Privacy policy

ID10 Japan Inc. (the “Company,” “we,” “us,” or “our”) establishes this Privacy Policy regarding personal information handled in connection with the KURA ONE® website, online store, membership services, events, services for companies and retailers, services for sake breweries, services for municipalities and regional businesses, collaborations, and other products and services provided by the Company (collectively, the “Services”), in compliance with the Act on the Protection of Personal Information and other applicable laws, regulations, and guidelines.

1. Definition of Personal Information

In this Privacy Policy, “personal information” means personal information as defined under the Act on the Protection of Personal Information, including information that can identify a specific individual through a name, address, telephone number, email address, date of birth, or other description, as well as information that can identify a specific individual by being readily cross-referenced with other information.

2. Information We Collect

We may collect the following information to the extent necessary to provide the Services.

(1) Information about Customers and Members

  • Name
  • Address
  • Telephone number
  • Email address
  • Date of birth, age, or information necessary to confirm that the individual is at least 20 years old
  • Information relating to shipping addresses, billing addresses, and gift recipients
  • Order numbers, order details, purchase history, and return, exchange, and refund history
  • Payment method and payment status
  • Account and authentication information
  • Registration status for KURA ONE® Members, membership status, and member identification information
  • Browsing and purchase history for products, including Members-only products
  • Coupon issuance and usage history
  • Contents of inquiries, consultations, requests, complaints, survey responses, and similar communications
  • Registration, application, and participation history for newsletters, campaigns, events, and similar activities
  • Records of consent to receive newsletters and similar communications, and records of unsubscribe requests

Credit card numbers and other payment information are processed by the payment service providers we use. We may receive from those payment service providers information necessary for payment processing and the results of payment transactions.

(2) Information about Companies, Retailers, Sake Breweries, Municipalities, Regional Businesses, and Other Business Operators

  • Name of the person in charge
  • Company name, organization name, trade name, department, title, and industry
  • Address or location
  • Telephone number, email address, and other contact information
  • Website and social-media information
  • Information relating to transactions, business discussions, quotations, contracts, and inquiries
  • Current challenges, desired products or services, quantities, number of stores, intended use, sales format, project details, desired timing, budget, and other information entered in our forms
  • Information relating to subsidy-supported projects, demonstration projects, and other projects

(3) Information Relating to Collaborations, Events, and Similar Activities

  • Name and contact information of applicants, participants, or persons in charge
  • Affiliation, title, and industry
  • Information relating to IP, brands, facilities, and similar matters
  • Purpose and details of projects, events, interviews, filming, joint ventures, and similar activities
  • Desired timing, quantities, number of stores, budget, and other information entered in our forms
  • History of event applications, participation, purchases, and other use
  • Photographs, video, audio, and similar materials where we provide prior notice and obtain any consent required

(4) Information Collected Through Use of the Website and Related Services

  • IP address
  • Cookies, web pixels, advertising identifiers, and other online identifiers
  • Information about devices, browsers, operating systems, and similar technical information
  • Pages viewed, viewing dates and times, referral sources, purchase paths, and interaction history
  • Access logs, error information, and other information concerning use of the website

3. Purposes of Use of Personal Information

We use personal information we collect for the following purposes:

  • Registration for the Services, identity verification, age verification, and account management
  • Accepting product orders, processing payments, shipping products, communicating delivery status, handling returns, exchanges, refunds, and other post-purchase support
  • Shipping gifts to designated delivery addresses
  • Registering users for KURA ONE® Members, managing membership status, determining membership eligibility, and managing sales of Members-only products
  • Providing and managing coupons and other membership benefits
  • Providing and operating products, services, membership programs, campaigns, benefits, and similar offerings
  • Responding to inquiries, consultations, requests, complaints, and similar matters, and managing response histories
  • Providing information about newsletters, new products, campaigns, events, services, and similar matters by email or other methods based on consent or applicable law
  • Recruiting, accepting registrations for, operating, and communicating about events, seminars, tastings, campaigns, surveys, and similar activities, and shipping prizes or other items
  • Conducting business discussions, proposals, quotations, contracts, product development, manufacturing, sales support, and other transactions with companies, retailers, sake breweries, municipalities, regional businesses, and other parties
  • Considering and carrying out collaborations, joint projects, interviews, filming, public relations, and other projects
  • Researching and analyzing use of the Services and improving products, services, websites, advertising, and marketing
  • Displaying or providing information about products, content, advertisements, and similar materials based on customers’ interests and use of the Services
  • Preventing fraudulent orders, unauthorized access, violations of terms, and other misconduct and ensuring the security of the Services
  • System maintenance, incident response, security measures, and improvement of service quality
  • Exercising contractual or legal rights and performing contractual or legal obligations
  • Responding to requests from government agencies, courts, or other authorities under applicable law
  • Communications and operations incidental to the purposes listed above

If we change a purpose of use, we will do so within a scope reasonably related to the original purpose and will publish the revised purpose on the Site or by another appropriate method.

4. Personal Information of Gift Recipients and Other Third Parties

If a customer provides us with the name, address, telephone number, or other personal information of another person as a product delivery destination, the customer must confirm that they are authorized to provide that information to us.

We use such information only to the extent necessary to ship products, communicate regarding delivery, handle returns or exchanges, and otherwise fulfill the order.

5. Provision of Personal Data to Third Parties

We do not provide personal data to third parties without the individual’s prior consent except in the following cases:

  • Where required or permitted by law
  • Where necessary to protect a person’s life, body, or property and it is difficult to obtain the individual’s consent
  • Where particularly necessary to improve public health or promote the sound development of children and it is difficult to obtain the individual’s consent
  • Where cooperation is necessary for a national or local government agency, or a party entrusted by such an agency, to perform duties prescribed by law, and obtaining the individual’s consent could impede the performance of those duties
  • Where personal data is provided in connection with a merger, company split, business transfer, or other business succession
  • Other cases permitted under the Act on the Protection of Personal Information or other applicable law

Provision to service providers as described in the following section may not constitute provision to a third party under applicable law.

6. Outsourcing the Handling of Personal Information

We may outsource all or part of the handling of personal information to external service providers to the extent necessary to achieve the purposes of use.

Such service providers may include:

  • E-commerce platform and online-store operators
  • Providers of applications or systems used for membership management, customer management, product sales controls, and similar functions
  • Payment processors, credit card companies, and financial institutions
  • Providers engaged in product storage, packing, shipment, and delivery
  • Sake breweries, manufacturers, and other businesses involved in manufacturing or shipping products
  • Providers of email delivery, inquiry management, access analytics, advertising, restock notifications, and similar services
  • Providers responsible for website production, display, maintenance, security, and related functions
  • Operators of events, campaigns, joint projects, and similar activities

We appropriately select service providers, enter into necessary agreements, and provide necessary and appropriate supervision regarding their handling of personal information.

7. Handling of Personal Information Outside Japan

Providers of e-commerce platforms, cloud services, payment services, analytics services, email-delivery services, external applications, and similar services we use may be located outside Japan, or information may be stored or processed on servers located outside Japan.

When we use a provider that handles personal information outside Japan, we take necessary and appropriate measures in accordance with applicable law, including reviewing the personal-information protection system of the relevant country and the provider’s personal-information protection framework.

If you wish to confirm information that may be provided under applicable law, please contact us as described in Section 17, “Contact for Privacy Inquiries.”

8. Shopify and Integrated Services

Our online store uses the e-commerce platform provided by Shopify. Information relating to product orders, payments, accounts, shipping, and other use of the online store may be processed by Shopify and service providers integrated with Shopify.

The Services may also use external services that provide website production and display, membership management, forms, product sales controls, age verification, email delivery, access analytics, restock notifications, and other functions.

At present, our website uses Shopify as well as Google Analytics, Klaviyo, Simplee Memberships, AOV.ai, GemPages, Shopify Forms, Age Checker Plus, Restock Rocket, and services or functions related to them.

To the extent necessary to provide their services, these providers may process account information, order and purchase information, membership information, form submissions, cookies, IP addresses, device information, browsing and interaction history, and similar information.

The privacy policies and other terms established by each provider also apply to that provider’s handling of information.

We may change, add, or discontinue the external services we use. If there is a material change, we will provide notice through this Privacy Policy or another appropriate method.

9. Use of Cookies and Similar Technologies

Our website may use cookies, web pixels, local storage, and similar technologies to provide website functions, maintain login and cart status, verify age, analyze usage, improve the Services, prevent misuse, measure advertising effectiveness, and provide information based on customers’ interests.

These technologies may include those necessary to operate the website, those used to improve functionality, those used for analytics, and those used for advertising or marketing.

Customers may be able to refuse or change acceptance of cookies and similar technologies through browser settings or a cookie-settings interface we provide. However, disabling necessary cookies may prevent use of login, cart, age-verification, checkout, or other functions of the Services.

10. Access Analytics, Email Delivery, and External Content

We may use Google Analytics, Klaviyo, and other analytics and email-delivery services to understand website usage, improve the Services, deliver email, and measure advertising effectiveness.

These service providers may collect cookies, online identifiers, IP addresses, device information, browsing and interaction history, and other information and handle it in accordance with their respective privacy policies.

If our website embeds YouTube or other third-party content, the third party may collect cookies, IP addresses, browsing information, and similar data when that content is displayed or used.

Customers may be able to restrict use of applicable information using opt-out functions offered by the relevant service provider, browser settings, or a cookie-settings interface provided by us.

11. Newsletters and Similar Communications

We send newsletters and other advertising or promotional emails to persons who have requested such communications in advance, consented to receive them, or may lawfully receive them under applicable law.

Receipt of advertising or promotional email is voluntary and is handled separately from consent to communications necessary for membership registration or product purchases.

If you no longer wish to receive such communications, you may unsubscribe at any time using the unsubscribe method stated in the email or another method specified by us.

However, we may continue to send communications necessary to provide the Services, including order confirmations, shipping notices, membership-registration notices, important service changes, and security notices, even after you unsubscribe from promotional communications.

12. Security Management of Personal Information

We implement organizational, personnel, physical, and technical security measures to prevent leakage, loss, or damage of personal data.

Principal measures include:

  • Clarifying responsibility for handling personal information and the scope of persons handling it
  • Training and supervising employees and other personnel handling personal information
  • Managing access permissions to personal information
  • Passwords, authentication, and other measures to prevent unauthorized access
  • Encryption of communications and other information-security measures
  • Selection, contracting, and supervision of service providers
  • Understanding the external environment when personal data is handled in a foreign country
  • Establishing reporting and response systems for data leaks and similar incidents

If you wish to confirm specific details regarding our security-management measures, please contact us as described in Section 17, “Contact for Privacy Inquiries.”

13. Retention Period for Personal Information

We retain personal information for the period necessary to achieve the purposes of use or for the period required for legal, accounting, tax, contractual, transaction-record, fraud-prevention, dispute-resolution, or other purposes.

Even after a Member withdraws, we may retain order and purchase history and other information for the period required by law or reasonably necessary for business purposes.

When personal information is no longer required to be retained, we delete or anonymize it by an appropriate method in accordance with applicable law and our internal rules. However, backup data may be retained for a period reasonably necessary for system purposes.

14. Requests Regarding Retained Personal Data

An individual or their authorized representative may make the following requests regarding personal data retained by us in accordance with applicable law:

  • Notification of purposes of use
  • Disclosure
  • Disclosure of records of provision to third parties
  • Correction, addition, or deletion of content
  • Suspension of use or erasure
  • Suspension of provision to third parties

If you wish to make a request, please contact us as described in Section 17, “Contact for Privacy Inquiries.” We will respond in accordance with applicable law after confirming the identity of the individual or legitimate representative.

Where permitted by law, disclosure may be provided by a method designated by the individual. However, if disclosure by that method would require substantial expense or would otherwise be difficult, we may provide disclosure by another method.

Depending on the request, we may ask for identification documents or other necessary materials. In cases prescribed by law, we may be unable to grant all or part of a request. Where possible, we will explain the reason.

15. Voluntary Provision of Personal Information

Providing personal information is voluntary. However, if information necessary for product orders, delivery, membership registration, responding to inquiries, or other provision of the Services is not provided, you may be unable to use all or part of the Services.

16. Links to External Sites

Our website may contain links to websites or services operated by third parties.

Please review the privacy policies and other terms established by those third parties regarding the handling of personal information on linked websites or services.

17. Contact for Privacy Inquiries

For inquiries regarding the handling of personal information, requests for disclosure or other rights, complaints, or consultations, please contact:

Company: ID10 Japan Inc.
Address: 1-5-10 Kamimeguro, Nakameguro Mansion 405, Meguro-ku, Tokyo 153-0051, Japan
Contact form: https://kuraone.com/pages/contact

Depending on the nature of your inquiry, we may ask you to provide information necessary to verify your identity.

18. Changes to This Privacy Policy

We may revise this Privacy Policy as necessary due to changes in law, changes to the Services, changes to the way we handle personal information, or other circumstances.

If we make a material change, we will provide notice appropriate to the nature of the change by posting on the Site, email, or another appropriate method.

The revised Privacy Policy applies from the date it is posted on the Site or from another effective date separately specified.

Established: January 18, 2023
Revised: August 12, 2026