Privacy policy
Nippon Kawaii takes your privacy seriously. We only process data that we need for (the improvement of) our services and handle all information we collect about you and your use of our services with care. We never share your data with third parties for commercial purposes.
About our privacy policy
This privacy policy applies to the use of the website and the services offered through it by Nippon Kawaii. The effective date of this policy is 16/05/2020; the publication of a new version renders all previous versions invalid.
This privacy policy describes what data we collect about you, how it is used, and with whom and under what conditions it may be shared with third parties. We also explain how we store your data, how we protect it against misuse, and what rights you have regarding the personal data you have provided to us.
If you have questions about our privacy policy, please contact our privacy officer. You will find the contact details at the end of this policy.
About data processing
Below you can read how we process your data, where we store it, what security techniques we use, and who has access to the data.
Webshop software
Our webshop is built using Shopify software. Personal data you provide to us for our services is shared with this party. Shopify has access to your data to provide us with (technical) support; they will never use your data for any other purpose. Under our agreement with them, Shopify is required to take appropriate security measures. Shopify uses cookies to collect technical information about your use of the software; no personal data is collected and/or stored.
Web hosting
We use Shopify for web hosting and email services. Shopify processes personal data on our behalf and does not use your data for its own purposes. This party may collect metadata about the use of services; this does not constitute personal data. Shopify has taken appropriate technical and organisational measures to prevent loss and unauthorised use of your personal data. Shopify is bound to confidentiality under our agreement.
We use Gmail for our regular business email communications. This party has taken appropriate technical and organisational measures to prevent misuse, loss, and corruption of your data and ours. Gmail does not have access to our mailbox and we treat all email communications confidentially.
Payment processors
We use the Mollie platform to process (some of) the payments in our webshop. Mollie processes your name, address, and place of residence, as well as your payment details such as your bank account or credit card number. Mollie has taken appropriate technical and organisational measures to protect your personal data. Mollie reserves the right to use your data to further improve its services and to share (anonymised) data with third parties for that purpose. Mollie does not retain your data longer than permitted under applicable statutory retention periods.
We use the Shopify Payments platform to process (some of) the payments in our webshop. Shopify Payments processes your name, address, and place of residence, as well as your payment details such as your bank account or credit card number. Shopify Payments has taken appropriate technical and organisational measures to protect your personal data. Shopify Payments reserves the right to use your data to further improve its services and to share (anonymised) data with third parties for that purpose. Shopify Payments does not retain your data longer than permitted under applicable statutory retention periods.
Reviews
We collect reviews via the WebwinkelKeur platform. If you leave a review through WebwinkelKeur, you are required to provide a name and email address. WebwinkelKeur shares this data with us so that we can link the review to your order. WebwinkelKeur also publishes your name on its own website. In some cases, WebwinkelKeur may contact you to ask for clarification on your review. If we invite you to leave a review, we share your name and email address with WebwinkelKeur solely for the purpose of sending you that invitation. WebwinkelKeur has taken appropriate technical and organisational measures to protect your personal data.
We collect reviews via the Trustpilot platform. If you leave a review through Trustpilot, you are required to provide a name and email address. Trustpilot shares this data with us so that we can link the review to your order. Trustpilot also publishes your name on its own website. If we invite you to leave a review, we share your name and email address with Trustpilot solely for the purpose of sending you that invitation. Trustpilot has taken appropriate technical and organisational measures to protect your personal data. For more information, please refer to Trustpilot's privacy statement.
Shipping and logistics
When you place an order with us, it is our responsibility to have your package delivered to you. We use PostNL for deliveries. To do so, we must share your name, address, and place of residence with PostNL. PostNL uses this data solely for the purpose of fulfilling the agreement. If PostNL engages subcontractors, PostNL will also provide your data to those parties.
Invoicing and accounting
We use the services of Acumulus for our administration and accounting. We share your name, address, place of residence, and order details with Acumulus. This data is used for the administration of sales invoices. Your personal data is transmitted and stored securely. Acumulus is bound to confidentiality and will treat your data in strictest confidence. Acumulus does not use your personal data for purposes other than those described above.
External sales channels
We sell (some of) our products via the Bol.com platform. If you place an order through this platform, Bol.com shares your order and personal data with us. We use this data to fulfil your order. We treat your data confidentially and have taken appropriate technical and organisational measures to protect it against loss and unauthorised use.
Purpose of data processing
General purpose of processing
We use your data solely for the provision of our services. This means the purpose of processing is always directly related to the assignment you place with us. We do not use your data for (targeted) marketing. If you share data with us and we wish to contact you at a later stage for a purpose other than at your request, we will ask for your explicit consent. Your data is not shared with third parties other than to fulfil accounting and other administrative obligations. All such third parties are bound to confidentiality under their agreement with us, or by oath or statutory obligation.
Automatically collected data
Data automatically collected by our website is processed with the aim of improving our services. This data (such as your IP address, web browser, and operating system) does not constitute personal data.
Cooperation with fiscal and criminal investigations
In certain cases, Nippon Kawaii may be legally required to share your data in connection with fiscal or criminal investigations conducted by public authorities. In such cases we are compelled to share your data, but we will resist this to the extent permitted by law.
Retention periods
We retain your data for as long as you are a client of ours. This means we keep your customer profile until you indicate that you no longer wish to use our services. If you notify us of this, we will also treat it as a request to be forgotten. Under applicable administrative obligations, we are required to retain invoices containing your (personal) data; we will retain this data for the duration of the applicable statutory retention period. However, staff will no longer have access to your client profile and documents created in connection with your order.
Your rights
Under applicable Dutch and European legislation, you as a data subject have certain rights regarding personal data processed by or on behalf of us. We explain below what those rights are and how you can exercise them. As a rule, to prevent misuse, we send copies of your data only to the email address we already have on file for you. If you wish to receive the data at a different email address or by post, we will ask you to verify your identity. We keep a record of completed requests; in the case of a deletion request, we record anonymised data. You will receive all copies of your data in the machine-readable format used within our systems. You always have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we are using your personal data improperly.
Right of access
You always have the right to inspect the data we process that relates to or can be traced back to you. You may submit such a request to our privacy officer. You will receive a response within 30 days. If your request is granted, we will send a copy of all your data to the email address we have on file, along with an overview of the processors who hold that data and the category under which it is stored.
Right to rectification
You always have the right to have data we process that relates to or can be traced back to you corrected. You may submit such a request to our privacy officer. You will receive a response within 30 days. If your request is granted, we will send you a confirmation of the correction to the email address we have on file.
Right to restriction of processing
You always have the right to restrict the processing of data we hold that relates to or can be traced back to you. You may submit such a request to our privacy officer. You will receive a response within 30 days. If your request is granted, we will send you a confirmation that the data will no longer be processed until you lift the restriction.
Right to data portability
You always have the right to have data we process that relates to or can be traced back to you transferred to another party. You may submit such a request to our privacy officer. You will receive a response within 30 days. If your request is granted, we will send you copies of all data we have processed about you, or that has been processed by other processors or third parties on our behalf. In all likelihood, we will in such a case no longer be able to continue providing our services, as the secure linking of data files can no longer be guaranteed.
Right to object and other rights
In certain cases you have the right to object to the processing of your personal data by or on behalf of Nippon Kawaii. If you object, we will immediately suspend data processing pending the handling of your objection. If your objection is well-founded, we will make copies of the data we process available to you and permanently cease processing. You also have the right not to be subject to automated individual decision-making or profiling. We do not process your data in such a way that this right applies. If you believe it does, please contact our privacy officer.
Cookies
Our website places cookies from the American company Google as part of the Analytics service. We use this service to track and report on how visitors use the website. This processor may be required under applicable laws and regulations to provide access to this data. We have not permitted Google to use the analytics information obtained for other Google services.
Third-party cookies
Where third-party software solutions make use of cookies, this is stated in this privacy statement.
Changes to the privacy policy
We reserve the right to amend our privacy policy at any time. However, this page will always contain the most recent version. If the new privacy policy affects the way in which we process data we have already collected about you, we will notify you by email.
Contact details
Nippon Kawaii
Boerenkamplaan 102
5712 AH Someren-Eind, The Netherlands
Email: info@nipponkawaii.nl
Privacy officer: Jolanda van Rooij
Effective from 16 May 2020 · Last updated: May 2026
