Privacy Policy
This policy explains what personal data Eurasia Japan Co., Ltd. collects through eurasiajp.com, why it is used, who it may be shared with, and what rights you have. It is written with regard to Japan's Act on the Protection of Personal Information (APPI) and, for customers in the EU/EEA and the UK, the GDPR / UK GDPR. By using the site, placing an order or creating an account you confirm that you have read this policy.
Last updated: 25 October 2026
1. Who processes your data
The data controller is Eurasia Japan Co., Ltd., 〒104-0053 Tokyo, Chuo-ku, Harumi 3-6-8, Japan (“we”, “us”). For any question about your data, write to info@eurasiajp.com or contact us on WhatsApp; the link is at the bottom of every page.
2. What data we collect
• When you browse: your language, currency and theme choice, the contents of your guest cart and a chat identifier, stored in cookies and your browser's local storage; technical request data (IP address, browser and device type, time of request) in hosting logs. • When you create an account: name, email, password (stored only as an irreversible hash) and, optionally, phone number. • When you place an order: recipient name, shipping address, phone, email, order contents and totals, points history. • When you pay: card details are entered on the payment provider's (Stripe) page and never reach us; we only receive the payment confirmation and its identifier. • In the Daruma chat assistant: the text of your messages. • When you message us on WhatsApp or Instagram, or comment on our Instagram posts with a keyword: your WhatsApp number or Instagram account ID (and, for comments, your Instagram username), the text of your messages and our replies. The Daruma assistant may answer these messages automatically; a staff member can read them and reply. • In reviews: review text, rating and country. We do not collect special categories of data (health, beliefs, etc.) and ask you not to include them in messages.
3. Why we use your data
• To show the site in your language and currency and remember your cart and settings. • To accept, process and ship orders, and to prepare the documents required for international shipping (customs declaration). • To take payment, process refunds, and award or redeem loyalty points. • To send emails related to your order and account: order and payment confirmation, shipping notice, password reset. We do not send marketing newsletters. • To answer your questions in the chat and other channels, and to improve the assistant's answers. • To comply with legal obligations: accounting, tax and customs rules. • To keep the site secure and prevent abuse.
4. Legal bases
For customers in the EU/EEA and the UK: performance of our contract with you (account, order, delivery); compliance with our legal obligations (accounting, customs); our legitimate interests (site security, responding to enquiries, improving the service); your consent (analytics cookies, chat). Otherwise, data is processed under Japan's Act on the Protection of Personal Information for the purposes listed in section 3.
5. Consent
By using the site you accept this policy. By creating an account or placing an order you confirm that you have read it together with the Terms of Sale; this is stated next to the relevant button. Consent to analytics cookies is given separately in the banner at the bottom of the page and is optional: the site works fully without analytics.
6. Cookies and analytics
Necessary cookies and local-storage entries (language, currency, theme, cart, chat identifier, sign-in session) are always active; without them the site cannot remember your choices or your cart. They stay in your browser for up to one year or until you clear the site's data. Analytics cookies (Google Analytics) are set only after you click “Accept all” in the banner. “Only necessary” keeps analytics off. To change your decision, clear the site's data in your browser, and the banner will appear again. Advertising measurement cookies (Google Ads) are also set only after “Accept all”: they count which of our ads led to a visit or an order. We do not use them for remarketing or personalised ads.
7. Who we share data with
We do not sell personal data and do not share it with third parties for their own advertising or marketing. Data is shared only with services the site, payment and delivery cannot work without, and only to the extent needed: • Stripe: payments and refunds (card details are entered on Stripe's side). • Vercel: website hosting; Neon: database hosting. • Resend: order and password-reset emails. • Anthropic: processing of message text in the Daruma chat assistant (message text only, no account data). • Meta Platforms (WhatsApp, Instagram): delivery of the messages you send us there and of our replies. • Internal staff notification channel: alerts to our staff about new orders and chat messages, so we can respond quickly (for an order: name and email; for a chat: message text, and for WhatsApp also your number). • Shipping-rate and shipment-preparation service: calculation of carrier rates and preparation of shipments. • Carriers (EMS / Japan Post and others) and the customs authorities of the destination country: name, address, phone, parcel contents and value, as required for international shipping. • Google Analytics and Google Ads conversion measurement: only after your consent in the cookie banner. We may also disclose data when required by law or to protect our rights.
8. Transfers outside your country
We are based in Japan; our providers' servers may be located outside Japan and outside your country, in particular in the United States. Transfers are limited to what is needed to provide the service and are covered by agreements with the providers that require data protection.
9. How long we keep data
• Account data: for as long as the account exists; deleted on request. • Orders, payment and accounting records: for the period required by Japanese tax and accounting law (generally 7 years from the end of the relevant fiscal year). • Chat conversations without an account, including conversations on WhatsApp and Instagram: 24 hours after the last message, then deleted automatically. • Technical records with your WhatsApp number or Instagram ID, used to avoid answering the same message twice: 30 days. • Hosting logs: a short period set by the hosting provider. • Cookies: see section 6.
10. Your rights
You can request access to your data, correction (name, phone and address can be changed in your account), deletion, restriction of processing, withdraw consent, and object to processing based on legitimate interest. Customers in the EU/EEA and the UK can also receive their data in a portable format and lodge a complaint with their supervisory authority. We respond within 30 days. Deletion is subject to what we are legally required to retain (see section 9).
11. Security
The site runs over HTTPS only, passwords are stored as hashes, database access is restricted to staff, and payments are handled by a certified provider (Stripe, PCI DSS). No method of transmission over the internet is completely secure. If you suspect unauthorised access to your account, change your password in your account and let us know.
12. Children
The site is intended for people aged 18 and over. We do not knowingly collect data from children; if you become aware that a child has provided us with data, contact us and we will delete it.
13. Changes to this policy
A new version is published on this page with its update date. We announce material changes with a notice on the site. Continuing to use the site after publication means you accept the updated version.
14. Contact
Eurasia Japan Co., Ltd., 〒104-0053 Tokyo, Chuo-ku, Harumi 3-6-8, Japan. Email: info@eurasiajp.com. WhatsApp: link at the bottom of every page.