1. Who we are
Tora is the controller of the personal data described in this policy. For privacy questions or to exercise your rights, email privacy@tora.example. (Operating entity and registered address: placeholder.)
2. Information we collect
Information you provide:
- Account and identity: your name, email address, and login credentials, managed through our authentication provider.
- Profile and preferences: country, shopping interests, and display settings.
- Shipping details: recipient names, postal addresses, and phone numbers you save.
- Order content: the product links you paste, item details, quantities, and any notes or instructions you send to sellers.
- Payment details: when you add a card, our payment processor handles the card data; we retain only non-sensitive identifiers such as the card brand and last four digits. We never store your full card number or security code.
Information we generate:
- Wallet and transactions: your prepaid balance (held in Japanese yen) and a record of top-ups, charges, dispatch fees, and refunds.
- Order and fulfillment records: quotes, purchases made on your behalf, warehouse status, consolidation, and shipment tracking.
Information collected automatically:
- Technical and usage data: device and browser type, IP address, pages viewed, and similar log data.
- Cookies and local storage: see our Cookie Policy.
3. How we use your information
- Create and manage your account and authenticate you.
- Generate quotes and purchase items from third-party sellers on your behalf.
- Receive, store, consolidate, and ship parcels, and provide tracking.
- Operate your wallet and process payments, top-ups, and refunds.
- Provide customer support and communicate about your orders.
- Detect, prevent, and investigate fraud and abuse, and keep the service secure.
- Comply with legal, tax, and customs obligations.
- Maintain and improve the service.
4. Legal bases (where applicable)
Where data-protection law such as the GDPR applies, we rely on: performance of our contract with you (to provide the service); your consent (for example, non-essential cookies); our legitimate interests (security, fraud prevention, and service improvement); and compliance with legal obligations.
5. How we share your information
We share personal data only as needed to run the service:
- Sellers and marketplaces in Japan, to purchase and arrange domestic delivery of your items.
- Shipping carriers (such as Japan Post, FedEx, and DHL) and customs authorities, to deliver your parcels and complete customs declarations.
- Service providers who process data on our behalf, including our authentication provider, cloud hosting and database provider, and payment processor.
- Legal and safety: where required by law, to enforce our terms, or to protect the rights, property, or safety of Tora, our users, or others.
- Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this policy.
We do not sell your personal data.
6. International data transfers
Tora is a cross-border service. Your data is processed in Japan, where sellers and our warehouse are located, and may be transferred to and processed in other countries, including your own. Where required, we use appropriate safeguards for these transfers.
7. Data retention
We keep personal data for as long as your account is active and as needed to provide the service. We retain certain records, such as orders, payments, and tax-relevant data, for longer where required for legal, accounting, or fraud-prevention purposes, after which we delete or anonymize them.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, or port your data, to object to or restrict certain processing, and to withdraw consent. You can update much of your information in your account, or email privacy@tora.example to make a request. You may also have the right to complain to your local data-protection authority.
9. Security
We protect your data with encryption in transit, access controls that limit data to your own account, and a PCI-compliant payment processor for card handling. No method of transmission or storage is completely secure, but we work to protect your information and continually improve our safeguards.
10. Children
The service is intended for adults and is not directed to children under 18. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
11. Changes to this policy
We may update this policy from time to time. We will post the revised version with a new “Last updated” date and, where appropriate, notify you. Continued use of the service after changes take effect means you accept the updated policy.
12. Contact us
Questions about this policy or your data? Email privacy@tora.example.