Privacy policy

CLOUD HEART JAPAN Co., Ltd. ("Company," "we," "us," or "our") recognizes the importance of protecting personal information. This Privacy Policy ("Policy") describes how we collect, use, disclose, and otherwise process the personal information of users ("Users") in connection with CLOUD HEART, our e-commerce service for sporting goods and related products (the "Service").

Article 1 (Definition of Personal Information)

For the purposes of this Policy, "Personal Information" means information relating to a living individual that can identify a specific individual through such information as the individual's name, date of birth, address, telephone number, email address, or other identifying particulars, as defined under the Act on the Protection of Personal Information of Japan (Act No. 57 of 2003, as amended) ("APPI") and the Personal Data Protection Act 2012 of Singapore ("PDPA").

Article 2 (Collection of Personal Information)

The Company may collect the following categories of Personal Information when Users access or use the Service:

  • Registration information, such as name, address, telephone number, and email address.
  • Transaction information, including payment information and shipping information.
  • Information relating to use of the Service, including purchase history, access logs, and browsing history.
  • Information collected through cookies and similar technologies, including cookies, device identifiers, and other technical information.

Article 3 (Purposes of Use of Personal Information)

The Company uses the Personal Information it collects for the following purposes:

  • To provide, operate, maintain, and improve the Company's e-commerce service (the "Service").
  • To process product orders, package and ship products, process payments, and provide updates regarding delivery status.
  • To respond to inquiries and verify Users' identities.
  • To send information by email or other means regarding new products, sales promotions, campaigns, and other information relating to the sporting goods and related products offered by the Company.
  • To analyze Users' purchase history, browsing history, and other information in order to recommend products and deliver advertisements tailored to their interests and preferences.
  • To detect, prevent, and respond to fraudulent orders, unauthorized access, and other fraudulent or unlawful activities relating to the Service.
  • For other purposes incidental or related to the foregoing.

Article 4 (Changes to the Purposes of Use)

The Company may change the purposes for which Personal Information is used to the extent that the revised purposes are reasonably related to the original purposes of use.

Any such changes will be announced on the Service.

Article 5 (Management of Personal Information)

The Company implements necessary and appropriate measures to ensure the accuracy and secure management of Personal Information.

The Company processes personal data on servers and other systems located in the Republic of Singapore. In doing so, the Company has taken into account the personal data protection framework applicable in Singapore, including the Personal Data Protection Act 2012 ("PDPA"), and implements necessary and appropriate security measures to protect personal data against unauthorized access, leakage, alteration, loss, and other security risks.

The security measures implemented by the Company include, without limitation:

  • Encryption of personal data during transmission and while at rest.
  • Access controls to ensure that only authorized personnel have access to personal data.
  • Implementation of unauthorized access detection systems and the performance of regular security audits.

Article 6 (Disclosure of Personal Information to Third Parties)

The Company will not disclose or provide Personal Information to any third party without the User's prior consent, except in the following circumstances:

  • Where required or permitted by applicable laws or regulations.
  • Where disclosure is necessary to protect the life, body, or property of an individual.
  • Where disclosure is necessary to comply with a request from a government authority or other public authority.
  • Where Personal Information is disclosed to the Company's service providers or contractors to the extent necessary for the performance of services on the Company's behalf.

Article 6-2 (Shared Use of Personal Information Within the Group)

Pursuant to Article 27, Paragraph 5, Item 3 of the Act on the Protection of Personal Information ("APPI"), the Company may jointly use personal data with its group companies, including CLOUD HEART JAPAN Co., Ltd. and OBI MEDIA PTE. LTD., as follows:

  • Categories of personal data subject to joint use: Name, address, telephone number, email address, purchase history, and shipping information.
  • Scope of parties participating in the joint use: The Company and its subsidiaries and affiliates (a current list is available on the Company's website at https://obi.sg).
  • Purposes of joint use: The same purposes set forth in Article 3 (Purposes of Use of Personal Information).
  • Entity responsible for the management of the jointly used personal data:
    CLOUD HEART JAPAN Co., Ltd.
    Address: 83 Clemenceau Avenue, #18-01 UE Square, Singapore 239920
    Representative: Kaname Nagayama

Article 6-3 (Cross-Border Transfer of Personal Data)

The Company may store and process Users' personal data on the Company's servers and other systems located in the Republic of Singapore. An overview of the personal data protection framework in Singapore is provided below:

  • Singapore has a comprehensive personal data protection law, the Personal Data Protection Act 2012 ("PDPA"), which applies to the private sector.
  • Singapore participates in the APEC Cross-Border Privacy Rules ("CBPR") System, which provides a framework for cross-border transfers of personal data.
  • However, Singapore has not received an adequacy decision from the European Commission under Article 45 of the General Data Protection Regulation ("GDPR") and is not currently designated by Japan's Personal Information Protection Commission ("PPC") under Article 28 of the Act on the Protection of Personal Information ("APPI") as a foreign country with a personal information protection system recognized as providing a level of protection equivalent to that of Japan.

Before transferring personal data to a third party located in a foreign country, the Company will obtain the User's consent where required under Article 28, Paragraph 1 of the APPI.

The Company continuously implements measures in Singapore that are equivalent to the safeguards required of a business handling personal information under Chapter IV, Section 2 of the APPI and maintains measures consistent with the eight principles of the OECD Privacy Guidelines.

If the Company begins storing or processing personal data in any additional country or region in the future, this Policy will be updated accordingly, and the revised Policy will be published on the Service.

Article 7 (Outsourcing of Personal Information Processing)

The Company may entrust the processing of Personal Information to third-party service providers to the extent necessary for the operation of the Service.

In such cases, the Company will exercise appropriate supervision over such service providers to ensure that Personal Information is handled properly.

Article 8 (Use of Cookies and Similar Technologies)

The Company may use cookies and similar technologies to improve the functionality of the Service and to analyze how the Service is used, including through Google Analytics.

Users may restrict or disable the use of cookies through their browser settings. However, doing so may prevent certain features of the Service from functioning properly or becoming available.

Article 9 (Analytics Tools)

The Company may use analytics tools, including Google Analytics, to improve the Service.

Information collected through these analytics tools does not identify individual Users.

Article 10 (Disclosure of Personal Information)

Users may request that the Company disclose the Personal Information relating to them.

The Company will respond to such requests in accordance with applicable laws and regulations.

Article 11 (Correction, Deletion, and Suspension of Use of Personal Information)

Users may request the correction, addition, deletion, or suspension of the use of their Personal Information.

The Company will respond to such requests promptly within a reasonable scope and in accordance with applicable laws and regulations.

Article 12 (Use of the Service by Minors)

If a minor uses the Service, the minor must obtain the consent of a parent or legal guardian where required.

Article 13 (External Links)

The Company is not responsible for the collection, use, disclosure, or other handling of Personal Information by third-party websites linked from the Service.

Article 14 (Changes to this Privacy Policy)

The Company may amend this Policy in response to changes in applicable laws and regulations, modifications to the Service, or other circumstances.

Any amendments will become effective when the revised Policy is posted on the Service.

Article 15 (Contact Information)

For inquiries regarding this Policy or requests for disclosure, correction, deletion, or suspension of use of Personal Information, please contact the following:

Email address: support@cloudheart.com

Department: CLOUD HEART Customer Support