Privacy policy

Introduction
LEFRI (“we,” “us,” or “our”) complies with applicable data protection laws, and properly handles your personal data (meaning any information related to an identified or identifiable natural person; hereinafter, the “Personal Data”).
This Privacy Policy applies, regardless of country or region, to your Personal Data that we obtain in connection with our e-commerce services (the “Service”) provided on the following website (the “Website”). By accessing or using this site, you agree to this privacy policy.
Website: https://thelefri.com

Modification to Privacy Policy
We will review this Privacy Policy as necessary and make continuous improvement from time to time in order to reflect your feedback or to comply with changes in our legal and/or regulatory obligations. You should review our privacy policy and terms of use each time you visit our site. Each time you use our site you have agreed to the current privacy policy and latest terms of use posted on our site.

Personal Data We Collect from You
(1) Personal Data you provide to us
We obtain information from you such as that listed below at the time when you sign up for membership, purchase products, make inquiries, apply for a present or prize, or when we conduct an online survey to improve the Website:
・Name;
・Email address;
・Password;
・Address;
・Telephone number;
・Order information;
・Purchase history
・Payment information (such as credit card information);
・Content of your inquiries;
・Content of your responses to questionnaire surveys; and
・Any other information that you have voluntarily provided to us
(2) Personal Data automatically obtained from your device
At the time when you connect to the Website, we obtain information such as that listed below from the device you are using.
・Technical information such as types of OS and browser, version and language setting;
・IP address and approximate location information based thereon;
・Online identifier such as cookie ID; and
・Your browsing history, search history and other information in relation to the Website and other websites
Out of the above-listed Personal Data, information such as name, email address and password must be entered at the time of membership registration. In addition, it is necessary to enter information, such as order information, payment information and address, when you purchase products within the Service. Other than these types of Personal Data, you are not required to provide us with any Personal Data under the applicable laws or a contract; however, please note that, if you do not provide such Personal Data, you may not be able to use certain parts of the Service or the functions of the Website.
Under all circumstances, we collect your Personal Data through a legitimate and appropriate means and will not obtain your Personal Data through any inappropriate means.
We do not knowingly collect and process Personal Data of minors under sixteen (16) years of age without the consent of their parent or guardian. If we discover that we have collected or processed Personal Data of minors under sixteen (16) years of age without such consent, we will take steps to delete the information as soon as possible. If you become aware that a minor under sixteen (16) years of age has provided us with Personal Data, please contact us immediately at the contact information set forth in “Contact Information”.

Third party service providers
We do not collect or store your credit card number, your gift card information or your debit card information (or other payment method). We use third party providers to do this for us. At present, we use shopify to process payments for us. We also use third party providers to prevent fraud in our transactions. If you use a particular source of funds (for example your applepay or paypal account), those sites and applications will collect your transaction information. These are accounts you created, and you should review the terms of use and privacy policies of those providers that you choose. When you: proceed to check out, or ask us to credit a return, your transaction information, including your name, password, email or other points of contact, and payment information is stored by our third party provider(s). You can check out as a “guest” without creating an account. Our service providers that process payments and monitor and detect fraud have certified that they are pci (payment card industry) compliant, and they have contractually committed to maintain your information in accordance with applicable laws (for example, ccpa and gdpr).
These third party providers are not authorized by us to use the information you provide for your purchases, credits, returns, and account information except to help us do our business with you, or as required by law (for example, to confirm there is no fraudulent transaction). These providers have also committed to cooperate with us when you exercise certain choices (for example, of you want to be forgotten if you are in the EU or California).

Purposes and Lawful Basis of the Collection and Processing of Personal Data
We will collect and process your Personal Data for the following purposes:
(1) To provide the Service enabling you to access product information, make requests for purchase products, receive delivery of products, manage your purchase history, etc. (including customizing the products to be displayed and the order thereof within the Website based on your attributes, etc.); to provide relevant services that you wish to receive, such as subscriptions to email newsletters; and to manage your information, provide notices on necessary matters and charge fees in relation to these services
* Collecting and processing of your Personal Data for this purpose is necessary in order to perform the contract executed with you for the Service or to take steps at your request prior to entering such contract
(2) To monitor and prevent unauthorized use of the Website and the Service, and also to ensure security
* Collecting and processing of your Personal Data for this purpose is necessary in order to fulfill our lawful obligations or to protect important interests for you and third parties
(3) To investigate and analyze the usage status of the Website and generate statistical information, which are carried out for the purpose of providing you with high quality products and services
* Collecting and processing of your Personal Data for this purpose is based on your consent thereto or is necessary to pursue legitimate interests, i.e. to perform our ordinary business.
(4) To distribute advertisements tailored to your interests both inside and outside the Website based on your attributes, purchase history, browsing history, etc.
* Collecting and processing of your Personal Data for this purpose is based on your consent thereto.
In principle, we will collect and process your Personal Data within the scope of the purposes set forth above, and when we use your Personal Data outside the scope of those purposes, we will obtain your prior consent unless otherwise permitted by applicable laws and regulations.

Disclosure of Your Personal Data
In connection with one or more of the purposes for collecting and processing of your Personal Data described above, we may disclose your Personal Data to third parties as follows, to the extent permitted by applicable laws and regulations:
(1) The following third parties that provide services to us:
When providing the following companies with names of orders, shipping addresses and shipping product information, etc. for product packaging and delivery services:
・Yamato Express Co., Ltd.
・Sagawa Express Co., Ltd
・Yamato Transport Co., Ltd.
When providing the following payment service company with credit card and order information for credit card payment services:
・Amazon Services International LLC
・PayPal Pte. Ltd.
・Shopify Inc.
When providing the information to the following email distribution service providers for the purpose of marketing using email:
・Shopify Inc.
(2) When disclosing your Personal Data to a public organization (e.g. an administrative organ or court) or other third party, pursuant to applicable laws and regulations or a request made by a public organization.
In addition to the above, our affiliated advertising distributors may use cookies to obtain data such as your browsing history through the Website. Further, we may also provide third parties with statistical information generated by your Personal Data.

International Transfer of Personal Data
In principle, your Personal Data is stored within Japan; please note, however, that in exceptional circumstances, to the extent necessary for the purposes specified under “3. Purposes and Lawful Basis of the Collection and Processing of Personal Data” above or as otherwise permitted by law, your Personal Data may be transferred to and stored at countries/regions outside Japan, and that such country/region may not have the same level of data protection as within Japan. In such case, we will separately inform you of the name and contact information of the overseas recipient who stores your Personal Data outside Japan. If you have any questions, comments or requests regarding the international transfer, please contact us using the contact information set forth in “Contact Information”. In the course of the international transfer of your Personal Data, we will take adequate measures to protect your Personal Data in a manner that complies with our legal obligations and ensure that related collection and processing of your personal data are in accordance with the applicable laws.

Retention Period and Deletion
We will not retain your Personal Data for any period exceeding the period necessary for the purposes specified in “Purposes and Lawful Basis of the Collection and Processing of Personal Data” above or after the specific purpose for which Personal Data was collected no longer exists; provided, however, that if we are obliged to retain your Personal Data under the relevant laws and regulations, we will comply with the same. We will promptly delete your Personal Data upon the expiration of the aforementioned retention period.

Security
For all users of our site, regardless of where you are located, we have implemented reasonable measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure.
The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our website, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.
Unfortunately, the transmission of information via the internet is not completely secure. Although we do use reasonable measures intended to protect your personal information, we cannot guarantee the security of your personal information transmitted to our website. To the fullest extent allowed by law, any transmission of personal information is at your own risk. Except where the law mandates otherwise, we are not responsible for circumvention of any privacy settings or security measures contained on this site.

Your Rights
You may have certain rights regarding your Personal Data under applicable data protection laws, such as the right to request access to your Personal Data, the right to request copies of the Personal Data collected by us, the right to supplement or correct the same, the right to object to collection, processing or use of the same and the right to delete the same. These rights should be exercised in accordance with applicable data protection laws.
If you wish to exercise the above rights, please make a request to us via the inquiry page. We will promptly handle your request after verifying your identity.
Also, the Website has a “Check/Change Your Registered Information” page which allows you to confirm whether your Personal Data is accurate and the most up-to-date version, and to update your Personal Data at all times.
As to the rights of California residents, please see “Rights of California Residents” below.
As to the rights of residents of the European Economic Area (EEA) or the United Kingdom, please see “Rights of Residents of the EEA and the United Kingdom” below.

Use of Cookies and others
This Site may use cookies and similar technologies. Users who wish to disable cookies may do so by changing the settings on their web browsers. However, if you disable cookies, you may not be able to use certain functions of our store's services.

<Use of Google Analytics>
Google Analytics shall use cookies to collect logs of your activities on the Website. The logs collected are managed in accordance with Google’s privacy policy. For details about Google Analytics and Google’s privacy policy, please visit the following websites:
Google Analytics Official Website:
http://www.google.com/analytics/

Google’s Privacy Policy:
https://www.google.com/policies/privacy/partners/

To opt out of tracking from Google Analytics on all websites, please use the Google Analytics Opt-out Browser Add-on.
Google Analytics Opt-Out Browser Add-on:
https://tools.google.com/dlpage/gaoptout?hl=en

Contact
Please refer to the description based on the “Act on Specified Commercial Transactions”.

Rights of California Residents
This section applies only if you are a California resident. You have the right to request that we disclose the following information to you about our collection and use of your Personal Data during the past twelve (12) months, up to a maximum of two (2) times in any twelve (12)-month period. Once we receive and confirm your verifiable consumer request, we will disclose to you:
・The categories of Personal Data we have collected about you.
・The categories of sources for that Personal Data.
・Our business or commercial purposes for collecting that Personal Data.
・The categories of third parties with whom we share or sell that Personal Data.
・The specific pieces of your Personal Data.
・The categories of Personal Data disclosed for business purposes.
・The types of third party to whom that Personal Data is to be disclosed for each type of Personal Data.
You also have the right to request that we delete some of your Personal Data collected by us. You have the right not to be discriminated against because you have exercised your rights under the California Consumer Privacy Act.
You have the right to opt-out of our sale of your Personal Data; however, we note that we have not sold any of your Personal Data in the past and will not sell any of your Personal Data in the future without notice.
If you are a California resident and you wish to exercise any of the rights set forth above, please contact us at the contact information set forth in “Contact Information” above. If you wish to exercise your rights through a representative, you must submit a power of attorney to us directly or through a representative.
<Do Not Track>
Some browsers have a "Do Not Track" feature that allows you to send a signal to the websites you visit indicating that you do not wish to be tracked. Currently, the Website does not support "Do Not Track" signals.

Rights of Residents of the EEA and the United Kingdom EEA
This section applies only if you are a resident of the European Economic Area (EEA) or the United Kingdom. You have the right to request access to your Personal Data held by us, as well as the right to copy, correct or delete the same and the right to restrict the processing of certain types of Personal Data. In addition, you have the right to receive your Personal Data from us in a structured and machine-readable format (right to data portability). When our processing of your Personal Data is based on your consent, you have the right to withdraw your consent at any time. Such withdrawal will not affect the processing of your past Personal Data to which you have already given your consent. Also, when our processing of your Personal Data is based on our legitimate interests, you have the right to object to such processing.

2023/07 Last updated