Privacy Policy

We collect as little as we need. We keep it only as long as we must. We do not sell it. Ever. This policy explains what information we collect, why we collect it, and what we do — and do not do — with it.

Last updated:
January 2025

1. Who This Policy Applies To

This policy applies to anyone who visits our website, places an order,
or contacts us directly. It is written for people, not for compliance
departments. If something is unclear, write to us.

Data controller: Ueno Skin KK, Tokyo, Japan
Contact: hello@ueno.com

2. What We Collect

2.1 Information You Give Us

When you place an order or contact us, we collect:

  • Your name

  • Your email address

  • Your delivery address

  • Your payment details (processed and held securely by our payment provider — we do not store card data)

  • The content of any message you send us

2.2 Information Collected Automatically

When you visit our website, we collect:

  • Your IP address

  • Browser type and device information

  • Pages visited and time spent on the site

  • Referring URL

This data is collected through cookies and similar technologies.
See Section 6 for details.

2.3 Information We Do Not Collect

We do not collect:

  • Sensitive personal data such as health information, unless you volunteer it in a message to us

  • Data from third-party social platforms unless you contact us through them

  • Any information beyond what is necessary for the purposes described below

3. Why We Collect It

We use your information only for the following purposes:

Purpose

Legal Basis

Processing and fulfilling your order

Performance of a contract

Communicating with you about your order

Performance of a contract

Responding to enquiries

Legitimate interest

Improving the website experience

Legitimate interest

Complying with legal obligations

Legal obligation

Sending order confirmation and dispatch notifications

Performance of a contract

Sending marketing emails (only if you have opted in)

Consent

We do not use your data for automated decision-making or profiling.

4. What We Do Not Do With Your Data

We do not sell your personal information. To any party. Under any circumstance.

We do not share your information with third parties except:

  • Delivery partners, who require your name and address to fulfil your order

  • Payment processors, who handle your transaction securely

  • Legal authorities, where we are required to by law

We do not share your information with advertisers, data brokers,
or marketing platforms.

5. How Long We Keep It

Data Type

Retention Period

Order and transaction records

7 years (legal and tax obligation)

Customer correspondence

2 years from last contact

Website analytics

13 months

Marketing preferences

Until you withdraw consent

When data is no longer needed, it is deleted or anonymised.

6. Cookies

We use a small number of cookies to make the website function
and to understand how it is used. We do not use advertising cookies
or cross-site tracking.

Essential cookies

Required for the website to function. Cannot be disabled.

Analytics cookies

Help us understand how visitors use the site — pages visited,
time spent, errors encountered. This data is aggregated and
not linked to identifiable individuals. You may opt out at any time
via the cookie settings on our website.

We do not use third-party advertising cookies. We do not participate
in retargeting programmes.

7. Your Rights

Depending on where you are located, you may have the right to:

  • Access the personal data we hold about you

  • Correct inaccurate or incomplete information

  • Delete your data, subject to our legal obligations

  • Restrict or object to how we process your data

  • Withdraw consent for marketing communications at any time

  • Data portability — receive a copy of your data in a structured format

To exercise any of these rights, write to us at hello@ueno.com.
We will respond within 30 days. We will not ask you to justify the request.

8. Data Security

We take reasonable technical and organisational measures to protect
your data from unauthorised access, loss, or disclosure.
Payment data is handled exclusively by our payment processor and
is never stored on our servers.

No method of transmission over the internet is completely secure.
We cannot guarantee absolute security, but we will notify you
promptly in the event of a breach that affects your personal data.

9. Third-Party Links

Our website may contain links to other sites. This policy does not
apply to those sites. We are not responsible for their privacy practices
and recommend you read their policies separately.

10. Children

Our website and products are not directed at children under the age of 16.
We do not knowingly collect data from children. If you believe a child
has provided us with personal information, please contact us and
we will delete it promptly.

11. Changes to This Policy

We may update this policy when our practices change or when required
by law. Material changes will be communicated by email or prominently
on the website. The date at the top of this page reflects the most
recent update.

12. Contact & Complaints

For any question about this policy or how we handle your data:
hello@ueno.com

If you are located in the European Economic Area and believe we have
not handled your data appropriately, you have the right to lodge a
complaint with your local data protection authority.

We wrote this to be read. If something is unclear, ask us.

Create a free website with Framer, the website builder loved by startups, designers and agencies.