Privacy policy

Privacy Policy (English)

Last updated: 11 October 2025

meguru operates this store and website (including all related information, content, features, tools, products, and services, collectively, the “Services”). Our store is hosted on Shopify, which enables us to provide the Services. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit or use the Services, make a purchase, or otherwise interact with us. If there is any conflict between our Terms of Service and this Privacy Policy regarding the collection, processing, and disclosure of personal information, this Privacy Policy prevails.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

1. Personal Information We Collect

“Personal information” means information that identifies, relates to, describes, or can reasonably be associated with you. It does not include de-identified or aggregated information. Depending on how you interact with the Services and applicable laws, we may collect the following categories (including inferences):

  • Contact Information: name, billing/shipping address, email, phone (if you choose to provide it).

  • Financial Information: payment method details processed by payment providers; transaction details.

  • Account Information: username, password, preferences.

  • Transaction & Activity Information: items viewed, cart, wishlist, purchases, returns, exchanges, cancellations, order history.

  • Communications: messages and support inquiries you send to us.

  • Device & Usage Information: IP address, device/browser identifiers, cookies and similar technologies, pages viewed, timestamps, navigation paths.

2. Sources of Personal Information

  • Directly from you (checkout, account creation, inquiries).

  • Automatically through the Services (cookies, pixels, SDKs, and similar technologies).

  • Service providers (payment processing, fulfillment, analytics, customer support).

  • Partners and third parties where permitted by law.

3. How We Use Personal Information (Purposes & Legal Bases)

  • Provide, customize, and improve the Services; process payments and orders; ship and handle returns; maintain accounts; send transactional notices; recommend products.

    • Legal bases (EU/UK): contract performance; legitimate interests; consent where required.

  • Marketing & advertising (emails and online ads/measurement consistent with your choices).

    • Legal bases: consent (where required); legitimate interests.

  • Security & fraud prevention (authentication, detecting and addressing abuse).

    • Legal bases: legitimate interests; legal obligation.

  • Customer support & communications.

  • Legal compliance (responding to lawful requests, enforcing terms, protecting rights).

4. Disclosing Personal Information

We disclose personal information to:

  • Shopify and service providers (IT, payments, cloud, analytics, fulfillment/shipping, support).

  • Business/marketing partners for advertising and measurement (subject to their policies and your choices).

  • Affiliates within our corporate group.

  • With your direction/consent (e.g., social logins, requested shipments).

  • For legal reasons or business transactions (e.g., mergers, compliance with law, protection of rights).

Shopify relationship. Shopify hosts our store and processes personal information to operate and improve services. Data may be stored/processed outside your country. For details on Shopify’s processing and your rights regarding data handled by Shopify, see Shopify’s privacy resources and privacy portal.

5. Cookies & Tracking

We use cookies and similar technologies for essential functionality, analytics, and advertising. Where required, we obtain consent via a cookie banner. Manage preferences via your browser settings and our Cookie Preferences (if provided), or contact us.

Do Not Track (DNT): We do not currently respond to DNT signals due to lack of uniform standards.

6. Your Rights & Choices

Depending on your location, you may have rights to access/know, correct, delete, and port your data, and to opt out of marketing emails (use the unsubscribe link—transactional emails may still be sent). We will not discriminate for exercising rights. We may need to verify your identity; authorized-agent requests may require proof.

Region-specific notices

  • EU/UK (GDPR): rights of access, rectification, erasure, restriction, portability, and objection; right to lodge a complaint with your supervisory authority.

  • California (CPRA): rights to know, delete, correct, limit use of sensitive data (if applicable), and opt out of “sharing” for cross-context behavioral advertising. We do not “sell” personal information for money, but we may “share” identifiers and internet activity with advertising partners as permitted. Opt out via Cookie Preferences or email meguru@fumu.jp with subject “CPRA Opt-Out.”

  • Thailand (PDPA): rights to access, rectification, erasure, restriction, objection, portability, and to withdraw consent (where consent is the basis). You may complain to the PDPC if unresolved.

7. Data Retention

We retain personal information as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by record type (e.g., tax/transaction records are kept for statutory periods).

8. Security

We implement administrative, technical, and organizational safeguards. No method is 100% secure; please avoid sending sensitive information via unencrypted channels.

9. International Transfers

Your information may be transferred to, stored, or processed in countries outside your own. For EU/UK transfers, where the destination is not deemed adequate, we rely on approved mechanisms (e.g., Standard Contractual Clauses).

10. Children’s Data

The Services are not directed to children, and we do not knowingly collect personal information from individuals under the age defined by local law (e.g., under 16 in the EU). If you believe a child provided information, contact us to request deletion.

11. Changes to This Policy

We may update this Policy to reflect operational, legal, or regulatory changes. We will post the updated Policy with the revised “Last updated” date and provide additional notice where required.

12. Contact Us

If you have questions about our privacy practices or wish to exercise your rights, contact us:

  • Email: meguru@fumu.jp

  • Mailing address: Arita 168-2, Kitahiroshima-cho, Yamagata-gun, Hiroshima 731-1533, Japan