Thirty Five Summers Co., Ltd. (hereinafter referred to as "this Shop" or "the Company") recognizes its social responsibility to appropriately protect all customers' personal information. Therefore, we have established this Privacy Policy (hereinafter referred to as "this Policy") as follows and will take all reasonably possible measures to ensure the appropriate handling and protection of all personal information, including that of individuals located in the European Economic Area (hereinafter referred to as "EEA") who are protected under the General Data Protection Regulation 2016/679 (hereinafter referred to as "GDPR"). In cases where the national laws of the individual's location mandate otherwise, those laws shall be positioned as supplementing this Privacy Policy.

1. Definitions

The following terms used in this Policy shall be defined as follows:
(1) Customer
Refers to a customer who is an identifiable natural person to whom personal information pertains.
(2) Personal Information
Refers to any information that can identify an individual (including information that can be easily cross-referenced with other information to identify a specific individual).
(3) Applicable Laws
Refers to the GDPR and the Act on the Protection of Personal Information of Japan.
(4) Processing
Refers to any operation performed on personal information, whether by manual or automated means, including collection, recording, storage, editing, processing, modification or alteration, retrieval, reference, use, disclosure by transmission, distribution, granting access by other means, erasure or deletion, and restoration.
(5) Customer Consent
Refers to an indication of the customer's wishes that is freely given, specific, informed, and unambiguous, by which the customer signifies agreement to the processing of personal information relating to them.

2. Collection of Personal Information

This Shop collects personal information when customers do the following:
(a) Register online
(b) Purchase products or make inquiries
(c) Browse or use this Shop's website
(d) Subscribe to this Shop's email newsletter
Personal information is collected through lawful and fair means, with the purpose of use clearly specified.

The personal information collected by this Shop is as follows:
(a) Name, Furigana
(b) Address
(c) Phone number
(d) Email address
(e) Username and password
(f) Delivery information
(g) Transaction history with this Shop and its details
(h) Customer's credit card, debit card, and other payment information
(i) Location data, behavioral data
(j) IP address, cookie information, and other online identifiers
(k) Information that can identify a specific individual by combining the above

3. Use of Personal Information

The purposes of use for personal information entrusted to us by customers at this Shop are as follows:
(a) Confirmation and inquiry of orders
(b) Confirmation and inquiry of product shipments
(c) Replying to inquiries
(d) Providing after-care and other support
(e) Sending marketing communications, displaying advertisements, and sending advertising emails
(f) Maintaining and improving services
(g) Analyzing usage trends
(h) Tailoring advertisements and content displayed on this Shop's website for the customer
(i) Assisting in finding the customer's nearest store
(j) Verifying the customer's identity

This Shop will not disclose or provide personal information to third parties without the customer's consent, except in the following cases:
(a) When required by law, or when it is necessary to cooperate with a national institution, a local public body, or a person entrusted by them in executing affairs prescribed by law
(b) When it is necessary for the protection of a person's life, body, or property, and it is difficult to obtain the person's consent
(c) When sharing personal data with an affiliate company that operates this Shop, while complying with the GDPR. In such cases, this Shop will establish appropriate legal frameworks applicable to the transfer and handling of data (Articles 26, 28, and 29 of the GDPR). Furthermore, when this Shop shares personal information with a third party outside the EEA, it will establish appropriate legal frameworks applicable to the transfer of said personal information (which may include Standard Contractual Clauses approved by the European Commission).

4. Legal Basis for Processing Personal Information

The legal basis for processing is as follows:
(a) When the customer has given consent to the processing of their personal information for one or more specific purposes
(b) When processing is necessary for the performance of a contract to which the customer is a party, or in order to take steps at the request of the customer prior to entering into a contract
(c) When processing is necessary for compliance with a legal obligation to which the Company is subject
(d) When processing is necessary to protect the vital interests of the customer or another natural person
(e) When processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
(f) When processing is necessary for the purposes of the legitimate interests pursued by the Company or by a third party

5. Information Security Management and Retention Period

(1) The security management of personal information entrusted by customers is handled by the service provider through reasonable organizational, physical, personnel, and technical measures, and this Shop strives to prevent unauthorized access to, loss of, falsification of, or leakage of personal data by handling it appropriately in accordance with relevant laws and regulations.
(2) If applicable laws specify a minimum retention period, the Company will store personal information for that period. After the minimum retention period has elapsed, or if there is no minimum retention period, personal information will be promptly deleted when it is no longer necessary for the purposes of use stipulated in Article 3.

6. External Outsourcing

The Company may outsource the handling of personal information in whole or in part to third parties in order to carry out the purposes stipulated in this Policy, including the provision of this Shop's services.
When concluding an outsourcing contract, the Company will carefully examine whether the third party is suitable as an outsourcing partner. In such outsourcing contracts, we stipulate matters concerning safety management measures, confidentiality, conditions for re-outsourcing, and other matters related to the appropriate handling of personal information, and we appropriately supervise the outsourcing partner by monitoring the status of the outsourced work.

7. Customer Rights

Under applicable laws including the GDPR, customers have the following rights. If you wish to exercise these rights, please contact us via email or mail at the contact information provided below. Additionally, if you have registered as a user, you can correct your personal information from the "My Account" menu on this site.
Upon receiving a request from a customer regarding their personal information, the Company will respond appropriately within a reasonable scope after verifying the identity of the person. However, depending on applicable laws, customers may not be able to exercise certain rights (e.g., under Japan's Act on the Protection of Personal Information, the right to data portability under Article 7(1)⑥ of this Policy is not recognized at the time of this Policy revision). Furthermore, due to the deletion or termination of the use of all or part of personal information, the Company may not be able to provide satisfactory services to the customer. Also, due to certain legal obligations, the Company may not be able to delete or terminate the use of information it holds.

(1) Types and Contents of Rights
① Right to withdraw consent
Where the processing of personal information is based on the customer's consent, the customer has the right to withdraw such consent at any time.
② Right of access
The customer has the right to request access to their personal information. When an access request is made, the Company will provide a copy thereof.
③ Right to rectification
The customer can ask the Company to rectify incomplete or inaccurate personal information.
④ Right to erasure
The customer has the right to request the deletion of their personal information when the Company continues to process it without legitimate reason.
⑤ Right to restriction of processing
The customer has the right to have the Company restrict the processing of their personal information.
⑥ Right to data portability
The customer has the right to receive their personal information in a structured, commonly used, and machine-readable format.
⑦ Right to object
The customer has the right to object to the processing of personal information by the Company. The Company will stop processing the personal information for which the objection was received, unless (a) it has compelling legitimate grounds that override the interests, rights, and freedoms of the customer, or (b) it is related to the initiation, execution, or substantiation of legal claims.
⑧ Right to lodge a complaint with a supervisory authority
The customer has the right to lodge a complaint with a supervisory authority at any time. However, the Company requests that you contact us at the inquiry address at the end of this document to give us an opportunity to address your complaint before contacting a supervisory authority.

(2) Expenses Required for Exercising Rights
When a customer exercises the above rights, the controller may charge a fee based on applicable laws.

(3) Cases Where We May Refuse to Respond
If a customer's request is manifestly unfounded or excessive, or if identical or similar requests are repeated, the Company may charge a reasonable fee or refuse to respond to the request.

8. Use of Cookies

To provide better service to customers, the Company may use cookies and other similar technologies (hereinafter referred to as "cookies, etc.") for the following purposes: to provide our services, to confirm the appropriate operation of said services, to analyze our business and marketing activities, and to track the use of this Shop's website or services by customers and optimize them for each customer. Through these technologies, for example, customers do not need to re-enter necessary data into forms each time they use this Shop's website. Information stored in cookies, etc., is used to identify customer preferences and tailor content to their areas of interest.
When you access this Shop, a pop-up will appear in your browser allowing you to choose whether or not to consent to the use of cookies. You can block or allow cookies by making a selection on the pop-up. Additionally, you can block these cookies, etc., or display warnings in your browser settings. However, please note that if you restrict certain cookies, etc., some parts of this Shop's site may be prevented from functioning properly.
Furthermore, this Shop may allow third parties to provide advertisements and acquire certain anonymous information when you visit this Shop's site. Such third parties may use information collected while you browse this Shop's site or other websites, and other information similar to personal information, to provide advertisements for products and services that match your interests. These third parties mainly use cookies, etc., to acquire the aforementioned information, recognize users, or link information across different devices or browsers, and use cookies, etc., to provide more effective targeted advertising.

* Cookies are pieces of information sent from a server computer to your browser and stored on the hard disk of the computer you are using.

9. Use of SSL

When entering personal information, we use SSL (Secure Sockets Layer) technology to ensure security and prevent this information from being intercepted, interfered with, or falsified.
* SSL is a function that encrypts information to prevent eavesdropping and data falsification. By using SSL, it is possible to transmit information more securely.

10. Inquiries (Controller)

For questions or complaints, or if you wish to exercise the rights described in Article 7 of this Policy, please contact us at the following address:

Data Controller: Thirty Five Summers Co., Ltd.
Address: Please see the notation based on the Act on Specified Commercial Transactions.
Email: aoyama@anatomica.jp

11. Changes to the Privacy Policy

This Shop may change the personal information collected, the purposes of use, or this Policy due to compliance with amendments to laws or for other reasons. The latest version of this Policy always applies to the personal information collected by this Shop. If you access this Shop's website or use this Shop's services after this Policy has been revised, you will be deemed to have agreed to such revisions. In the event of a revision to this Policy, we will post it on this page, and it will become effective on the date of posting.