GDPR Privacy Policy
Lignespring Co., Ltd. processes your personal data collected in the context of our online shopping services(“Services”) in accordance with the General Date Protection Regulation(“GDPR”) and this GDPR Privacy Policy(“Policy).The Policy is applicable only to personal data concerning date subjects in the member states of the European Union and the three EEA/EFTA states Iceland, Liechtenstein and Norway(EU) and the UK.
Contact information
Date controller
Lignespring Co., Ltd. is responsible for your personal date as a date controller. If you have any question or would like to uphold your rights. Please contact us at:
Email:
Categories of personal data we collect
We collect and process the following personal data in the context of our Services.
Information You Provide
Account Information - When you register an account in our Services, you will need to provide us with your real name, a username, address, phone number. email address and payment verification information and choose a password.
Information We Collect Automatically
Usage Information - When you interact with our websites, we automatically collect technical data regarding your usage of our Services, including pages that you visit and links you click on, online identifier (cookie. IP address. etc.) or device information (language, browser type, etc.).
Location Data - When your device is set to provide location information, we automatically collect information about your general location (e.g. IP address).
Information from Third Parties
Information from Third-Party Data Providers - We receive your personal data from tech vendors who support our websites and other business systems, operational companies such as delivery couriers, and payment service provides who help us process your payments. Such personal data includes your demographics, transaction and purchase history or information about your interaction with online contents or advertisements.
You are required to provide us with certain personal data when you sign in our Services. Personal data that is mandatory is indicated in the relevant forms. We are not able to provide our Services to you if such data is not provided.
How we use your personal data
We use personal data for the following purposes:
(a) to take and handle orders, deliver products and services and process payments. The lawful basis for these uses is to perform our contract with you.
(b) to communicate with you about orders, products and services. The lawful basis for these uses is to perform our contract with you, to comply with our legal obligations or to pursue our legitimate interests in improving our services and giving our users the best experience.
(c) to decide which information to show you, where you give us your consent. The lawful basis for this use is your consent.
(d) to protect our customers from fraudulent, unauthorized or illegal activity on our Services and to respond to requests by the government or law enforcement authorities investigating. The lawful basis for these uses is our legal obligation.
How we share your personal data
We share your personal data with the following recipients:
Our service providers that provide services on our behalf, such as tech vendors who support our websites and other business systems, operational companies such as delivery couriers, and payment service providers who help us process your payments. Our service providers are located in Japan.
International data transfers
The third parties to which we transfer your personal data in order to provide our services (please see "How we share your personal data" above) are located in Japan. Japan is recognized by the European Commission as providing an adequate level of data protection.
For further information, including obtaining a copy of the documents used to protect your personal data, please contact us at the email address listed in Contact Information above.
Data retention
We retain your personal data for a period of three months maximum after your account is deleted, except where legal requirements imposing that we keep your personal data longer or less longer apply.
Your rights
Under the GDPR you have the right to ask us: for a copy of your personal data; to correct or delete your personal data; to restrict (stop any active) processing of your personal data: and to send you a copy of your personal data you have provided to us in a structured, machine readable format. In addition, you can object to the processing of your personal data under certain conditions (for further information, see the section below entitled "Your right to object to processing"). Please note that these rights are subject to the exceptions under the GDPR and applicable local laws.
Your right to object to processing
You have the right to object at any time to the processing of your personal data which is based on our legitimate interests, including,"profiling"(i.e. analyzing or predicting your behavior based on your information). When we process your personal data for direct marketing purposes, you have an absolute right to opt out of such processing. To exercise this right, please contact us at the email address listed in Contact information above.
Withdrawing consent
Wherever we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. Such withdrawal does not affect the lawfulness of any processing performed pursuant to the consent given prior to the withdrawal. To exercise this right. please contact us at the email address listed in Contact information above.
Your right to complain to a supervisory authority
You have the right to lodge a complaint with a supervisory authority in the member state of the EU [or the UK] where you have a habitual residence or place of work or where the alleged infringement of the GDPR took place.