Privacy Policy of the online shop service
provided by UNITED ARROWS LTD.

This privacy policy (“Privacy Policy”) describes the processing of personal data via the online shop service (the “Service”) provided by UNITED ARROWS LTD. (“we,” “us,” or “our”). We comply with all data protection laws and regulations applicable to the processing of personal data in the provision of the Service, including, but not limited to, the General Data Protection Regulation (EU) 2016/679 (the “GDPR”). We take the utmost care in protecting the personal data and privacy of users of the Service (“you”) and process personal data in accordance with this Privacy Policy.

This Privacy Policy applies to all personal data collected in connection with the Service, regardless of jurisdiction.

1.Types of Personal Data We Process

When you register for and use the Service, we collect and process the following personal data in the context of the Service.

Information You Provide

• Account Information
  When you register an account in the Service, you will need to provide us with your name, your user name, address, phone number, email address, gender, age, the date of birth and payment verification information.

Information We Collect Automatically

• Device information
  When you use the Service, we may collect information about your device, such as the product model, operating system, device preferences, internet service provider, IP address, and other online identifiers through communications.
• Information regarding use of the Service
  We collect information about your use of the Service, including the dates and times of your visits, the links you click, the pages you view, and other information relating to your use of the Service.

Information from Third Parties

You are required to provide us with certain personal data when you sign in the Service. Personal data that is mandatory is indicated in the relevant forms, we are not able to provide the Service to you if such data is not provided.

2.Purposes of Processing

We may use personal data for one or more of the purposes indicated below. Please note that the legal basis for processing personal data may vary depending on the jurisdiction. When a basis specified below does not apply in your jurisdiction, we will process your personal data based on an alternative basis permitted under the applicable laws and regulations, such as obtaining your consent.

Purpose/Activity	Lawful Basis
To authenticate and confirm your identity	Necessary for the performance of a contract or to take steps at the request of the data subject prior to entering into a contract
To provide products or services, to process your payment information, arrange for shipping, and provide you with invoices and/or order confirmations, communicate with you	Necessary for the performance of a contract or to take steps at the request of the data subject prior to entering into a contract
To provide you with information or advertising relating to our products or services.	Necessary for our legitimate interests (to conduct our marketing activities) Your consent (where relevant)
To communicate with you, provide you with updates and other information relating to our Services, provide information that you request, respond to comments and questions, and otherwise provide customer support	Necessary for the performance of a contract or to take steps at the request of the data subject prior to entering into a contract
To provide, maintain, and improve our services, including troubleshooting, analyzing data, testing, researching, and conducting statistical analysis and surveys	Necessary for the performance of a contract or to take steps at the request of the data subject prior to entering into a contract Necessary for our legitimate interests (to develop and improve our services)
To ensure the safety and security of our services, business, and users	Necessary for our legitimate interests (to conduct our business)
To respond to your inquiries, notify you about changes to our policies and terms, notify you about changes or improvements to our services, and notify you about other services we offer.	Necessary for the performance of a contract or to take steps at the request of the data subject prior to entering into a contract Necessary for our legitimate interests (to conduct our marketing activities)
To comply with applicable laws and regulations	Necessary for compliance with a legal obligation

3.Automatic decision-making

We do not make decisions that may affect you legally or in a similarly significant manner based solely on automated processing.

Our processor Shopify uses limited automated decision-making to prevent fraud that does not have a legal or otherwise significant effect on you.

Services that include elements of automated decision-making include:

• Temporary blacklist of IP addresses associated with repeated failed transactions. This blacklist persists for a small number of hours.
• Temporary blacklist of credit cards associated with blacklisted IP addresses. This blacklist persists for a small number of days.

4.Privacy of Children

The Services is intended for a general audience. If a minor is to use the Service and provides personal data, the minor must do so with the consent of his/her guardian. If you are a minor, you represent and warrant that you are using the Service with the consent of your guardian.

5.Processing Security Measures

We take efforts to keep your personal data in accurate and up-to-date condition, and take the necessary and appropriate security control measures in order to protect your personal data against unauthorized access, tampering, leakage, loss, and damage.

6.Provision to Third Parties

We may provide your personal data to the following persons and entities in order to achieve the purposes of processing:

• Shopify
  We use Shopify to power the Service. You can read more about how Shopify uses your personal data here.
• Service Providers
  Our service providers provide service on our behalf, such as tech vendors who support the Service and the other business systems, operational companies such as delivery couriers, and payment service providers who help us process your payment.
• Third parties to which we disclose your personal data in order to comply with applicable laws and regulations; handle legal processes and litigation; respond to requests from public authorities; address national security, law enforcement, and other issues of public concern; protect our rights; seek available remedies; enforce our Terms of Use; investigate fraud; protect our business or users, etc.

When we provide your personal data to third parties, we put appropriate measures in place in accordance with applicable laws and regulations.

7.International Transfer

We may transfer your personal data to countries other than your country, including Japan and Singapore which may have a lower level of data protection than your country. When providing personal data to third parties outside your country, we take the necessary measures therefor, such as obtaining consent and concluding data transfer agreements, etc., in accordance with applicable laws and regulations.

In the event that the GDPR applies to the processing of your personal data, we will protect your personal data based on an adequacy decision regarding the transfer of your personal data to Japan, Singapore and other countries where an adequacy decision has been given, or by entering into Standard Contractual Clauses (Article 46(2) of the GDPR) regarding the transfer of your personal data outside the European Economic Area. If you would like to review the Standard Contractual Clauses, please visit here.

8.Retention Period

We retain your personal data until the purpose of processing thereof has been achieved. When the purpose of processing has been achieved or if the Service is discontinued, we shall delete the relevant personal data without delay. However, we will retain your personal data beyond such period where we are required to do so by applicable laws and regulations.

9.Your Rights

Under certain circumstances, you may have the following rights and other rights granted under data protection laws in relation to your personal data.

• Right of Access
  Subject to certain exceptions, you may have the right to obtain a confirmation as to whether or not we process your personal data, and if we do, you have the right to request access to your data.
• Right of Rectification
  If the personal data that we process is incomplete or incorrect, you may have the right to request its completion or correction at any time.
• Right to Deletion
  Subject to certain exceptions, if you consider that we should stop processing some or all of your personal data, you may have the right to request its deletion. However, there may be legitimate reasons why an immediate deletion may not be possible (such as where retention is required to meet legal or regulatory obligations).
• Right to Restrict Processing
  You may have the right to request that we restrict the processing of your personal data.
• Right to Data Portability
  Where the processing of your personal data takes place on the basis of your consent or a contract, and is carried out by automated means, you may have the right to request that we provide your personal data to you in a machine-readable format.
• Right to Withdraw your Consent
  If your personal data is processed on the basis of your consent, you may have the right to withdraw your consent at any time. The withdrawal of your consent does not affect the lawfulness of processing of your personal data based on your consent before its withdrawal.
• Right to Complain to a Supervisory Authority
  You may have the right to lodge a complaint with a supervisory authority, in particular in the jurisdiction where you have a habitual residence or place of work or where the alleged infringement of the data protection law took place.

10.Cookies

We use cookies and other similar mechanisms (collectively, “cookies”) to collect certain data about you while you are browsing websites in order to distinguish you as a user for the duration of your visit and when you return to our websites. For further information regarding cookies, please see our Cookie Policy.

11.Behavioural Advertising

As described above, we use your personal data to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For example:

• We use Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your personal data here. You can also opt-out of Google Analytics here.
• We share information about your use of the Site, your purchases, and your interaction with our ads on other websites with our advertising partners. We collect and share some of this information directly with our advertising partners, and in some cases through the use of cookies or other similar technologies (which you may consent to, depending on your location).
• We use Shopify Audiences to help us show ads on other websites with our advertising partners to buyers who made purchases with other Shopify merchants and who may also be interested in what we have to offer. We also share information about your use of the Site, your purchases, and the email address associated with your purchases with Shopify Audiences, through which other Shopify merchants may make offers you may be interested in.

For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page here.

You can opt out of targeted advertising by:

• Google Chrome users:
• Microsoft Edge users:
• Mozilla Firefox users:
• Safari users:

Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal here.

12.Changes

We will review our processing of personal data as appropriate and may revise this Privacy Policy. If we make any revisions, we will inform you by displaying them on our website or by other appropriate means, or notify you directly.

13.Contact Information

• Data Controller
  UNITED ARROWS LTD. is responsible for your personal data as a data controller. If you have any question or would like to uphold your rights, please contact us at: this form.

Cookie Policy Last Updated and Effective: September 1, 2024