プライバシーポリシー

This Privacy Policy describes how Benricart ("we," "us," "our") collects, uses, stores, and protects your personal information when you use the Benricart marketplace platform ("Platform").

This Policy complies with Japan's 個人情報の保護に関する法律 (Act on the Protection of Personal Information — APPI/PIPA), effective as amended. By using the Platform, you acknowledge that you have read and understood this Policy.

2.1 Information You Provide Directly

2.2 Information Collected Automatically

2.3 Information from Third Parties

We do not purchase personal data from data brokers.

We use your personal information only for the purposes stated below:

We do not use your personal information for automated decision-making that produces legal effects without human review.

We do not sell your personal information. We share it only as described below.

4.1 Between Buyers and Sellers

When you place an order: your shipping name and delivery address are shared with the seller to fulfill your order; your first name and order details are visible in the seller's dashboard; your email address is not shared with the seller unless you contact them via Platform messaging. For reviews, your display name (first name + last initial) is shown.

4.2 Third-Party Service Providers

We work with carefully selected service providers to operate the Platform. All providers are bound by data processing agreements and are contractually prohibited from using your data for their own purposes:

All service providers are located in the United States and operate under appropriate data transfer safeguards. You may request the full list of named subprocessors by emailing privacy@benricart.jp.

4.3 Cross-Border Data Transfers

The service providers above are based in the United States. Your personal data is transferred to and processed in the United States under appropriate safeguards consistent with APPI requirements. By using the Platform, you consent to this transfer.

4.4 Legal Requirements

We may disclose your personal information if required by: Japanese law, court order, or government authority; to protect the rights, property, or safety of Benricart, our users, or the public; in connection with fraud prevention or law enforcement cooperation.

4.5 Business Transfers

If Benricart is acquired, merged, or its assets transferred, your personal information may be transferred as part of that transaction. You will be notified in advance if this occurs.

5.1 Cookies We Use

We do not use advertising cookies or tracking pixels. We do not participate in cross-site behavioral advertising.

5.2 Cookie Consent

Essential cookies (authentication) cannot be disabled — they are required for the Platform to function. Non-essential cookies (analytics, language preference) require your consent. A cookie consent banner is shown on your first visit.

We retain your personal information for as long as necessary for the purposes described in this Policy:

When the retention period expires, we securely delete or anonymize your data.

In Transit

All data transmitted between your device and our servers is encrypted using TLS 1.3.

At Rest

Database access is restricted to authenticated backend service accounts only. Seller verification documents are stored in a private Cloudflare R2 storage bucket with no public access. Administrative access to verification documents uses signed URLs that expire after 15 minutes.

Access Controls

Platform access is controlled by Clerk authentication. Admin panel access requires a verified admin role. Internal staff access to personal data is limited to what is necessary for their role. All admin actions on personal data are logged.

Incident Response

In the event of a breach affecting 1,000 or more individuals or involving sensitive data, we will notify the Personal Information Protection Commission (個人情報保護委員会) within the legally required timeframe and notify affected users promptly.

Despite these measures, no system is completely secure. We cannot guarantee absolute security of your data.

Under Japan's Act on the Protection of Personal Information, you have the following rights:

8.1 Right to Disclosure (開示請求)

You may request a copy of the personal information we hold about you.

8.2 Right to Correction (訂正請求)

You may request correction of inaccurate or incomplete personal information.

8.3 Right to Deletion (削除請求)

You may request deletion of your personal information. Note: we may be required to retain certain data for legal obligations (e.g., tax records for 7 years) and cannot delete this data on request.

8.4 Right to Opt Out of Use (利用停止請求)

You may request that we stop using your personal information for specific purposes (e.g., marketing), subject to legal and contractual obligations.

8.5 Right to Opt Out of Third-Party Provision (第三者提供停止請求)

You may request that we stop sharing your personal information with third parties, except where required by law or necessary to fulfill a contract.

8.6 How to Exercise Your Rights

Submit your request by email to: privacy@benricart.jp

Include: your full name; email address registered with your account; description of the right you wish to exercise; sufficient information to verify your identity.

We will respond within 2 weeks as required by APPI. Requests are processed free of charge unless manifestly unfounded or excessive.

The Platform is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If you believe a minor has provided us with personal information, please contact privacy@benricart.jp and we will delete it.

We will only send you marketing emails if you have opted in. You may withdraw consent at any time by: clicking the unsubscribe link in any marketing email; updating notification preferences in your account settings; emailing privacy@benricart.jp.

Withdrawing consent does not affect transactional emails (order confirmations, dispute notifications, payout alerts) — these are necessary for your use of the Platform and cannot be disabled while your account is active.

The Platform may contain links to external websites. This Privacy Policy does not apply to those sites. We encourage you to read the privacy policies of any external sites you visit.

We may update this Privacy Policy to reflect changes in our practices or legal requirements. For material changes, we will notify you by email and/or Platform notification at least 14 days before the changes take effect. Continued use of the Platform after the effective date constitutes acceptance of the updated Policy.

If you are not satisfied with our response, you may file a complaint with:

© [YEAR] [COMPANY NAME]. All rights reserved. · Benricart — Connecting Asian Communities in Japan