Privacy policy

Nomura Tailor ("we," "us," "our," or "the Shop") values the privacy of our customers. This Privacy Policy explains how we collect, use, share and protect your personal information when you visit or make a purchase from our online shop at https://nomura-tailor.com/ (the "Site").

We comply with the Act on the Protection of Personal Information of Japan (the "APPI"), the EU General Data Protection Regulation (the "GDPR"), the UK GDPR and other applicable data protection laws.

1. Who We Are

The controller responsible for your personal information is:

Business name: Nomura Tailor Co.
Representative: NOMURA Takuma
Address: 362 Naramono-cho, Fuyacho Higashi-iru, Shimogyo-ku, Kyoto 600-8004, Japan
Phone: +81-75-212-8707
Email: order@nomura-tailor.co.jp

Our Site is powered by Shopify, which processes personal information on our behalf as our service provider. When you use Shop Pay or the Shop app, Shopify acts as an independent controller (see Article 6).

2. Scope

This Privacy Policy applies to personal information we collect through the Site, including when you make a purchase, contact us, subscribe to our newsletter or interact with our social media accounts. This Privacy Policy does not apply to purchases made at our physical stores.

3. Information We Collect

We collect the following information:

Order and shipping information: your name, shipping and billing address, phone number, email address and the items you order.
Payment information: your payment method and transaction details. Your full card number is processed by our payment providers and is never stored by us.
Communications: the content of your inquiries and our correspondence through our contact form, email or social media.
Reviews: your display name, rating, comments and photos that you submit.
Newsletter: your email address and subscription preferences.
Device and usage information: your IP address, browser and device type, language settings, pages viewed, referring website, cookie identifiers and approximate location (country or region), collected automatically (see Article 5).
Fraud prevention information: device characteristics and access patterns used to detect fraudulent orders and access.

We collect personal information only by lawful and fair means and never through deception or other improper means. We do not intentionally collect sensitive personal information, such as information about racial or ethnic origin, religious beliefs or health.

4. How We Use Your Information and Our Legal Bases

We use your personal information for the following purposes. For customers in the EU and the UK, the legal basis for each purpose is shown in brackets.

To process your order and payment, ship your products and send shipping updates [performance of a contract]
To respond to your inquiries and handle returns or defective products [performance of a contract / our legitimate interests]
To prevent fraudulent orders, identity theft and unauthorized access, and to keep the Site secure [our legitimate interests]
To keep tax and accounting records and comply with other legal obligations [legal obligation]
To send you our newsletter about new products and promotions [consent]
To analyze how the Site is used and improve our services [consent, where cookies are used]
To show advertising and measure its effectiveness [consent]
To publish your reviews [consent]
To create statistical data that does not identify you [our legitimate interests]

We will not use your personal information beyond these purposes without your consent, except as permitted by law. Where we rely on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before you withdrew it.

5. Cookies and Similar Technologies

We use cookies, pixel tags, local storage and similar technologies ("cookies") on the Site in the following categories:

Required: to maintain your cart, checkout and login, prevent fraud and remember your cookie choices. Providers: Shopify and our fraud prevention app provider. These cookies are always active.
Personalization: to remember your actions and settings, such as language and currency, to personalize your next visit. Providers: Shopify and our translation app provider.
Analytics: to understand how visitors use the Site and to improve it, including heatmap analysis. Providers: Google (Google Analytics) and Faber Company Inc. (MIERUCA).
Marketing: to show advertising, measure its effectiveness and show ads to returning visitors. Providers: Google (Google Ads) and Meta (Facebook and Instagram).

If you are in the EU, the UK or another region where consent is required, we use personalization, marketing and analytics cookies only with your consent.

We also use third-party apps that may collect information to provide features such as product reviews, Instagram feeds, shipment tracking and translation.

How to manage cookies

Cookie banner: If you are in a region where consent is required, you can accept or reject each category through the banner shown on your first visit. You can change your choices at any time via the "Cookie Settings" link at the bottom of the Site.
Browser settings: You can disable cookies in your browser settings. If you disable required cookies, the cart and checkout may not work.
Google: You can manage personalized ads at https://adssettings.google.com/ and opt out of Google Analytics at https://tools.google.com/dlpage/gaoptout. To learn how Google uses information, visit https://policies.google.com/technologies/partner-sites.
Meta: You can manage your ad preferences in your Facebook or Instagram settings.
Global Privacy Control (GPC): If your browser sends a GPC signal, we treat it as a request to opt out of sharing your information for targeted advertising.

6. How We Share Your Information

We do not sell your personal information for money. We share your personal information only as described below, as needed for the purposes in Article 4, or with your consent:

E-commerce platform: Shopify
Payment providers: Shopify Payments, PayPal, Amazon Pay and other providers
Shipping carriers: Japan Post (EMS), DHL and postal or delivery operators in the destination country
Customs authorities: for import and export clearance
Advertising and analytics providers: Google, Meta and Faber Company Inc. (with your consent where required)
App providers: for product reviews, shipment tracking, translation and fraud prevention
Professional advisors: such as accountants and lawyers
Authorities: where required by law

When you use Shop Pay or the Shop app, Shopify processes your information as an independent controller. For details, see Shopify's Privacy Policy at https://www.shopify.com/legal/privacy.

If our business is transferred through a merger, acquisition or similar transaction, your personal information may be transferred to the successor.

7. International Data Transfers

We are based in Japan, and your personal information is handled in Japan. Through the service providers listed in Article 6, your information may also be stored and processed in:

Canada and the United States (Shopify, Google, Meta, PayPal, Amazon Pay and others)
The European Union (for example, the European entities of Meta and DHL)
The country to which your order is shipped
Other countries where the providers of the apps we use on the Site are located. You may request details of these countries and the safeguards in place by contacting us (see Article 15).

For customers in the EU and the UK: Japan is recognized by the European Commission and the UK as providing an adequate level of data protection. When we transfer personal information from Japan to other countries, we confirm that the recipients have appropriate safeguards in place, such as adequacy decisions or Standard Contractual Clauses.

For customers subject to the APPI: When we provide personal information to third parties in foreign countries, we will provide information on the data protection systems of those countries and the measures taken by the recipients. Information on foreign data protection systems is also available on the website of the Personal Information Protection Commission of Japan (https://www.ppc.go.jp/en/).

8. How Long We Keep Your Information

We keep your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy. To determine how long we keep it, we consider:

the purpose for which we collected the information and whether we still need it for that purpose;
the period required to comply with our legal obligations, such as tax and accounting record-keeping under Japanese law;
whether we need the information to deal with fraud, a dispute or a legal claim; and
for information we process based on your consent, whether you have withdrawn your consent (for example, by unsubscribing from our newsletter or changing your cookie settings).

Cookies remain on your device for different periods depending on their type. You can delete them at any time through your browser settings.

When we no longer need your information, we delete it or anonymize it so that it no longer identifies you.

9. How We Protect Your Information

We take the following measures to prevent the leakage, loss or damage of your personal information:

Organizational measures: we designate staff responsible for personal information and set rules for handling it.
Personnel measures: we train and supervise our staff on the proper handling of personal information.
Physical measures: we prevent the theft or loss of devices and documents containing personal information.
Technical measures: we limit access to our store admin to necessary staff, use two-step verification, and encrypt communications on the Site with SSL/TLS.
Understanding of foreign environments: personal information is stored on servers outside Japan (such as in Canada and the United States) through services including Shopify. We take security measures based on an understanding of the data protection systems of those countries.
Supervision of service providers: we appropriately supervise service providers to whom we entrust the handling of personal information.

10. Your Rights

Customers in Japan (APPI): You may request that we notify you of the purposes of use, disclose, correct, add to or delete your personal information, stop using or erase it, stop providing it to third parties, and disclose records of its provision to third parties.

Customers in the EU and the UK (GDPR): You have the right to:

access your personal information and receive a copy;
correct inaccurate personal information;
have your personal information erased;
restrict how we process your personal information;
receive your personal information in a machine-readable format (data portability);
object to processing based on our legitimate interests and to direct marketing;
withdraw your consent at any time; and
lodge a complaint with the data protection authority in your country of residence.

Customers in the United States: Depending on the laws of your state, you may have the right to know, delete and correct your personal information and to opt out of sharing for targeted advertising.

How to make a request: Please contact us at the address in Article 15. After verifying your identity, we will respond within one month. If your request is complex, we may extend this period and will tell you why. We do not charge a fee, but we may refuse requests that are manifestly unfounded or excessive.

11. Automated Decision-Making

We do not make decisions that have legal or similarly significant effects on you based solely on automated processing. Our systems may automatically screen orders to prevent fraud, but decisions such as canceling an order are made by our staff.

12. Children's Privacy

The Site is not intended for children under 16. If we learn that we have collected personal information from a child under 16, we will delete it promptly.

13. Third-Party Links

The Site contains links to third-party websites, such as social media. Please check the privacy policies of those websites for how they handle your personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in laws or our services. If we make significant changes, we will announce them on the Site and, where appropriate, notify you directly.

15. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

Nomura Tailor – Privacy Inquiries

Email: order@nomura-tailor.co.jp

Address: 362 Naramono-cho, Fuyacho Higashi-iru, Shimogyo-ku, Kyoto 600-8004, Japan

We can respond in English and Japanese.

Customers in Japan may also contact the Personal Information Protection Commission of Japan if they are not satisfied with our response.

16. Language

This Privacy Policy is written in English. If it is displayed in other languages through a translation feature, the English version prevails.

Last updated: October 19, 2026