by service.
We do not represent that every order or customer record is transferred to every country listed above. Actual transfers depend on the applicable service configuration, processing activities, and recipient arrangements.
7.2 Safeguards for International Transfers
Where personal information is transferred internationally, we seek to use reasonable safeguards appropriate to the nature of the information and the applicable legal requirements.
I. Contractual Protections. Where applicable, transfers may be governed by data processing agreements, confidentiality obligations, contractual security requirements, and other binding arrangements with Shopify or relevant service providers.
II. Legally Recognized Transfer Mechanisms. Where required, transfers may rely on an applicable adequacy decision, approved contractual clauses, recognized certification or framework, consent, or another lawful transfer mechanism available under the relevant law. The mechanism used depends on the countries involved, the parties, and the applicable legal requirements.
III. Technical and Organizational Measures. Depending on the service and the information processed, safeguards may include access restrictions, authentication controls, encryption or secure transmission mechanisms, security monitoring, vendor assessments, and procedures for handling security incidents.
IV. Onward Transfers. Shopify and other service providers may engage affiliates or subprocessors to provide their services. Where required, applicable contractual arrangements and privacy safeguards are intended to govern these onward transfers.
V. Government and Legal Requests. Information may be disclosed to a government authority or other recipient where required by applicable law or valid legal process. Requests will be handled subject to the legal obligations applicable to the relevant recipient and processing arrangement.
The safeguards applicable to a particular transfer depend on the relevant parties, destination country, service, and legal framework. Further information about Shopify's international transfer arrangements is available in Shopify's International Data Transfers documentation and Data Processing Addendum.
Where applicable law requires specific notice, consent, or another transfer safeguard, we will take the steps required for the relevant processing activity.
8. Data Retention
I. Retention Principles. We retain personal information for as long as reasonably necessary to fulfill the purposes for which it was collected, including order fulfillment, customer service, fraud prevention, legal compliance, accounting, and dispute resolution.
II. Retention Periods. Retention periods depend on the type of information, the nature of the transaction, applicable legal obligations, operational requirements, and the need to establish or defend legal claims. We do not assign a single retention period to all categories of personal information because different records may require different retention periods.
III. Deletion and Anonymization. When personal information is no longer reasonably necessary, we will take appropriate steps to delete it, anonymize it, or otherwise dispose of it, subject to applicable law and legitimate retention requirements.
IV. Backups and Third-Party Records. Information may remain temporarily in backups, security logs, archived records, or systems controlled by service providers after a deletion request has been processed, where retention is permitted or required by law or necessary for security and operational purposes.
V. Legal Exceptions. We may retain information where necessary to complete a transaction, provide a requested refund, maintain legally required records, prevent fraud, resolve disputes, comply with legal obligations, or protect legal rights.
9. Data Security
I. We use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, loss, and misuse.
II. Depending on the relevant system and service, safeguards may include restricted access, authentication controls, secure data transmission, service-provider security measures, monitoring, and procedures for addressing suspected security incidents.
III. Access to personal information is intended to be limited to personnel and service providers who require it for authorized operational purposes, subject to applicable confidentiality and security obligations.
IV. No electronic storage system or transmission method can be guaranteed to be completely secure. We therefore cannot guarantee absolute security, but we take reasonable steps to protect information and respond appropriately to identified risks.
10. United States Privacy Rights
Privacy rights vary by state and may depend on whether a particular state law applies to our business and the relevant processing activity. Where applicable law grants you a privacy right, we will provide the rights and procedures required by that law.
10.1 Right to Know and Access
I. You may have the right to request information about the categories and specific pieces of personal information we collect, the sources from which the information is obtained, the purposes for collection and use, and the categories of third parties to whom the information is disclosed.
II. The information available in response to a request depends on the applicable law, the type of request, and any lawful exceptions.
10.2 Right to Correct
I. You may request that we correct inaccurate personal information we maintain about you, subject to applicable legal requirements and verification procedures.
II. If your order or delivery information is incorrect, please contact us promptly so that we can assess whether the information can be corrected before fulfillment or further processing.
10.3 Right to Delete
I. Where applicable, you may request deletion of personal information we have collected about you.
II. We may retain information where an applicable legal exception permits or requires retention, including for transaction completion, refunds, recordkeeping, security, fraud prevention, legal compliance, or the establishment or defense of legal claims.
10.4 Right to Data Portability
I. Where applicable, you may request a copy of certain personal information in a portable format, subject to the scope and conditions of the relevant law.
10.5 Right to Opt Out of Sale, Sharing, or Targeted Advertising
I. Certain state privacy laws provide consumers with the right to opt out of the sale of personal information, sharing of personal information for cross-context behavioral advertising, or targeted advertising.
II. Whether a particular disclosure constitutes a sale, sharing, or targeted advertising depends on the data involved, the recipient, the purpose of the disclosure, and the applicable legal definition.
III. Where applicable, you may submit an opt-out request through the privacy controls provided on our website or by contacting us. Where required, we will provide a clear and accessible opt-out mechanism and honor valid browser-based opt-out preference signals, including Global Privacy Control.
IV. If our website uses third-party advertising or tracking technologies that trigger an applicable opt-out obligation, the relevant controls must be configured and maintained to reflect your choices.
10.6 Sensitive Personal Information
I. Where applicable law grants you the right to limit certain uses or disclosures of sensitive personal information, you may exercise that right through the mechanism we provide or by contacting us.
II. The right to limit applies only to the extent provided by the relevant law and does not necessarily apply to every use of information that may be considered sensitive in another context.
10.7 Right to Withdraw Consent
I. Where processing relies on consent, you may withdraw that consent through the applicable preference-management method, unsubscribe mechanism, or other available process.
II. Withdrawal of consent does not affect the lawfulness of processing performed before withdrawal and does not prevent processing that is independently permitted under applicable law.
10.8 Right to Appeal and Non-Discrimination
I. Where applicable state law grants a right to appeal a decision concerning a privacy request, you may submit an appeal using the contact details in this policy. We will provide the applicable appeal procedure and response within the legally required timeframe.
II. Where required by law, we will not unlawfully discriminate against you for exercising a protected privacy right.
10.9 How to Exercise Your Rights
I. To submit a privacy request, contact us at assist@hestejarin.com or +81 235-75-2111 and clearly identify the right you wish to exercise.
II. We may request information reasonably necessary to verify your identity or authority to act on another person's behalf, subject to applicable law. We will not request more information than is reasonably necessary for verification.
III. We will review and respond to qualifying requests within the timeframe required by the applicable law. Where a request is denied in whole or in part, we will provide an explanation and information about available appeal rights where required.
IV. Where applicable law permits an authorized agent to submit a request on your behalf, we will follow the relevant requirements for verifying the agent's authority.
11. Legal Bases and Purposes of Processing
The legal basis for processing depends on the law applicable to the relevant activity. Some United States privacy laws focus on disclosures, purposes, and consumer rights rather than requiring a single general legal basis for every processing activity.
I. Contract and Transaction Performance. We process relevant information to fulfill purchases, arrange payment and delivery, provide customer support, and manage returns, exchanges, cancellations, and refunds.
II. Consent. Where required, we rely on consent for non-essential cookies, certain tracking technologies, or marketing activities. You may withdraw consent through the applicable mechanism.
III. Legal Obligations. We may process or retain information to comply with applicable tax, accounting, recordkeeping, reporting, or other legal obligations.
IV. Legitimate Business Purposes. Where permitted, we may process information for purposes such as website improvement, system security, fraud prevention, service administration, and protection of legal rights, subject to applicable privacy requirements.
V. Other Permitted Purposes. We may process information for additional purposes disclosed at the point of collection or otherwise permitted by applicable law.
12. Email Marketing and Customer Communications
I. We may send transactional communications necessary to complete or manage your order, including order confirmations, shipping notifications, refund updates, and responses to customer inquiries.
II. We may send promotional emails where permitted by law and consistent with your preferences and any required consent.
III. You may unsubscribe from promotional emails by using the unsubscribe link or instructions provided in the relevant message. Your request will be processed as required by applicable law.
IV. Unsubscribing from promotional communications does not prevent us from sending non-promotional messages necessary to fulfill an order, provide requested services, or meet legal obligations.
V. We will not knowingly misrepresent the sender or subject of marketing emails and will handle unsubscribe requests in accordance with applicable marketing laws.
13. Children's Privacy
I. Our online store is intended for a general consumer audience and is not knowingly directed to children under the age of 13.
II. We do not knowingly collect personal information online from children under 13 without the consent required by applicable law.
III. If you believe a child has provided personal information to us in circumstances that require parental consent, please contact us at assist@hestejarin.com. We will review the matter and take appropriate steps as required by law.
IV. Where applicable law imposes additional requirements for minors or teenagers, we will comply with those requirements to the extent they apply to our activities.
14. Third-Party Websites and Services
I. Our website may contain links to third-party websites, payment services, social media platforms, or other external services. These services may collect or process personal information under their own privacy policies.
II. We do not control the independent privacy practices of third parties and encourage you to review their privacy notices before providing information directly to them.
III. Third-party services integrated into our store may process information according to their own service terms, your settings, and the permissions or consents applicable to the integration.
15. Automated Processing and Fraud Prevention
I. We and our service providers may use automated systems to identify suspicious transactions, detect fraud, assess payment risks, maintain security, and prevent abuse of our website.
II. These systems may evaluate transaction details, device information, technical identifiers, order patterns, or other relevant information.
III. Where applicable law grants rights concerning automated decision-making or profiling, we will provide the notices, review procedures, or other protections required by that law.
16. Changes to This Privacy Policy
I. We may revise this Privacy Policy when our business practices, website functionality, service providers, or applicable legal requirements change.
II. The revised policy will be published on this page. Where applicable law requires additional notice or consent for a material change, we will take the required steps.
III. We encourage you to review this policy periodically to understand how personal information is handled.
17. Contact Information and Privacy Requests
If you have questions about this Privacy Policy, wish to exercise an applicable privacy right, or need assistance concerning your personal information, please contact Hestejarin using the following information.
Business Name: Hestejarin
Address: 1-19-45 Yunohama, Tsuruoka, Yamagata 997-1201, Japan
Telephone: +81 235-75-2111
Email: assist@hestejarin.com
Customer Service Hours: Monday–Friday, 9:00 AM–6:00 PM Eastern Time (ET)
Privacy Requests: Please describe your request clearly so that we can identify the relevant information and determine the applicable procedure. For your protection, do not include full payment card numbers, card security codes, account passwords, or other unnecessary sensitive information in ordinary email communications.
We will handle privacy inquiries in accordance with applicable law and the procedures relevant to the request.
18. Related Policies and Important Information
For additional information about our business practices, purchases, shipping arrangements, and customer service, please review the following pages on our website.
III. Cancellation Policy
VI. Payment Policy
VII. Legal Notice
VIII. About Us
IX. Contact Us
This Privacy Policy should be read together with the relevant policies and notices applicable to your use of our online store. If a particular privacy notice, cookie consent interface, or legally required disclosure applies to a specific activity, that notice or interface should be provided and implemented as required by applicable law.