Privacy

01Who we are

CREW.15 Co., Ltd.
SOHO STATION 501, 24-8 Yamashitacho, Naka-ku, Yokohama, Kanagawa, Japan
Representative Director: Nori Mizukoshi

02What we collect

• Enquiry form: type of enquiry, company, name, email address, telephone number, related brand, products or documents, and, for custom orders, the item, purpose, quantity and timing; your message.
• Catalogue download: company, name, email address, telephone number (optional), and whether you would like to hear from us by email.
• Enquiries by telephone, email or social media message: name, contact details and your message.
• Trade: the name, organisation and contact details of the person we deal with, and records of the business between us.
• Partner pages (application and use): company, name, email address, telephone number, brands you carry, your message, the email address you sign in with, and records of sign-ins and downloads.
• Technical information when you visit or send a form: IP address, browser type and similar.
• Shop orders (once the shop opens): name, delivery address, telephone number and email address (all entered on the payment page of our payment service, Stripe), what you order and payment status. Card details go directly to Stripe; we never receive them. Besides processing payments for us, Stripe may handle information under its own policies, for example to prevent fraud.

03How we use it

1. To answer your enquiry and contact you about it
2. To quote, make, take and ship orders, and to invoice (including confirming, shipping, charging and refunding shop orders and contacting you about them)
3. To look back on past enquiries and dealings, and to handle later enquiries and orders
4. To provide catalogues and documents
5. To review partner applications, confirm sign-ins and provide trade documents
6. To route enquiries (we sort the content of your message automatically, without your name or contact details)
7. To tell you about our products and trade terms by telephone or email. We send such emails only to people who have asked for them or who trade with us
8. To prevent misuse and keep the site secure
9. To meet legal obligations

We will ask for your consent before using your information for anything else.

04Sharing with others

We do not give personal data to third parties without your consent, except:

• where the law requires or permits it (including lawful requests from courts or the police)
• where it is needed to protect someone’s life, body or property and your consent is hard to obtain
• on a merger or transfer of the business
• when we entrust handling to a service provider, as in 05

We do not pass your name or contact details to brand owners or manufacturers without your consent.

05Service providers

We may entrust part of the handling of personal data to service providers, within the purposes above (for example, server and database operation, or delivery). We oversee them as required. For delivery, we give delivery companies in Japan what they need to deliver your order (name, address and telephone number).

06Outside services and handling abroad

We use the following services to store and process personal data.

Cloudflare (site delivery, storage of form entries, Turnstile bot check, automatic sorting of enquiries with Workers AI, and Access sign-in for our admin and partner pages)

Provider and country: Cloudflare, Inc. (United States)
Information: what you enter in the enquiry, catalogue and partner forms (stored encrypted), the email address used to sign in to the partner pages, your message for automatic sorting (without your name, company or contact details, and with email addresses and telephone numbers in the text masked), IP address, browser information

Google Workspace (email, storing business documents, and Google Chat for internal notices)

Provider and country: Google LLC (United States)
Information: emails about enquiries and dealings, documents such as quotes and orders, and internal notices of new enquiries

Google Fonts (displaying type on our pages)

Provider and country: Google LLC (United States)
Information: IP address and browser information when a page loads. Your browser loads the type directly from Google’s servers; we do not give Google any personal data.

• We have chosen the Asia-Pacific region for the database that stores enquiries (we cannot tell which country). Automatic sorting and the bot check may run at Cloudflare facilities around the world, so we cannot name the country where they are processed.
• For the rules in the United States, see the overview published by Japan’s Personal Information Protection Commission (in Japanese).
• Our agreement with Cloudflare, Inc. and our Google Workspace agreement with Google LLC (each including its data processing terms) require them to handle personal data in line with the purposes of Japan’s privacy law (Article 28(1) of the Act and Article 16, item (i) of its Enforcement Rules). We check how each of them does so, and the rules in the United States, regularly (about once a year). On request, we will tell you about this as the law requires (ask as in 09).
• We use Google Chat, part of Google Workspace, to notify staff of new enquiries and orders, under the agreement above. An enquiry or catalogue request notice carries what you entered in the form (including your company, name, contact details and message) and goes only to a space our staff can see. An order notice carries only the order number, the number of items, the amount and a link to our admin pages.
• The partner pages and our admin pages use a cookie to keep you signed in.

07How we keep it safe

• Policy: we have set this policy and follow the law.
• Organisation: the Representative Director is responsible, and only named staff will handle personal data.
• People: staff handling personal data are bound to confidentiality and receive the training they need.
• Physical: we will keep places, equipment and papers holding personal data out of view of others.
• Technical: form entries are stored encrypted. Only authenticated staff can use the admin pages. Connections to the site are encrypted.
• Understanding the environment abroad: as in 06, we understand the rules in the United States and have secured the arrangements of providers abroad by agreement.

08How long we keep it

We keep personal data as long as the purposes in section 03 require, including looking back on past enquiries and dealings. Where the law requires us to keep it, we keep it for that period. We make efforts to delete what is no longer needed. After deletion we may keep records that do not identify you, such as reference numbers, dates and status.

09Your rights

You may ask us to tell you the purposes of use; to disclose the personal data we hold about you (including records of sharing with third parties); to correct, add to or delete it; to stop using or erase it; or to stop sharing it with third parties; and to give you information on the measures taken by third parties abroad.

• Where to ask: as in 10 (enquiry form, choose “Something else”). Begin your message with “Personal information request” and we will explain how to proceed.
• What to tell us: the type of request, details that help us find the information (such as when you contacted us, a reference number or the email address you used), and how you would like us to disclose it.
• Identity: we will confirm your identity by a reply from the email address we hold for you. If we cannot confirm it that way, we will ask for a copy of an identity document such as a driving licence (please hide your registered domicile and Individual Number).
• Representatives: the legal representative of a minor or of an adult ward, or a person you have authorised, may ask for you. They must send a letter of authority signed (or named and sealed) by you and proof of their own identity.
• Format: we will disclose in the form you ask for, such as an electronic file or paper. If that is not practical, we will use paper.
• Fee: none.
• If we cannot meet your request, or must use a different method from the one you asked for, we will tell you so.

To stop receiving marketing emails, follow the instructions in the email or contact us as in 10.

10Contact

Questions, complaints and requests about how we handle personal information are received here.

CREW.15 Co., Ltd., personal information enquiries

• Enquiry form (choose “Something else”)

11If something goes wrong

If personal data is leaked, or may have been, we will report to the Personal Information Protection Commission and notify the people affected as the law requires.

12Changes

We may update this policy. Changes apply from the time they are posted on this page. If we change the purposes of use, we will keep within what is reasonably related to the original purposes; beyond that, we will ask for your consent.