Privacy policy

• Account and application data — name, work email, phone, company name, country, business type, tax/VAT number, website, and expected order volume.
• Order data — what you bought, prices paid, shipping and billing addresses, and order correspondence.
• Payment data — bank transfer references, or for crypto the payment identifier and transaction hash. We never receive or store full card numbers.
• Technical data — a session cookie, and a cart cookie if you add items before signing in.

• To verify trade applications and operate your account — legitimate interests in preventing our confidential wholesale pricing reaching the retail market.
• To process, ship, and support your orders — performance of a contract.
• To meet tax, accounting, customs, and anti-fraud obligations — legal obligation.

We do not sell personal data, and we do not use it for advertising or behavioural profiling.

Only where needed to fulfil your order: shipping carriers and customs authorities (name, address, contact number, and a declaration of contents), our payment providers, and our hosting and database providers. Each processes data on our instructions.

Because we ship from Japan, fulfilling an international order necessarily transfers your delivery details to carriers and customs authorities in the destination country.

We use strictly necessary cookies only — one to keep you signed in, and one to hold a cart created before sign-in. We run no analytics, advertising, or third-party tracking cookies, which is why you are not asked for cookie consent.

Your theme preference is stored in your browser's local storage and never reaches our servers.

Order and invoice records are retained for the period required by tax and accounting law in our jurisdiction — commonly seven years. Rejected applications are deleted within 12 months. Account data is kept while your account is open.

Depending on where you live you may have rights to access, correct, delete, port, or restrict our use of your personal data, and to object to processing based on legitimate interests. Email privacy@fudakura.com and we will respond within one month.

Note that we cannot delete records we are legally required to retain, such as issued invoices, while that obligation lasts.

Passwords are stored hashed with bcrypt and are never recoverable in plain text. Traffic is served over HTTPS. Access to customer data is limited to staff who need it to fulfil orders.

If you are unhappy with how we handled your data, contact privacy@fudakura.com. You may also complain to the data protection authority where you live.