Privacy Policy

Last updated: September 25, 2026

This English version is a translation provided for convenience only. In the event of any discrepancy in content or interpretation, the Japanese version always prevails.

OVERcoat JAPAN (the "Company") handles personal information obtained through the stores, websites, programs and services it operates (the "Services") in accordance with this Privacy Policy.

Our online store is hosted by Shopify, and the Services are provided using systems of Shopify and other service providers. This Privacy Policy explains how the Company collects, uses, stores, outsources, shares and protects the personal information of customers, applicants, members, affiliates, event participants and other users of the Services.

Where the Terms of Service or other Company terms differ from this Privacy Policy, this Privacy Policy prevails with respect to the handling of personal information. Where the law requires separate consent, we will obtain it separately.

Personal information we collect or process

"Personal information" means information that identifies a specific individual, or that can identify a specific individual when easily combined with other information. It does not include anonymized information that cannot identify an individual.

Depending on how you use the Services, the content of your applications and transactions, your region of residence and applicable law, we may collect or process the following:

• Contact information: name, trade name/company name, store name, address, billing and shipping addresses, phone number, e-mail address and other contact details
• Payment information: payment method, payment status, billed amount, transaction number, refund account details and other information necessary for orders, payments and refunds.

Credit card numbers and the like are, as a rule, processed directly by Shopify or the payment provider, and the Company may not hold the full card number.

• Account and transaction information: username, credentials, settings, browsing and cart information, purchases, returns, exchanges, cancellations, deliveries, refunds and past transaction history
• Communications with the Company: information contained in e-mails, phone calls, forms, chat, reviews, customer support and other interactions
• Device and usage information: device, browser, network connection, IP address, cookies and other identifiers, access date/time, referrer, pages viewed and activity history
• Program and application information: application content for the DETAILER PROGRAM, AFFILIATE PROGRAM, events, sponsorships, product supply and others; business and store information; submitted documents; review results; phone verification and contact history; member benefits; referral results; commissions and bank account details
• Business information consented for publication: trade name/company name, store name, address of the registered physical store, store phone number, website, social media, business description and other information you have separately consented to publish on the official website, etc.
• Inferred information: interests and preferences inferred from purchase history, browsing history and usage of the Services

Sources of personal information

We may obtain personal information from the following sources:

• Directly from you: orders, account creation, applications, inquiries, phone verification, document submission, surveys, reviews, etc.
• Automatically through the Services: website, apps, cookies, pixels and similar technologies
• From service providers: Shopify, payment, shipping and logistics, e-mail delivery, forms, customer support, analytics, advertising, affiliate management and other providers
• From partners or third parties: payment/login integrations, referrers, event organizers, public information and other lawful sources

How we use your personal information

We use personal information for the following purposes:

• Providing the Services and transactions: order receipt, payment, delivery, returns, exchanges, cancellations, refunds, account management, transaction-related communications, reviews and other features
• Operating programs and applications: receiving and reviewing applications for the DETAILER PROGRAM, AFFILIATE PROGRAM, events, sponsorships, product supply, etc.; verifying identity, company, store and business; contacting you by phone and e-mail; managing member benefits, referral results and commissions; preventing misuse and duplicate applications
• Publication on the official website: only with your separate, explicit consent, publishing the designated business information in the registered store list, case studies and other areas of the official website
• Marketing and advertising: information about products, services, campaigns and events; displaying ads based on browsing and purchase history; measuring effectiveness and personalizing the Services
• Security and fraud prevention: authenticating accounts and payments; detecting fraud, misuse and illegal activity; purchase limits, resale prevention and sales channel verification; responding to violations of terms
• Inquiries and legal compliance: customer support, handling complaints and rights requests, tax, accounting and record-keeping, responding to laws and authorities, dispute resolution and enforcement of terms
• Analysis and improvement: analyzing usage, sales, advertising, features and service quality; improving products, services, workflows and customer experience; developing new features

Applying for or participating in the DETAILER PROGRAM or other programs does not, by itself, make your application information public. Publication on the official website is optional and limited to information you have separately consented to publish.

You can stop promotional e-mails at any time via the unsubscribe link in the e-mail. Even after unsubscribing, we may send communications necessary for orders, accounts, security, changes to terms and operation of the Services.

Cookies and similar technologies

The Company, Shopify and the service providers we use may use cookies, pixels, local storage and similar technologies to provide the Services, maintain login status, cart and checkout functions, security, analytics, personalization, advertising and effectiveness measurement.

Depending on your region and our settings, you may be able to choose whether to allow non-essential cookies via a cookie banner or other means. Disabling cookies may prevent parts of the Services from working properly.

Where the Company has enabled Shopify Network Intelligence or other enhanced Shopify features, Shopify may use information about your interactions with our store and other merchants for service improvement, fraud prevention, personalization and advertising.

• Data sharing opt-out page: https://overcoat.jp/pages/data-sale-opt-out
• Shopify Privacy Portal: https://privacy.shopify.com/en

How we disclose personal information

In accordance with this Privacy Policy and to the extent necessary to achieve the purposes of use, we may outsource, share or disclose personal information in the following cases:

• Outsourcing to service providers: Shopify, payment, refunds, fraud prevention, storage, packing and shipping, tracking, cloud storage, IT management, forms, customer support, analytics, advertising, e-mail delivery, reviews, affiliate management, accounting, legal and others
• Sharing identifiers, browsing and purchase history and other necessary information with advertising and marketing providers for ad delivery, measurement and personalization
• Where you instruct, request or consent to provision to specific third parties for delivery, payment, login integration, social media, events, publication on the official website or other purposes
• Transfer of information to the extent necessary in connection with mergers, business transfers, succession, reorganization or other business transactions
• Where necessary to respond to laws, courts, administrative agencies, investigative authorities or other lawful requests, to enforce our terms, or to protect the rights, safety or property of the Company, customers or third parties

We select our service providers appropriately and supervise them as necessary and appropriate. Depending on your region, you may have the right to opt out of information sharing for targeted advertising.

Relationship with Shopify

The Services are hosted by Shopify. Shopify processes your personal information to provide the e-commerce platform, payments, security, analytics, advertising and other features we use.

Information we obtain through the Services is transmitted to Shopify and to third-party services we use, and may be stored or processed outside Japan. In addition to processing information as our service provider, Shopify may process personal information under its own responsibility for features it provides independently, such as Shopify Network Intelligence and Shop.

• Shopify Consumer Privacy Policy: https://www.shopify.com/legal/privacy/consumers
• Shopify Privacy Portal: https://privacy.shopify.com/en

Third-party websites and links

The Services may contain links to, embedded features from, or integrations with external services that we do not operate or control. When using external services, please review their privacy policies and terms of use.

Information posted to social media or other public or semi-public spaces may be viewed and used by other users in accordance with the settings and terms of that service.

Personal information of minors

The Services are not primarily intended for minors.

If a minor uses the Services or provides personal information to us, they should obtain the consent of a parent or other legal guardian as necessary. Where a minor cannot appropriately judge the consequences of consenting to the handling of personal information, the consent of a parent or other legal guardian is required.

If we learn that a minor has provided personal information without the consent of a legal guardian, a parent or guardian may contact us using the details below. We will respond appropriately after identity verification and other necessary checks.

Where the laws of the applicable country or region require age-related consent or other procedures, we will comply with those laws.

Security and retention of your information

To prevent leakage, loss, damage, unauthorized access and misuse of personal data, we implement necessary and appropriate security measures, including access and account management, protection of devices and communications, supervision of service providers, employee training, checks where information is handled overseas, and an incident response framework.

However, no method of internet transmission or information storage can be guaranteed to be completely secure. Where required by law, we will report incidents to the relevant authorities and notify affected individuals.

We retain personal information for as long as necessary for orders, delivery, returns and refunds, review and management of programs, handling inquiries, preventing misuse, tax and accounting, legal retention obligations, dispute handling and enforcement of terms. Information that is no longer needed is deleted or anonymized in accordance with the law and our management standards.

International transfer and overseas processing

Through Shopify, cloud, payment, e-mail delivery, advertising, analytics and other service providers we use, personal information may be transferred outside Japan or stored or processed overseas.

In accordance with applicable law, we verify service providers and recipients, take contractual measures, provide information to individuals and take other necessary steps. Where we provide personal data to third parties in foreign countries based on your consent, we will provide information on the country/region, its personal data protection regime, protective measures and other required information in accordance with the law. For transfers from the EEA, the UK, Switzerland and elsewhere, we use transfer mechanisms permitted by applicable law as necessary.

Your rights and choices

Depending on your region and applicable law, you may have the following rights regarding the personal information we hold. We may be unable to fulfill all or part of a request due to legal requirements or exceptions.

• Notification of the purpose of use, and disclosure of personal information and third-party provision records
• Correction, addition or deletion of inaccurate personal information
• Suspension of use, erasure or suspension of third-party provision where legal requirements are met
• Data portability, withdrawal of consent and opting out of targeted advertising, etc., where permitted by applicable law
• Stopping promotional e-mails, text messages and other marketing communications

Requests to exercise your rights can be made using the contact details below. We will verify the identity of the individual or their representative and respond within the period and in the manner prescribed by law. You will not be treated unfavorably merely for exercising your rights.

For personal information that Shopify processes under its own responsibility, you may be able to exercise your rights through the Shopify Privacy Portal.

Complaints

If you are dissatisfied with our handling of personal information, please contact us using the details below. Depending on your region, you may have the right to object to our response or to lodge a complaint with the competent personal information or data protection authority.

Changes to this Privacy Policy

We may revise this Privacy Policy in response to changes in our services, the systems and apps we use, our handling of personal information, laws, regulations or business operations.

The revised content, last updated date and effective date will be posted on this page. For changes that materially affect your rights or the handling of your personal information, we will notify you by e-mail, notice on the Services or other appropriate means in accordance with applicable law, and obtain consent where required.

Translated versions of this Privacy Policy are provided for your understanding. In the event of any discrepancy in content or interpretation between the Japanese version and translated versions, the Japanese version prevails to the extent permitted by applicable law.

Contact

Personal information handling business operator: Bruno Leal Prado
Trade name: OVERcoat JAPAN
Address: 〒442-0069, 2-126-4 Suwanishi-machi, Toyokawa-shi, Aichi, Japan
E-mail: info@overcoat.jp
Phone: +81-533-95-7655 (within Japan: 0533-95-7655)