PRIVACY POLICY

Published: October 15, 2024
Last updated: October 15, 2024

We, EPOCH COMPANY, LTD., respect your privacy. As we operate this website and provide you with our services, we process personal data about you, we undertake to comply with applicable data protection laws, including the Personal Information Protection Act of Japan (the “PDPA”), and the General Data Protection Regulation of the European Union (the “GDPR”). This is our privacy policy on how we process and protect your personal data.
We may revise this privacy policy from time to time. You can obtain the latest version of this policy at the following link:
https://epochtoys.com/gpsr-hq/policy.php

If you have any questions or concerns about this privacy policy or your personal data, including any requests to exercise your legal rights, please contact us using the following contact information:

Privacy Manager
EPOCH COMPANY, LTD.
2-2-2, Komagata Taito-ku, Tokyo 111-8618, Japan
privacy@epoch.jp

1. PERSON IN CHARGE

This privacy policy is issued by us, EPOCH COMPANY, LTD., a company registered in Tokyo, Japan. When we process your personal data, we are the data controller in the meaning of GDPR and are responsible for protecting your rights with personal data.

2. HOW WE PROCESS YOUR PERSONAL DATA

As we provide you with our services on this website, we collect, use, store, generate or disclose to third-parties (hereinafter collectively referred to as “process”) your personal data for the following purposes:

  • To analyze your use of our website in order to generate insight that is useful for improving our services, products and marketing:
    1. Categories of your personal data we process: your interaction with our website collected by use of cookie(s), including your browsing record on our website together with IP address and other information about your terminal device.
    2. Lawful basis: processing is necessary for the purpose of our legitimate interest, i.e. improving our services, products and marketing. Data collected about your interaction with our website are analyzed in anonymized, statistical and aggregated manner, so that such processing does not affect your privacy by any means.
    3. Period for which we store your personal data: log data is deleted after 60 days.
    4. Recipients we disclose your personal data to: our contractors that assist us in analyzing web traffic data, e.g. Google.
  • To protect your privacy and security, integrity and availability of this website:
    1. Categories of your personal data we process: your browsing record on our website collected by web access logging, including your IP address, type and version of your web browser, web browser plugins, operating system and other information about your terminal device and technologies you use when accessing our website.
    2. Lawful basis: processing is necessary for the purpose of our legitimate interest, i.e. protecting your privacy and this website from fraudulent or unlawful access by monitoring web access traffic.
    3. Period for which we store your personal data: 60 days (60 days for Calico Critters website).
    4. Recipients we disclose your personal data to: our contractors that assist us in monitoring web access traffic.
  • To provide you with support, to gain insights on how we can improve our products and services, and to act according to applicable law in responding to consumer complaints.
    1. Categories of your personal data we process: your identity data and contact data, technical data and information about technical issues, your product questions/complaints, your general questions, other information or content regarding the reason for your inquiry.
    2. Lawful basis: (i)Legitimate interest, i.e. optimizing our customer services and products, (ii) Legal obligation, i.e. compliance with legislation, and (iii) Your consent i.e. when you contact our customer support and provide us with information about your support request.
    3. Period for which we store your personal data: we do not store the personal data for longer than is legally permitted and necessary for the related processing purposes.
    4. Recipients we disclose your personal data to: the Japanese manufacture of our products that assist us in the data processing in optimizing our customer services and products, our customer support, and compliance with legislation.

3. SENSITIVE PERSONAL DATA

We usually don’t collect and/or use sensitive categories of your personal data as defined in Articles 9 or 10 of GDPR on our website.

4. COOKIES

Cookie is a small text file that our website sends to your terminal device for the purpose of keeping certain records.

By using cookies:

  • Your terminal devices (e.g. browsers) remember your preferences (e.g. language used) and activities (e.g. login status, items in cart, etc.) on our website, so that we can deliver a personalized and better user experience on our website (essential cookies);
  • We keep track of your interaction with our website, giving us useful and important insight for improving our website (performance cookies); and
  • Based on your consent, our Adtech partners keep track of your browsing records across internet, so that we can deliver personalized advertisement that is more likely to be of your interest (advertising cookies).

The cookie identifies your terminal device, typically your web browser, but it cannot identify your individual identity. You can choose whether to allow us or third-parties (our Adtech partners) to set performance cookies and advertising cookies. When we use cookies for the purpose of personalizing our advertisement or analyzing web access, we request your prior consent thereto.
For more information and to change your cookie settings, including withdrawal of your consent, visit our Cookie Setting page from link at the bottom of every webpage.

We do not set and use cookies for the purpose of advertisement or web access analytics for our users under 16 years of age. To ensure this policy, we request you to declare you are 16 years of age or older when we obtain your consent to our setting cookies for these purposes.

5. TRANSFER TO NON-EU COUNTRIES

We do not transfer your personal data to any entities located in any third countries outside of the European Economic Area (EEA) or Japan. In the event that we transfer your data to an entity located outside the EEA or Japan, we either ask for your prior consent thereto or protect your rights with personal data by virtue of a data transfer contract with the relevant recipient in accordance with GDPR and PDPA, which impose on such recipients contractual obligations to ensure adequate level of data protection equivalent to those laid down by GDPR and PDPA.

6. YOUR LEGAL RIGHTS

Provided that certain conditions are met, you have legal rights to request from us the following:

  • Revocation of previously given consent to our processing of your personal data
  • Access to your personal data and to certain supplementary information covered by this policy;
  • Rectification of your personal data if inaccurate or incomplete;
  • Erasure of your personal data in certain circumstances;
  • Suspension of using your personal data in certain circumstances;
  • Stopping processing your personal data in certain circumstances; and
  • Obtaining your personal data in a structured, commonly used, and machine-readable format.

If you wish to exercise your right, please contact us.

7. COMPLAINT

Please contact us if you have any concern about how we collect and use your personal data. You also have right to lodge complaints with data protection supervisory authorities of your country of residence.

Back