1. Who we are
Tora provides personal buying support between Japan and Indonesia. Tora is the controller of the personal data described in this policy. For privacy questions or to exercise your rights, email privacy@tora.example. (Operating entity and registered address: placeholder.)
2. Information we collect
We may collect information that you choose to send to us through WhatsApp, email, or another agreed communication channel:
- Your name, email address, phone number, and WhatsApp contact details.
- Product links, item details, quantities, preferences, and instructions for a request.
- Recipient names, delivery addresses, phone numbers, and other details needed to coordinate delivery.
- Order confirmations, payment references, receipts, messages, and support history.
We do not collect card details through this public website. If an external payment provider is used, that provider handles payment information under its own terms and privacy policy.
Our hosting provider may process basic technical information such as IP address, browser type, requested pages, timestamps, and security logs when you visit the site.
3. How we use information
- Check product requests and coordinate purchases in Japan.
- Receive, group, prepare, and coordinate delivery of items to Indonesia.
- Confirm payments, provide updates, and respond to questions.
- Meet legal, tax, customs, safety, and fraud-prevention obligations.
- Operate, protect, and improve the public website and our service.
4. Legal bases
Where applicable law requires a legal basis, we rely on the performance of our agreement with you, steps you ask us to take before an order, compliance with legal obligations, our legitimate interests in operating and protecting the service, and consent where required.
5. How we share information
We share personal data only when needed to provide or protect the service:
- Sellers and service providers in Japan, when information is needed to complete a requested purchase.
- Warehouse, delivery, customs, and local service partners involved in moving an order from Japan to Indonesia.
- Communication, hosting, payment, accounting, and professional-service providers acting for us.
- Authorities or other parties when required by law or reasonably necessary to protect people, rights, property, or the service.
- A successor organization in connection with a merger, acquisition, financing, or transfer of the business, subject to appropriate safeguards.
We do not sell personal data.
6. Cross-border data transfers
Providing the service involves processing information in Japan and Indonesia. Communication and technology providers may also process information in other countries. Where required, we use appropriate safeguards for these transfers.
7. Data retention
We keep personal data for as long as needed to handle requests, provide support, resolve disputes, and meet legal, accounting, tax, customs, and fraud-prevention obligations. We then delete or anonymize it when reasonably possible.
8. Your rights
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your data, and to object to or restrict certain processing. You may also withdraw consent where processing relies on consent. Email privacy@tora.example to make a request.
9. Security
We use reasonable technical and organizational safeguards, including protected communications and restricted access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
10. Children
The service is intended for adults and is not directed to children under 18. If you believe a child has provided personal data to us, contact us so we can review and delete it where appropriate.
11. Changes and contact
We may update this policy as our service or legal obligations change. The revised policy will show a new last-updated date. Questions about this policy or your data can be sent to privacy@tora.example.