Privacy Policy

This Privacy Policy (“Privacy Policy”) clarifies how YOGOODS STORE (“YOGOODS”, “we”, or “us”) collects, uses, discloses, and/or processes your personal data through your use of our website and/or services (as defined in the Terms and Conditions).

Please read this Privacy Policy carefully. This Privacy Policy is part of the agreement between you and us. By clicking or checking statements like “I agree” or “Accept” on our website, or by accessing and using any part of our website and/or services, you are deemed to have read, understood, and consented to the collection, use, disclosure, and/or processing of your personal data as described in this Privacy Policy. If you do not agree with any provisions of this Privacy Policy, please do not access or use our website and/or services.

Amendments

We may amend the terms of this Privacy Policy from time to time. We will use reasonable commercial means, such as login page notifications, emails, or in – account messages, to inform you of the amendments. Continuing to access or use the website and/or services after you receive the notice and the amended Privacy Policy comes into effect indicates your acceptance of the revised Privacy Policy.

Contact Us

If you have any questions or complaints about this Privacy Policy, or if you have questions about how we collect, use, disclose, and/or process your personal data, please contact: service@wutheringwaves.shop

1. Definitions

1.1 In this Privacy Policy, the following terms are defined as follows:
“Data Protection Laws”: refers to privacy regulations applicable in the jurisdictions where users reside, including but not limited to: United States: Children’s Online Privacy Protection Act (COPPA), California Consumer Privacy Act (CCPA), and California Privacy Rights Act (CPRA);
Canada: Personal Information Protection and Electronic Documents Act (PIPEDA); South Korea: Personal Information Protection Act (PIPA); Japan: Act on the Protection of Personal Information (APPI).
“Personal Information”: refers to data that can directly or indirectly identify an individual, regardless of its authenticity, including data that can be identified alone or in combination with other information.
“Processing”: refers to any operation performed on personal data (such as recording, storing, retrieving, transmitting, deleting, etc.).

1.2 Terms not defined herein shall be defined as in the User Agreement.

2. Types of Personal Data We Collect

2.1 When you visit or use our website and services, or when you register an account on our website, we may collect your personal data in the following scenarios:

• (a) Identity and Profile Information: including your name, alias, username, email, phone number, date of birth, photo (only collected with explicit consent for age verification), and password, which are used to create an account, verify your identity, or contact you.
• (b) Transaction Information: including billing/delivery addresses, payment records, and order details (which may be obtained through Third-Party payment service providers such as PayPal), used for processing transactions and arranging deliveries.
• (c) Marketing and Communication Data: including product preferences, feedback records, and communication history (such as chats, emails, and phone calls), used to improve services and recommend personalized products.
• (d) Service Usage Information: covering interaction records such as login times, as well as technical data like IP addresses, device information, and browser types, aiming to optimize the website and service experience.
  • (i) Information about your interaction with our website and/or services, including the date and time of any information you enter on our website and use of the services.
  • (ii) Your interaction with our customer service team.
  • (iii) Technical data, which may include URL information, cookie data, web beacon and other tracking technology information, your IP address, the type of device you use to access or connect to our website, unique device ID, device attributes, network connection type and provider, network and device performance, browser type, language, and operating system. These data will be used to improve and provide you with a better website and service.
• (e) Location Data: used to provide location – based services.
• (f) Third-Party Platform Information: When registering through Third-Party platforms, we may obtain your name and email (subject to their privacy settings) for identity verification and service access.
• (g) Biometric Data (Japan-specific): Facial recognition data may be collected for age verification in compliance with APPI Article 2(2), subject to explicit consent.

3. Purposes of Using Personal Data

3.1 We may process your personal data for the following purposes:

• (a) Provide access to the website and services.
• (b) Process, manage, or administer your account, including:
  • (i) Verifying your age and identity.
  • (ii) Assessing your suitability and/or eligibility for certain functions, features, products, or services.
• (c) Improve our website and services, including:
  • (i) Conducting research, analysis, and development activities (including but not limited to data analysis, surveys, and/or analytics) to improve our website and/or services.
  • (ii) Personalizing or customizing the content and services we provide to you, including providing location – based or traffic – based services, or offering products and/or services that better match your preferences.
  • (iii) Improving the user experience.
  • (iv) Enhancing the user interface of our website.
  • (v) Obtaining more attributes related to you based on the personal information you provide (either to us or to third parties) to provide you with more targeted and/or relevant information.
  • (vi) Conducting data analysis, testing, and research, monitoring, and analyzing usage and activity trends.
• (d) For legal and operational purposes, including:
  • (i) Storing, hosting, and/or backing up personal data for disaster recovery purposes, both domestically and overseas.
  • (ii) Responding to, processing, and handling your inquiries, requests, applications, complaints, and feedback.
  • (iii) Conducting fraud detection.
  • (iv) Contacting you as required by law or when you request it from us to provide you with information or services.
  • (v) Sharing personal information in any proposed purchase, merger, or acquisition of any part of our business, provided that we meet the requirements of applicable data protection laws when disclosing your personal information.
  • (vi) Responding to any legal proceedings, seeking legal rights and remedies, and handling any complaints or claims.
  • (vii) Responding to information requests from the public, government/regulatory agencies, statutory boards, related companies, and for audit, compliance, investigation, and inspection purposes.
  • (viii) Complying with any applicable laws, regulations, codes of conduct, guidelines, or rules, or assisting any government and/or regulatory agency (domestically or overseas) in law enforcement and investigations.
• (e) Process your purchases on our website, including:
  • (i) Enabling you to browse our website and purchase products on our website.
  • (ii) Verifying and executing payment transactions.
  • (iii) Arranging the delivery of the products you purchased.
  • (iv) Updating you on the status of your purchase.
  • (v) Providing you with customer support.
• (f) Marketing and advertising, including providing information that you may find useful or that you have requested.
• (g) Transmitting to any non – affiliated third parties (including our Third-Party service providers and agents) and relevant government and/or regulatory agencies (domestically or overseas) for the above – mentioned purposes.
• (h) Age Verification and Parental Consent: To verify user age and obtain parental consent where required under applicable laws (e.g., COPPA in the United States) when processing personal information of children under the minimum age threshold in respective jurisdictions.
• (i) Achieving any other incidental business purposes related to the above.

3.2 Even if you terminate the use of our services for any purpose, the above – mentioned purposes may still apply for a reasonable period after that.

4. Recipients of Personal Data Sharing

Your personal data may be disclosed to the following third parties (both domestically and overseas):

4.1 You acknowledge and consent that the personal information you provide to us may be disclosed and/or transferred to the following third parties, and used or processed by such third parties (both domestically and overseas) for the above – mentioned purposes or other purposes permitted/required by law:

• (a) Our affiliated companies. We may share your personal data with affiliates, ensuring compliance with cross-border data transfer requirements under applicable laws (e.g., APPI’s “Equivalent Protection” standard for transfers outside Japan).
• (b) Service providers. We use Third-Party service providers to operate and maintain our website, store our data, and provide services in other ways. We may share your personal data with service providers to ensure your smooth access to and use of our website and services. For example:
  • (i) We use Third-Party payment service providers to process your payments.
  • (ii) We use cloud service providers to host our data and our website.
  • (iii) We use data analysis service providers to provide you with personalized services.
  • (iv) We use logistics service providers to manage your orders and order – related requests and provide you with delivery services.
• (c) Government and regulatory agencies. We may share your personal information with third parties including law enforcement agencies, government, or regulatory agencies, as required by applicable laws (such as in response to valid legal processes like search warrants or court orders), or when it is necessary in relation to our website and/or services, or when we have other legitimate interests.
• (d) Buyers or successors of our business. In the event of a merger, restructuring, dissolution, or other sale or transfer of ownership, we may share your personal information with the buyer or successor.
• (e) Our advisors, including auditors and lawyers. When seeking professional advice, we may share or disclose your personal information with our advisors.
• (f) Parent/Guardian Representatives: We may share children’s personal information with verified parents/guardians when fulfilling their rights under applicable data protection laws.

4.2 Even if your relationship with us terminates or changes in any way, the purposes listed in the above – mentioned clauses may still apply for a reasonable period after that.

5. Third-Party Links and Third-Party Collection of Personal Information

5.1 Overview of Third-Party Links and Services

Our website may contain links to third-party websites operated by our affiliates, advertisers, or other independent entities (“Third-Party Websites”). Additionally, certain features on our platform (e.g., payment processing) may be provided by external vendors (“Third-Party Service Providers”) through “Third-Party Services”.

When you access Third-Party Services or click on links to Third-Party Websites, personal data such as credit card details may be directly collected by these Third-Party Service Providers.

5.2 Liability and Risk Disclosures

Because Third-Party Websites and Services are owned and operated by entities outside our control, we assume no responsibility or liability for:

• The content, security, or privacy practices of Third-Party Websites/Services.
• The collection, use, or disclosure of your personal data by Third-Party Service Providers.

User Responsibility: You assume all risks associated with interacting with Third-Party Websites/Services. Before sharing personal data, review the privacy policies of these third parties to understand how your information will be handled.

5.3 User Acknowledgment and Consent

By accessing Third-Party Websites/Services or providing data to Third-Party Service Providers, you explicitly acknowledge and agree that:

• (a) Policy Compliance: You have reviewed and accept the privacy policies of Third-Party Service Providers, consenting to their collection, use, and disclosure of your data as described in those policies.
• (b) Independent Control: Third-Party Service Providers act as independent data controllers under applicable laws. We do not supervise or guarantee their data practices.
• (c) Limitation of Liability: To the fullest extent permitted by law, we disclaim all liability for damages arising from:
  • Your use of Third-Party Websites/Services.
  • Unauthorized data processing by Third-Party Service Providers.
  • Privacy breaches or misuses by third parties.

6. Cookies

6.1 We may use cookies on our website. Cookies are text files that allow our website to remember who you are. Cookies only record which areas of our website you have visited and for how long.

6.2 You can accept or reject cookies in your browser settings. However, if you disable cookies, some website functions may not be available.

7. Your Rights and Choices Regarding Personal Information

7.1 Withdrawal of Consent

• (a) How to Withdraw Consent: You may withdraw your consent to the collection, use, disclosure, or processing of your personal information for any purpose described in this Privacy Policy at any time. To do so, submit a written request to us via email at the contact details provided in this policy.
• (b) Processing Time: We will process your withdrawal request within a reasonable timeframe. The time required may vary depending on the nature of your request and applicable legal requirements.
• (c) Impact of Withdrawal: Withdrawing consent may affect your ability to access or use certain features of our website and/or services.
• (d) Legal Exceptions: Your withdrawal of consent does not affect our legal rights to continue processing your personal information where permitted or required by applicable laws (e.g., to fulfill legal obligations, resolve disputes, or enforce agreements).

7.2 Access, Correction, and Other Rights

• (a) Exercising Your Rights: You may request to:
  • (i) Access a copy of the personal information we hold about you, including details about how it has been used or disclosed within the past 12 months;
  • (ii) Correct or update inaccurate or incomplete personal information;
  • (iii) Request deletion of your personal information, subject to legal exceptions;
  • (iv) Restrict or object to specific types of processing.
    Submit such requests via email to the contact details provided in this policy.
• (b) Fees: We may charge a reasonable fee to cover administrative costs for fulfilling repetitive or manifestly unfounded access requests. We will notify you of any applicable fees before proceeding.
• (c) Response Timeline: We will respond to your request within 30 days or as otherwise required by applicable laws. If additional time is needed, we will inform you of the delay and the reasons within the initial 30-day period.
• (d) Denial of Requests: If we cannot fulfill your request (e.g., due to legal restrictions or technical feasibility), we will explain the reasons in writing, unless prohibited by law.
• (e) Children’s Information: For rights related to children’s personal information, see Section 10.

8. Personal Information Protection

8.1 We will implement appropriate administrative, physical, and technical measures to ensure that your personal information is protected from unauthorized access, collection, use, disclosure, copying, modification, deletion, or similar risks, and to prevent the loss of any storage media or devices storing personal information.

8.2 However, you should be aware that no method of internet transmission or electronic storage is completely secure. Although we cannot guarantee security 100%, we are always committed to protecting the security of your personal data and continuously review and strengthen our security systems.

9. Accuracy of Personal Information

9.1 When providing us with your personal information, you should ensure its accuracy. You should also regularly check your personal information and notify us in a timely manner when there are changes or updates to ensure that the personal information we hold about you is accurate. When submitting information about minors, users must ensure accuracy of age declarations and provide valid parental consent documentation when required.

9.2 You can view and update your personal data at any time by logging into your account.

10. Children’s Privacy

10.1 Age Restrictions
We do not knowingly collect personal information from users below the minimum age required by applicable Data Protection Laws in their jurisdiction. Where legally required, we will implement age verification mechanisms and obtain valid parental/guardian consent prior to processing.

10.2 Parental Control
If we discover collection of personal information from underage users without proper consent, we will:

• (a) Immediately suspend associated accounts.
• (b) Delete collected information within 30 days.
• (c) Notify parents/guardians when contact details are available.

10.3 Parental Rights
Verified parents/guardians may:

• (a) Review collected children’s information
• (b) Request deletion of data
• (c) Revoke previously given consent
  Requests must be submitted via email to service@wutteringwaves.shop with proof of parental authority.

11. Data Retention Period

11.1 We may retain your personal information for the period necessary to achieve the purposes for which it was collected, or as required or permitted by applicable laws.

11.2 Once there is a reasonable basis to indicate that retaining your personal information no longer serves the collection purposes and no longer meets legal or business needs, we will stop retaining the relevant information, or delete the data that can associate the personal information with you.

12. International Data Transfers

Your personal data may be transferred to and processed in countries outside your jurisdiction. We will ensure such transfers comply with applicable Data Protection Laws, including implementing appropriate safeguards (e.g., contractual clauses or adequacy decisions) to protect your data.

13. Governing Law and Dispute Resolution

These Terms of Service and any disputes arising from your use of the Overseas Merchandise Mall shall be governed by and construed in accordance with the laws of the Hong Kong Special Administrative Region. All claims, controversies, or disputes (whether contractual or non-contractual) shall be resolved exclusively through arbitration administered by the Hong Kong International Arbitration Centre (HKIAC) in accordance with its latest Rules of Arbitration in force at the time of submission.