1. Who We Are

We're Japan Scissors UK, officially operated by:

For UK data protection law purposes, we're the "data controller" - meaning we're responsible for your personal data.

2. Legal Stuff (But Important)

We comply with:

• UK GDPR - The UK General Data Protection Regulation
• Data Protection Act 2018 - UK's data protection law
• Privacy Act 1988 (Cth) - Australian privacy law (because we're based there)
• PECR - Privacy and Electronic Communications Regulations (for cookies and marketing)

3. What Information We Collect

When You Buy Something:

• Name and contact details (email, phone)
• Delivery address
• Billing address
• Payment information (processed securely by Shopify/PayPal)
• Order history
• Communication preferences

When You Browse Our Site:

• IP address and location (country/city level)
• Browser type and version
• Pages you visit and time spent
• How you found us (referral source)
• Device information

When You Contact Us:

• Email content and attachments
• Chat transcripts
• Phone call notes (not recordings)
• Social media interactions

Marketing (Only With Consent):

• Email preferences
• Marketing interaction history
• Purchase preferences

4. How We Collect Your Data

We collect information when you:

• Place an order - We need this to fulfill your purchase
• Create an account - Makes future orders easier
• Sign up for emails - Only if you want to hear from us
• Contact us - So we can help you
• Use our website - Via cookies (see our Cookie Policy)
• Leave a review - Helps other customers
• Follow us on social - Public interactions only

5. Why We Use Your Data (Legal Basis)

Under UK GDPR, we need a legal reason to process your data. Here's ours:

Contract Performance:

• Processing your orders
• Delivering your scissors
• Handling returns/refunds
• Customer service

Legal Obligations:

• Keeping records for tax (7 years)
• Fraud prevention
• Product safety recalls

Legitimate Interests:

• Improving our website
• Fraud prevention
• Security monitoring
• Business analytics (anonymised)

Consent:

• Marketing emails (you can opt out anytime)
• Non-essential cookies
• Reviews and testimonials

6. How We Use Your Information

• Order Processing: To send you scissors!
• Customer Service: Answer questions, handle returns
• Legal Compliance: Tax records, fraud prevention
• Marketing: Only if you've said yes
• Website Improvement: Understanding what works
• Security: Protecting against fraud
• Product Development: Knowing what customers want

7. Who We Share Data With

We don't sell your data. Ever. But we do share it with:

Essential Service Providers:

• Shopify: Our e-commerce platform (Canada)
• Payment Processors: Shopify Payments, PayPal, Clearpay
• Shipping Companies: DHL, FedEx, Royal Mail
• Email Service: For order confirmations and marketing (if opted in)

Analytics & Marketing (Anonymised):

• Google Analytics: Website performance
• Facebook Pixel: Ad effectiveness
• Reviews Platform: Customer feedback

Legal Requirements:

• HMRC (tax purposes)
• Law enforcement (if required by law)
• Legal advisors (if needed)

Business Changes:

If we sell our business, customer data would transfer to the new owner (with notice to you).

8. International Data Transfers

Important: We're based in Australia, so your data travels there. Here's how we protect it:

Shopify (Primary Data Storage):

• Servers in US and Canada
• EU-US Privacy Shield participant
• Standard Contractual Clauses in place

Our Systems (Australia):

• Standard Contractual Clauses implemented
• Equivalent security measures to UK
• Access limited to necessary staff

Other Transfers:

• Email providers (US)
• Customer service tools (various)
• All with appropriate safeguards

Want details about specific safeguards? Email privacy@japanscissors.co.uk

9. How Long We Keep Your Data

10. Your Rights Under UK GDPR

You've got rights, and we respect them:

1. Right to Access

Ask for a copy of your data. We'll provide it within 30 days, free of charge.

2. Right to Rectification

Wrong address? Typo in your name? Tell us and we'll fix it.

3. Right to Erasure ('Right to be Forgotten')

Want us to delete your data? We will, unless we legally need to keep it (like for tax).

4. Right to Restrict Processing

You can ask us to 'freeze' your data while we sort out any issues.

5. Right to Data Portability

Want your data in a format you can use elsewhere? We'll provide it.

6. Right to Object

Don't want marketing? Analytics tracking? Tell us.

7. Rights Around Automated Decisions

We don't make automated decisions about you, but you'd have rights if we did.

8. Right to Withdraw Consent

Changed your mind about marketing? One click unsubscribe.

To exercise any right: Email privacy@japanscissors.co.uk with your request.

11. Cookies & Tracking

We use cookies to make the site work and understand how people use it. Key types:

Essential Cookies:

• Shopping cart functionality
• Checkout process
• Security features

Analytics Cookies (With Consent):

• Google Analytics - visitor stats
• Facebook Pixel - ad performance
• Hotjar - user experience

Marketing Cookies (With Consent):

• Retargeting pixels
• Social media tracking
• Affiliate tracking

Manage cookies anytime via the cookie banner or your browser settings.

Full details in our Cookie Policy.

12. Security

We protect your data with:

• Encryption: SSL/TLS for all data transmission
• Access Controls: Staff only access what they need
• Shopify Security: PCI DSS Level 1 compliant
• Regular Updates: Security patches applied promptly
• Password Protection: Strong passwords required
• Two-Factor Authentication: For admin accounts

Despite our efforts, no system is 100% secure. If we have a breach that affects you, we'll notify you and the ICO within 72 hours.

13. Children's Privacy

Our site is for adults (18+). We don't knowingly collect data from children. If we discover we have, we'll delete it immediately.

14. Third-Party Links

We link to other sites (like social media). Once you leave our site, their privacy policies apply, not ours. Check their policies before sharing data.

15. Marketing Communications

We only send marketing if you've opted in. Every email has an unsubscribe link. You can also:

• Email us at unsubscribe@japanscissors.co.uk
• Update preferences in your account
• Reply STOP to any SMS (if applicable)

We'll process opt-outs within 48 hours.

16. Your California Privacy Rights

Not in the UK, but worth mentioning: California residents have additional rights under CCPA. Contact us for details.

17. Changes to This Policy

We might update this policy occasionally. We'll notify you of significant changes by:

• Email (if you're on our list)
• Website banner
• Date change at the top

18. How to Complain

Not happy with how we handle your data? Please tell us first:

Email: privacy@japanscissors.co.uk
We'll respond within 5 working days.

Still not satisfied? You can complain to:

19. Contact Us

Questions about privacy? Get in touch:

• Privacy Email: privacy@japanscissors.co.uk
• General Support: support@japanscissors.co.uk
• Data Protection Officer: James Adams (dpo@japanscissors.co.uk)

By post:
Japan Scissors UK
Data Protection Queries
Suite 407, Level 1
241 Adelaide Street
Brisbane QLD 4000
Australia