Legal
Privacy policy.
How we handle personal data on this website and in our stores — written to be read.
Effective date: September 2026 · Applies to: kiramekicommerce.com and the stores operated by KIRAMEKI COMMERCE LLC
The short version
This website collects nothing but the emails you send us. Our stores collect what an order needs and share it only with the platform, payment and delivery partners that fulfil it. You can ask for your data, correct it or have it deleted by emailing us.
Who we are
The data controller is KIRAMEKI COMMERCE LLC, 30 N Gould St Ste R, Sheridan, WY 82801, USA, info@kiramekicommerce.com. This policy covers this corporate website and, unless a store publishes its own policy, the stores operated by the company.
What we collect
This website sets no cookies of its own, runs no analytics and has no forms; the only personal data it receives is what you send us by email.
Our stores collect what an order requires: name, delivery and billing address, email, phone number for the carrier, the items ordered, and payment confirmation from the payment provider (we never see full card numbers). Stores may also use cookies and analytics as described in their own cookie notice.
Why, and on what legal basis
To fulfil your order and deliver it (performance of a contract); to answer your messages (legitimate interest / contract); to comply with tax, accounting and consumer-protection law (legal obligation); and, only with your consent, to send marketing emails you can opt out of at any time.
Who processes data for us
Store platform and hosting (Shopify, Cloudflare), payment providers (for example Shopify Payments, Stripe, PayPal), our fulfilment and shipping partners and carriers (who receive name, address and phone number to deliver the parcel), email providers, and our accountants. Each acts under contract and only for these purposes.
International transfers
We are a U.S. company serving customers in the EU, the UK and North America, so data is transferred internationally. For EU and UK data we rely on the European Commission's standard contractual clauses (and the UK addendum) with our processors, and on providers' certifications under the EU–U.S. Data Privacy Framework where available. Where Article 27 GDPR (and its UK equivalent) requires it, a representative established in the EU or the UK is appointed for our stores; the representative's contact details are published in each store's privacy notice.
How long we keep data
Order and invoice data for as long as tax and accounting law requires (generally 7 years). Correspondence for up to 3 years after the last exchange. Marketing consent until you withdraw it.
Your rights
Access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time. Write to info@kiramekicommerce.com; we answer within 30 days. EU residents may complain to their national data protection authority; UK residents to the ICO.
Children
Our stores are for adults. We do not knowingly collect data from anyone under 16.
Security
Encrypted connections (HTTPS) everywhere, access to order data limited to the people who need it, and payment data handled entirely by PCI-DSS-certified payment providers.
Changes
We update this policy when our processing changes and publish the effective date at the top.