Veriquest / Legal / Privacy Policy for Merchandise Sales
Privacy Policy for Merchandise Sales
Veriquest ("we", "us", or "our") sets out below how it handles personal information
in selling merchandise for the band 薔薇王 (the "Sales") at rhyn.jp/shop (the "Shop").
- Established: October 14, 2026
- Last revised: October 16, 2026 (telephone number and the representative's name added)
This policy covers orders placed at the Shop. For the contact forms on veriquest.dev, see the Website Privacy Policy.
This English text is provided for convenience. If it differs from the Japanese original, the Japanese text governs.
1Operator information
| Operator name | Veriquest |
|---|---|
| Address | Dai-2 Mori Bldg. 401, 4-24-5 Meieki, Nakamura-ku, Nagoya, Aichi 450-0002, Japan |
| Representative | Yuya Shirayanagi |
| Personal information protection officer | The representative (through the contact point in clause 12) |
We comply with the Act on the Protection of Personal Information and other applicable laws and guidelines, and handle the personal information we collect appropriately.
2Information we collect
2-1. Information you provide when ordering
On the payment screen (a screen provided by Stripe), you enter your name, email address, telephone number, delivery address (within Japan only), and credit card details. Card details (including when you use Apple Pay or Google Pay) are received directly by Stripe; we do not receive your card number.
2-2. Order details
The items, sizes, quantities, amount, and date and time of your order.
2-3. Consent to receive notices by email
Before ordering, you tick "I agree to receive the notice of acceptance of my order (seller, amount, delivery timing, etc.) by email." (so that we can send the notices required under the Act on Specified Commercial Transactions by email). You cannot proceed to the payment screen until it is ticked.
2-4. Cart contents
These are stored only on your device (in your browser). They contain no personal information and are cleared after you order. When the payment screen is opened, all that is sent to our server is the items, sizes, and quantities, and whether you gave the consent in 2-3.
2-5. Inquiries about orders
These are received through the contact point on veriquest.dev and handled in accordance with the Website Privacy Policy.
3Purposes of use
We use the information we collect only within the scope of the following purposes.
- Manufacturing and shipping the items
- Processing payment and refunds
- Notifying you of the acceptance of your order, and contacting you about shipping, defects, and similar matters
- Keeping transaction records as required by law
- Preventing fraudulent use
- Understanding visits to the Shop statistically (see clause 4)
We do not use it beyond the purposes above. We do not send promotional email to the email address or other details you give us when ordering.
4Cookies and analytics
The Shop's pages (including the purchase page and the thank-you page) use Google Analytics, provided by Google LLC, to collect visit statistics. It uses cookies. What it records is statistical: page views, referrers, country or region, and browser type. We do not send Google Analytics anything you enter on the payment screen, such as your name or address.
The payment screen is a Stripe page, and Stripe may use cookies for purposes such as fraud prevention. What Stripe does with them is governed by its own privacy policy.
Cart contents are kept only in your browser's storage (localStorage).
5Third parties and outsourcing
Except as required by law, we do not provide personal information to third parties without obtaining your prior consent. We do not sell lists, nor share data jointly with others.
We do, however, entrust part of the handling to the following providers in order to operate the Shop.
| Provider | What is entrusted |
|---|---|
| Stripe Japan, Inc. | Processing payment, storing order information (name, email address, telephone number, delivery address), and sending refund notification emails. Stripe also handles information for its own purposes, such as fraud prevention and legal compliance (see its privacy policy) |
| OpenFactory Inc. (Printio) | Manufacturing and shipping the items. We provide the recipient's name, postal code, address, and telephone number, and the order details. We do not provide your email address |
| Plus Five Five, Inc. (Resend) | Sending the order acceptance email (to you) and our copy of the order email (to us). We provide the email address and the body of the email (name, delivery address, amount, items, and similar) |
| Zoho Japan Corporation (Zoho Mail) | Receiving and storing our copy of the order email (name, address, telephone number, email address, order details) |
| Netlify, Inc. | Serving the Shop's pages, opening the payment screen, and creating the order acceptance email and our copy of it (processing the name, email address, telephone number, delivery address, and order details; nothing is stored) |
| Google LLC (Google Analytics) | Visit statistics (see clause 4) |
We exercise necessary and appropriate supervision over the providers we entrust.
6Transfers to third parties abroad
Plus Five Five, Inc. (Resend), Netlify, Inc., and Google LLC are located in the United States of America. Order information, email content, and page visit information may therefore be processed on servers in that country.
At Stripe, order information may be processed on servers or at sites in countries where its group companies operate, such as the United States and India.
OpenFactory Inc. and Zoho Japan Corporation are Japanese companies, and information is processed within Japan.
The personal information protection regimes of the United States and other countries are not identical to Japan's Act on the Protection of Personal Information. We entrust handling only after reviewing each company's published privacy policy and data processing terms, and we continue to take the measures necessary to protect personal information.
For information on those regimes, please see the survey of personal information protection systems in foreign countries published by Japan's Personal Information Protection Commission (Japanese). On request, we will promptly provide information on the measures taken by the recipients, through the contact point in clause 12.
7Retention periods
| Information | How long it is kept |
|---|---|
| Order records (name, address, telephone number, email address, order details) |
Retained as transaction records for the period required by law (up to seven years), then deleted |
| Our copy of the order email | Retained for the same period as above, then deleted |
| Records held by providers (payment, email delivery, manufacturing and shipping) | The period set by each provider |
| Cart contents | Cleared from your device after you order |
We will delete information at your request before the period elapses (except where the law requires it to be kept; see clause 9).
8Security measures
- All traffic to the Shop is encrypted (HTTPS)
- Payment takes place on Stripe's screen, and we do not hold card numbers
- Our server does not store order information in a database. Its logs record only the type and message of a failure, never personal information
- Access to our copy of the order email is limited to those who need it for the work
- We verify the security arrangements of providers before entrusting work to them
9Requests for disclosure and other actions
Where you, or your agent, request notification of the purpose of use, disclosure, correction, addition or deletion of content, suspension or erasure of use, or suspension of provision to third parties in respect of retained personal data, we will verify your identity and respond without delay in accordance with the law.
Please direct requests to the contact point in clause 12. No fee is charged for making a request.
The same contact point also handles requests for the advertising disclosure items required for mail-order sales (those items under the Act on Specified Commercial Transactions that are omitted at the Shop); we will provide them without delay in writing or by email.
10Orders by minors
If you are a minor, please obtain the consent of a parent or guardian before placing an order.
11Revisions to this policy
We may revise this policy following changes in the law or in how we handle information. When we do, we will publish the revised text and the date of last revision on this page. Where the change is significant, we will announce it on the Shop's pages.
12Contact point
| Contact | Veriquest personal information protection officer |
|---|---|
| (shown when JavaScript is enabled) | |
| Form | Contact form (type: "Request to disclose, correct, or delete personal data") |
We also receive questions and complaints about the handling of personal information at this contact point. You can also reach us by phone (+81 50-1808-7151).