At Hada Labo, we respect the privacy of our users and recognize the importance of protecting personal information collected through our website and mobile applications (collectively, the “Sites”). This Privacy Policy describes how we collect, use, disclose, and protect the personal information provided to us through the Sites.
Information We Collect
We collect two types of information through the Sites: personally identifiable information and aggregate information.
Personally Identifiable Information
Personally identifiable information is information that identifies you and could reasonably be used to contact you online or physically. The personally identifiable information we collect may include:
- Contact data: Name, mailing address, phone number, email address
- Login credentials: Username, password to access your account
- Payment data: Billing address, payment card information
- Order data: Order number, products purchased, date/time of purchase
- Communications: Feedback, questions, or other information you provide to us
We collect personally identifiable information when you:
- Create an account
- Place an order
- Subscribe to marketing communications
- Contact customer service
- Take a survey or provide feedback
Aggregate Information
Aggregate information is data that is collected about groups or categories of behaviors. We may collect aggregate data through the Sites such as:
- Number of website visitors
- Pages visited
- Most popular products
- Browsers and operating systems used
- Time spent on pages
- Conversion rates
This information does not identify specific individuals. We may collect aggregate data using cookies or other tracking technologies.
How We Use Information
We use the information collected through the Sites for a variety of business purposes including:
- Fulfilling orders – We use order data to process, fulfill and ship orders, as well as provide related customer service.
- Marketing – We may use contact data to send marketing communications regarding new products, sales, or other promotions. You can opt-out of marketing emails at any time.
- Improving user experience – We use aggregate data to understand how visitors interact with our Sites so we can provide better experiences.
- Fraud prevention – We may use contact data and order information to detect and prevent fraud.
- Legal compliance – We use information to comply with legal requirements like tax obligations or court orders.
- Protecting rights – We may use information to enforce our policies, terms and agreements, protect our rights, and pursue available remedies.
We only process personal information for the purposes stated in this policy. If information is used for other purposes, you will be notified and given the chance to consent.
How Information is Shared
We do not sell or rent your personally identifiable information to third parties. Information may be shared in the following circumstances:
Service Providers
We work with third party companies who help us operate and improve the Sites by providing services like payment processing, order fulfillment, email delivery, auditing, marketing, and data analysis. These service providers are only provided the information needed to perform their designated functions and are required to protect data privacy.
Business Transfers
If we are involved in a merger, acquisition, bankruptcy, reorganization, or sale of assets, customer information may be sold or transferred as part of the transaction. You will be notified of any such transaction and informed of your choices regarding information transfer.
Legal Obligations
We may share account or other personal information when we believe it is necessary to comply with law, regulation, subpoena, or court order. This includes sharing information with law enforcement agencies or involved third parties to:
- Protect the safety, rights, or property of Hada Labo or users
- Prevent imminent harm to someone’s health or safety
- Investigate fraud or violations of law, regulation, or our policies
Aggregate Information
Aggregate data without personally identifiable information may be shared with third parties like research organizations or publishers.
Data Security
Protecting customer data is an utmost priority at Hada Labo. We use robust physical and technological security measures like encryption, access controls, and data monitoring to safeguard data from unauthorized access or malicious activity.
However, no website or app can fully eliminate security risks. We cannot guarantee the absolute security of information against interception or malicious activity. Notify us immediately if you believe personal information has been compromised.
Data Retention
We retain personal information for as long as required to fulfill business purposes or comply with legal requirements. Typically information is deleted within 30 days after the end of the retention period unless deletion is not feasible.
Payment data is not retained after processing. Order history is retained for 7 years from time of purchase for accounting purposes. Marketing data like email lists are retained until you unsubscribe.
Cookies and Tracking Technologies
The Sites use cookies (small text files stored in your browser) and other technologies like pixel tags or web beacons to collect aggregate usage data. Cookies do not contain personally identifiable information.
You can control cookie settings through your browser, including blocking or deleting cookies. Disabling cookies may interfere with site functionality. Third party services placed on our Sites like social media buttons may use their own cookies – please refer to their privacy policies for how they use cookies.
International Data Transfers
Hada Labo is based in Japan. When you use our Sites, your data may be processed and stored globally including countries outside of your region. We have procedures in place to comply with applicable privacy laws regarding cross-border data transfers.
Children’s Privacy
The Sites are meant for adult users over the age of 18. We do not knowingly collect personal data from children under 18 without consent from a parent or guardian. If you believe a child’s data has been submitted to our Sites, please contact us so we can delete this information.
Your Data Rights
You have certain rights and controls over your personal information. These include:
- Accessing/Exporting/Deleting Data – You can access, export, or request deletion of personal data by contacting us.
- Restrict Processing – You can ask us to restrict the processing of your personal data.
- Marketing Opt-Out – You can opt-out of receiving promotional emails by clicking “unsubscribe” in any email.
- Withdrawing Consent – You can withdraw consent to process data for which you originally provided consent.
- Filing a Complaint – You have the right to lodge a complaint about how we handle your personal data with your local supervisory authority.
- Objecting to Processing – You can object to your personal data being processed under legitimate interest.
To make a request, please contact our privacy team with details of your request. We will comply with requests unless limited by legal obligations or overriding legitimate interests.
Policy Updates
We may occasionally make changes to this Privacy Policy as needed to reflect updates in data processing practices. You will be notified of substantial changes that require your consent.
Contact Information
If you have any questions about this Privacy Policy or use of your personal information, please contact our privacy team:
Privacy Officer
Hada Labo
45 Gordon Street
Glasgow, Schottland
Email: [email protected]
Effective as of January 1, 2023
