Contact

1. Data Controller

The Data Controller responsible for your personal data is:
PHILO Co.,Ltd.
1-2 Koshi, Asuka-mura, Takaichi-gun, Nara 634-0138, Japan

2. Personal Data We Collect

We may collect and process the following categories of personal data:

• Name (and phonetic spelling, where applicable)
• Address
• Telephone number
• Email address
• Purchase and transaction history
• Any other information you provide that can identify you directly or indirectly

We collect personal data when you:

• Purchase our products
• Contact us with inquiries
• Interact with our website or services

3. Legal Basis for Processing

We process your personal data only where we have a legal basis to do so under GDPR, including:

• Contractual necessity: to process and deliver your orders
• Consent: when you have provided clear consent (e.g., for marketing communications)
• Legal obligation: where processing is required by law
• Legitimate interests: for improving services, preventing fraud, and ensuring security

4. Purposes of Processing

We use your personal data for the following purposes:

• To confirm and fulfill orders
• To arrange shipping and delivery
• To respond to inquiries
• To issue invoices and process payments
• To inform you about our products, events, or services (where permitted)
• To conduct statistical or marketing analysis
• To comply with legal obligations

5. Sharing of Personal Data

We will not share your personal data with third parties except in the following cases:

• With your explicit consent
• With trusted service providers acting as data processors under contract, subject to appropriate safeguards
• Within our corporate group, for purposes consistent with this Policy
• Where required by law, regulation, or governmental request
• To protect vital interests of individuals (life, health, or safety)
• For public health purposes or child protection, where obtaining consent is not feasible

6. International Data Transfers

If your personal data is transferred outside the European Economic Area (EEA), we will ensure that appropriate safeguards are in place, such as EU Standard Contractual Clauses (SCCs), to protect your information.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law (e.g., tax and accounting obligations).

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. This includes the use of SSL (Secure Sockets Layer) encryption when transmitting sensitive information.

9. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of access – to obtain a copy of your personal data held by us
• Right to rectification – to correct inaccurate or incomplete data
• Right to erasure (“right to be forgotten”) – to request deletion of your data under certain conditions
• Right to restriction of processing – to limit how we use your data
• Right to data portability – to receive your data in a structured, commonly used format
• Right to object – to object to processing based on legitimate interests or direct marketing
• Right to withdraw consent – where processing is based on consent

To exercise these rights, please contact us at.

10. Use of Cookies

We may use cookies to enhance your browsing experience. Cookies do not directly identify individuals but may collect data such as IP address, device type, and browsing behavior. You can manage or disable cookies in your browser settings.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Updates will be published on this page, with the “Updated” date revised accordingly.