Privacy policy

VIRES (“VIRES,” “we,” “us,” or “our”) considers the proper handling and protection of the personal information and privacy of customers who use our online store (the “Site”) to be an important responsibility.
We handle personal information in accordance with the Act on the Protection of Personal Information of Japan and other applicable Japanese laws and regulations, as well as, where applicable, the EU General Data Protection Regulation (“GDPR”), the UK GDPR, and other applicable data protection laws and regulations of relevant countries and regions.
Accordingly, we establish this Privacy Policy as follows.

Article 1 — Personal Information and Related Data
For the purposes of this Privacy Policy, “personal information” means information such as a person’s name, address, email address, or other information that can identify a specific individual, either by itself or when readily combined with other information.
We also appropriately handle cookies, IP addresses, device information, browsing history, and other information collected through the use of the Site in accordance with applicable laws and regulations.

Article 2 — Information We Collect
When you use the Site, purchase products, contact us, or otherwise interact with VIRES, we may collect the following information as necessary:
・Name
・Address and shipping information
・Telephone number
・Email address
・Order details and purchase history
・Information relating to payments and transactions
・Information relating to returns, exchanges, and refunds
・Details of inquiries and communication history with VIRES
・IP address
・Cookies and other online identifiers
・Information regarding your device, browser, operating system, and similar technical information
・Browsing history, dates and times of use, access information, and other Site usage data
・Information regarding your consent choices and preferences relating to marketing and similar activities
・Other information necessary to provide our services
Credit card numbers and certain other payment information may be handled directly by third-party payment service providers. In such cases, VIRES may not directly collect or store the complete payment information.

Article 3 — Purposes of Use
We may use the information we collect for the following purposes:
・To process product orders, payments, dispatch, and delivery
・To confirm order details and communicate with customers
・To process returns, exchanges, refunds, and other post-purchase services
・To respond to inquiries
・To verify identity
・To prevent and investigate fraud, fraudulent orders, unauthorized payments, and other improper activities
・To provide, maintain, and improve the Site and our services
・To develop products, improve services, and enhance the usability of the Site
・To analyze Site usage, access activity, and related information
・To provide information about products, services, campaigns, and other VIRES-related matters
・To conduct advertising or marketing based on your consent or another lawful basis permitted under applicable law
・To provide important notices, including changes to our Terms of Service or other policies
・To protect the rights, property, safety, and interests of VIRES or third parties
・To comply with legal obligations, address disputes, and otherwise conduct our legitimate business operations
・For purposes incidental or related to any of the above
Where applicable law requires your consent for a particular use of your information, we will obtain the necessary consent before carrying out such processing.

Article 4 — Legal Basis for Processing for Customers in the EU, UK and Similar Jurisdictions
Where the GDPR, UK GDPR, or similar data protection laws apply, we process personal data on one or more of the following legal bases:
・Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract
・Where processing is necessary for compliance with a legal obligation
・Where processing is necessary for the legitimate interests of VIRES or a third party, provided that such interests do not improperly override your rights and interests
・Where you have given your consent
・Where processing is otherwise permitted under applicable law
Where we process personal data on the basis of consent, you may withdraw your consent at any time with future effect.
Withdrawal of consent will not affect the lawfulness of processing carried out before your consent was withdrawn.

Article 5 — Disclosure of Personal Data to Third Parties
We will not disclose or provide personal data to third parties without your prior consent, except as permitted or required by applicable law.
This restriction does not apply in the following circumstances:
・Where disclosure is required or permitted by law
・Where disclosure is necessary to protect the life, physical safety, or property of a person and obtaining the individual’s consent is difficult
・Where cooperation is necessary for a national government agency, local public authority, or other public body to carry out duties prescribed by law
・Where disclosure to a third party is otherwise permitted under applicable law

Article 6 — Service Providers and Sharing of Information
We may engage external service providers to process personal information or share necessary information with them to the extent required to operate the Site and provide our services.
Such service providers may include:
・Online store and e-commerce platform providers
・Payment service providers
・Shipping and delivery providers
・Cloud service and system providers
・Email delivery and other communication service providers
・Analytics and security service providers
・Advertising and marketing service providers
・Other service providers necessary for the operation of the Site or sale of our products
We will exercise necessary and appropriate supervision over service providers that process personal information in accordance with applicable laws and regulations.

Article 7 — Use of Shopify
The Site uses services provided by Shopify to operate our online store.
When you use the Site or purchase products, your order information, contact information, shipping information, device information, and other data may be processed by Shopify, its affiliates, or its service providers to the extent necessary for store operation, payments, security, service delivery, and related purposes.
The handling of personal information and related data by Shopify may also be subject to Shopify’s own privacy policies and other applicable terms.

Article 8 — International Data Transfers
Where Shopify, payment service providers, cloud service providers, analytics providers, or other external service providers used by VIRES, or their affiliates, are located outside Japan, your personal information may be stored, processed, or otherwise handled outside Japan.
VIRES will take appropriate measures in accordance with applicable laws and regulations when personal data is transferred to third parties located outside Japan or otherwise transferred internationally.
Where the GDPR, UK GDPR, or other regulations governing international transfers apply, recognized transfer mechanisms such as adequacy decisions, Standard Contractual Clauses, or other mechanisms permitted under applicable law may be used.

Article 9 — Cookies and Similar Technologies
The Site may use cookies and similar technologies for purposes including operation of the Site, providing functions necessary for purchases, maintaining security, improving usability, understanding Site usage, improving our services, analytics, and advertising.
Through cookies and similar technologies, information such as pages viewed, access dates and times, IP addresses, devices, browsers, and other usage data may be collected.
Where required by applicable law, cookies and similar technologies that are not strictly necessary for operation of the Site, including those used for advertising or analytics, will be used only after obtaining your consent.
only after obtaining your consent.
Where available, you may manage your cookie preferences through the cookie banner or other settings provided on the Site, or through your browser settings.
Disabling certain cookies may prevent some features of the Site from functioning properly.

Article 10 — Marketing and Advertising
Based on your consent or another lawful basis permitted under applicable law, we may send you information about VIRES products, services, campaigns, and other matters by email or other communication methods.
You may unsubscribe from marketing emails by using the unsubscribe method provided in the relevant email or through another method specified by VIRES.
Where required by law, we will also obtain your consent before using cookies or similar technologies for advertising or marketing purposes.

Article 11 — Security of Personal Information
We implement necessary and appropriate security measures in accordance with applicable laws and regulations to help prevent unauthorized access to, leakage, loss, destruction, alteration, or other risks relating to personal information.
Where we engage external service providers to process personal information, we will provide necessary and appropriate supervision in accordance with applicable law.

Article 12 — Data Retention
We retain personal information and related data for as long as necessary to fulfill the purposes for which it was collected and used, for any period required by applicable law, and for any period reasonably necessary for transaction management, dispute resolution, or our legitimate business operations.
When personal information is no longer required to be retained, we will appropriately delete, dispose of, anonymize, or otherwise process such information in accordance with applicable law and our internal data management practices.

Article 13 — Your Rights
Depending on applicable law, you may have the right to request access to, correction of, addition to, deletion of, suspension of use of, erasure of, or suspension of disclosure to third parties of personal information held by VIRES, as well as other rights provided by law.
When we receive such a request, we may verify your identity before responding in accordance with applicable law.
We may be unable to fulfill a request where we are not legally required to do so or where applicable law permits or requires us to retain the relevant information.

Article 14 — Rights of Customers in the EU, UK and Similar Jurisdictions
Where the GDPR, UK GDPR, or similar data protection laws apply, you may, to the extent provided under applicable law, have the following rights:
・The right to request access to your personal data
・The right to request correction of inaccurate personal data
・The right to request deletion of your personal data
・The right to request restriction of the processing of your personal data
・The right to object to the processing of your personal data
・The right to data portability
・The right to data portability
・The right to withdraw consent
・The right to lodge a complaint with the applicable supervisory authority
These rights may be subject to conditions, restrictions, or exceptions under applicable law.

Article 15 — Personal Information of Minors
If a minor uses the Site or purchases products, they must obtain the consent of a parent, legal guardian, or other legal representative where required.
If we become aware that we have collected personal information from a minor without obtaining consent required by applicable law, we will take appropriate action in accordance with applicable law.

Article 16 — External Websites and Third-Party Services
The Site may contain links to social media platforms or other websites and services operated by third parties.
The handling of personal information and related data by such third-party websites or services is governed by the privacy policies and other terms established by the relevant third-party service providers.

Article 17 — Changes to This Privacy Policy
We may revise this Privacy Policy as necessary due to amendments to applicable laws and regulations, changes to the Site or our services, or other circumstances.
If we make material changes to this Privacy Policy, we will provide notice through the Site or by another appropriate method.
The revised Privacy Policy will become effective when it is published on the Site or on another effective date separately specified by VIRES.

Article 18 — Contact
For inquiries or requests relating to this Privacy Policy, our handling of personal information, or the exercise of your rights, please contact us through the contact form on the Site or at the following email address:
Email: info@vires.jp
We may request information necessary to verify your identity where appropriate.