Privacy policy
Privacy Policy
Last updated: April 23, 2026
Kaakun Discovery | Official Store ("we," "us," or "our") operates this store and website, including all related information, content, features, tools, products, and services (the "Services"), in order to provide you with a curated shopping experience. The Services are powered by Shopify.
This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase (including digital products) using the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read and understood this Privacy Policy.
1. Personal Information We Collect
"Personal information" refers to information that identifies or can reasonably be linked to you. It does not include anonymized or de-identified data. Depending on how you interact with the Services, we may collect the following categories of personal information:
• Contact details: name, billing and shipping address, phone number, and email address.
• Financial information: payment card details, transaction details, and payment confirmation.
• Account information: username, password, security questions, and preferences.
• Transaction information: items you view, add to cart or wishlist, purchase, or cancel, including both physical merchandise and digital photo downloads.
• Digital product data: download history, download timestamps, device used for download, and download count, collected to manage digital licenses and prevent unauthorized distribution.
• Communications: information you include when contacting customer support.
• Device and usage information: IP address, browser type, device identifiers, and how you interact with the Services.
2. Sources of Personal Information
We may collect personal information from the following sources:
• Directly from you, when you create an account, make a purchase, or contact us.
• Automatically through the Services, via cookies and similar technologies when you visit our website.
• From our service providers, including Shopify and Gelato, who collect or process your personal information on our behalf.
• From our business partners or other third parties.
3. Cookies and Similar Technologies
We use cookies and similar tracking technologies through Shopify's platform to operate our store. These include:
• Strictly necessary cookies: required for the store to function (e.g., shopping cart, login session).
• Functional cookies: to remember your preferences and settings.
• Performance/analytics cookies: to understand how visitors use our Services and improve them.
We do not use third-party advertising or analytics platforms (such as Google Analytics) on this store. You may control cookie settings through your browser, but disabling certain cookies may affect the functionality of the Services.
4. How We Use Your Personal Information
We use your personal information for the following purposes:
Providing the Services
To process orders (both physical merchandise and digital photo downloads), fulfill purchases, manage your account, arrange shipping for physical goods, manage digital download access, and provide customer support.
Digital Product Management
For digital photo purchases, we record download activity (including download count, timestamps, and device information) to enforce personal-use licensing terms and prevent unauthorized redistribution. Digital photos sold through the Services are licensed for personal use only and may not be used for commercial purposes.
Marketing and Promotional Communications
To send you marketing emails or other promotional communications about our products and store. You may opt out at any time using the unsubscribe link in any marketing email. If you opt out, we may still send you transactional emails related to your orders and account.
Security and Fraud Prevention
To authenticate your account, secure payment processing, and detect, investigate, or take action against fraudulent or unauthorized activity, including unauthorized redistribution of digital products.
Legal Compliance
To comply with applicable law, respond to valid legal process, and enforce our Terms of Service.
5. How We Disclose Personal Information
We may disclose your personal information to third parties in the following circumstances:
• Shopify: as our e-commerce platform provider, Shopify processes your data to operate the Services. See the Shopify Consumer Privacy Policy for more details.
• Gelato: as our print-on-demand and fulfillment partner, Gelato receives the personal information necessary (such as name and shipping address) to produce and ship physical merchandise. Gelato operates production facilities globally, which means your data may be transferred to and processed in countries outside your country of residence.
• Other service providers: vendors who perform services on our behalf, such as payment processing, cloud storage, and IT management.
• Business and marketing partners: to provide marketing services and advertising to you, subject to their own privacy policies.
• With your consent or at your direction.
• In connection with a business transaction such as a merger or acquisition.
• To comply with legal obligations, respond to lawful requests from authorities, or enforce our policies and protect our rights.
6. International Transfers of Personal Information
We are based in Japan, and our Services are offered globally. Your personal information may be transferred to, stored, and processed in countries other than where you reside, including Japan, the United States, and countries where Gelato operates its production facilities.
If we transfer your personal information out of the European Economic Area (EEA) or the United Kingdom (UK), we will rely on recognized transfer mechanisms such as the European Commission's Standard Contractual Clauses or equivalent contracts issued by the relevant UK authority, unless the destination country has been determined to provide an adequate level of protection.
7. Legal Basis for Processing (EEA and UK Users)
If you are located in the EEA or the UK, we process your personal information on the following legal bases:
• Performance of a contract: processing necessary to fulfill your order, manage your account, and deliver the Services you have requested (including digital downloads and physical merchandise).
• Legitimate interests: processing for fraud prevention, security, improving the Services, and managing digital product licenses, where these interests are not overridden by your rights.
• Legal obligation: processing necessary to comply with applicable law.
• Consent: where we rely on your consent (e.g., for marketing communications), you may withdraw your consent at any time by contacting us or using the unsubscribe link in our emails.
8. Additional Rights for California Residents (CCPA/CPRA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
• Right to Know: the categories and specific pieces of personal information we have collected about you, and how it is used and disclosed.
• Right to Delete: to request deletion of your personal information, subject to certain exceptions.
• Right to Correct: to request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing: we do not sell your personal information for monetary consideration. However, sharing personal information with our business and marketing partners for cross-context behavioral advertising may constitute "sharing" under California law. You may opt out of this by contacting us at the details below.
• Right to Limit Use of Sensitive Personal Information: we do not use sensitive personal information beyond what is necessary to provide the Services.
• Right to Non-Discrimination: we will not discriminate against you for exercising any of your rights.
To exercise these rights, please contact us using the details in Section 12.
9. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable law. As a general guide:
• Account information: retained for the duration of your account, plus a reasonable period after account closure.
• Order and transaction data (including digital download records): retained for a minimum of 7 years to comply with tax and accounting obligations.
• Marketing preferences: retained until you opt out, after which we retain a record of your opt-out.
When personal information is no longer required, we will delete or anonymize it.
10. Children's Privacy
The Services are not intended for use by individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us using the details below and we will delete it. We do not knowingly sell or share personal information of individuals under 16 years of age.
11. Your Rights and Choices
Depending on where you live, you may have some or all of the following rights regarding your personal information:
• Right to Access / Know: request access to the personal information we hold about you.
• Right to Delete: request that we delete your personal information.
• Right to Correct: request correction of inaccurate personal information.
• Right of Portability: receive a copy of your personal information in a portable format and request transfer to a third party, where technically feasible.
• Right to Opt Out of Marketing: unsubscribe from promotional emails at any time using the unsubscribe link in our emails.
• Right to Withdraw Consent: where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, please contact us using the details in Section 12. We may need to verify your identity before processing your request. We will respond within the timeframe required by applicable law. You may also designate an authorized agent to make requests on your behalf.
To learn more about how Shopify processes your personal information, or to exercise rights related to Shopify's processing, please visit:
Shopify Consumer Privacy Policy
12. Contact Us
If you have any questions about this Privacy Policy, wish to exercise your rights, or have a complaint about how we handle your personal information, please contact us:
• Email: kaakun.discovery@gmail.com
• Address: Tokyo, Japan
If you are located in the EEA or UK and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.
13. Relationship with Shopify
The Services are hosted by Shopify. Information you submit through the Services will be transmitted to and shared with Shopify, as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services. Shopify may also use your data across other merchants and its platform to provide enhanced features. In those circumstances, Shopify is independently responsible for the processing of your personal information. For more information, visit the Shopify Consumer Privacy Policy linked in Section 11.
14. Third-Party Websites and Links
The Services may contain links to third-party websites or platforms, including our YouTube channel. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. We will post the revised Privacy Policy on our website and update the "Last updated" date. Where required by applicable law, we will notify you of material changes.
16. Security of Your Information
We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, loss, or misuse. However, no security system is completely impenetrable, and we cannot guarantee the absolute security of your information. We recommend that you do not share your account credentials with others and that you use secure channels when communicating with us.
