This Privacy Policy is issued in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation — GDPR), the French Data Protection Act (Loi Informatique et Libertés No. 78-17 of 6 January 1978, as amended), and the UK General Data Protection Regulation (UK GDPR) as retained in UK law by the Data Protection Act 2018.
This Policy describes how your personal data is collected, used, and shared when you visit or make a purchase from
japanese-swords.co.uk (the “Site”).
Personal Data We Collect
We collect two categories of personal data when you visit or interact with our Site:
Device & Browsing Data
When you visit our Site, we automatically collect certain technical data about your device and browsing behaviour, including:
- Browser type and version
- IP address and approximate geolocation
- Time zone settings
- Pages and products viewed
- Referring websites or search terms that directed you to our Site
- Interaction data (clicks, session duration, navigation patterns)
This data is collected automatically through cookies and similar tracking technologies. Please refer to our Cookie Policy for full details.
Order & Account Data
When you place an order or create an account on our Site, we collect:
- Full name
- Billing and delivery address
- Email address
- Telephone number
- Payment information (processed securely via our certified payment partners — we do not store full card details)
- Order history and transaction records
How We Use Your Personal Data
We process your personal data on the following legal bases and for the following purposes:
Performance of a Contract (Article 6(1)(b) GDPR)
We use your Order & Account Data to:
- Process and fulfil your orders
- Arrange shipment and delivery of your purchases
- Issue invoices, order confirmations, and receipts
- Manage returns, exchanges, and customer service requests
Legitimate Interests (Article 6(1)(f) GDPR)
We use your Device & Browsing Data to:
- Analyse and improve the performance of our Site
- Detect and prevent fraudulent activity
- Evaluate the effectiveness of our marketing and advertising campaigns
Consent (Article 6(1)(a) GDPR)
Where you have given your explicit consent, we may use your data to:
- Send you marketing communications about our products, offers, and news
- Serve you personalised advertising across third-party platforms
You may withdraw your consent at any time by contacting us at [email protected] or by using the unsubscribe link included in all marketing emails.
Sharing of Your Personal Data
We do not sell, rent, or trade your personal data. We may share it with carefully selected third parties solely for the purposes described in this Policy:
Service Providers & Logistics Partners
Your name, delivery address, and order details may be shared with our fulfilment partners, suppliers, and carrier services strictly for the purpose of processing and delivering your order.
Analytics Providers
We use Google Analytics to better understand how visitors interact with our Site. Google may process your data in accordance with its own privacy policy, available at: https://www.google.com/policies/privacy/. You may opt out of Google Analytics tracking at any time via: https://tools.google.com/dlpage/gaoptout
Advertising Partners
Where you have consented to targeted advertising, your data may be shared with platforms including Meta (Facebook/Instagram) and Google Ads for the purpose of delivering personalised marketing communications.
You may opt out of targeted advertising at any time via the following links:
- Meta: https://www.facebook.com/settings/?tab=ads
- Google: https://www.google.com/settings/ads/anonymous
- Digital Advertising Alliance: https://optout.aboutads.info/
Legal & Regulatory Obligations
We may disclose your personal data where required to do so by applicable law, court order, or regulatory authority, or where necessary to protect the rights, property, or safety of SAS SEO MASTA, our customers, or third parties.
International Data Transfers
As some of our third-party service providers operate outside the European Economic Area (EEA) and the United Kingdom, your personal data may be transferred to countries that do not provide the same level of data protection as France, the EU, or the UK.
Where such transfers occur, we ensure that appropriate safeguards are in place in accordance with applicable law, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- The UK International Data Transfer Agreement (IDTA), where applicable
For further information regarding the safeguards applied to international transfers of your data, please contact us at
[email protected].
Data Retention
We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law:
- Order & Account Data is retained for the duration of our contractual relationship with you, and for a period of up to 10 years thereafter in accordance with French commercial law obligations.
- Device & Browsing Data collected via cookies is retained in accordance with the timeframes set out in our Cookie Policy.
- Marketing Data is retained until you withdraw your consent or request its deletion.
Your Rights
Depending on your country of residence, you may have the following rights in relation to your personal data:
| Right | Description |
| Right of Access | Obtain confirmation of whether we process your data, and request a copy |
| Right to Rectification | Request correction of inaccurate or incomplete data |
| Right to Erasure | Request deletion of your personal data (subject to legal retention obligations) |
| Right to Restriction | Request that we limit the processing of your data in certain circumstances |
| Right to Portability | Receive your data in a structured, machine-readable format |
| Right to Object | Object to processing based on legitimate interests or for direct marketing purposes |
| Right to Withdraw Consent | Withdraw consent at any time where processing is based on consent |
EU residents benefit from the full rights provided under the GDPR. UK residents benefit from equivalent rights under the UK GDPR and the Data Protection Act 2018. French residents additionally benefit from the right to issue post-mortem instructions regarding their personal data, in accordance with the French Data Protection Act.
To exercise any of the above rights, please submit a written request (accompanied by a valid proof of identity) to:
[email protected]
We will respond to all legitimate requests within one month of receipt, in accordance with applicable law.
Right to Lodge a Complaint
If you believe that your personal data has been processed in a manner inconsistent with applicable data protection law, you have the right to lodge a complaint with the relevant supervisory authority:
- France & EU: Commission Nationale de l’Informatique et des Libertés (CNIL) — www.cnil.fr
- United Kingdom: Information Commissioner’s Office (ICO) — www.ico.org.uk
We would, however, welcome the opportunity to address your concerns directly before you approach a supervisory authority. Please do not hesitate to contact us in the first instance at [email protected].
Cookies
We use cookies and similar tracking technologies to collect Device & Browsing Data as described in this Policy. For full details on the types of cookies we use, their purpose, and how to manage your preferences, please refer to our Cookie Policy.
Changes to This Policy
We reserve the right to update this Privacy Policy at any time to reflect changes in our practices, legal obligations, or for operational reasons. Any material changes will be communicated to you via email or through a prominent notice on our Site. We encourage you to review this Policy periodically.
Contact
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact us at via our contact page here.
This Privacy Policy applies to all users of japanese-swords.co.uk, regardless of their country of residence. Where local law provides for additional rights or obligations beyond those set out in this Policy, such provisions shall apply to the extent required by law.