Privacy Policy

The Japanese version is authoritative. This English version is provided for customer convenience.

1. Business Operator

• Name: Neo Systems Co., Ltd.
• Address: 4-9-2 Nihonbashi-Honcho, Chuo-ku, Tokyo 103-0023, Japan
• Representative: Zhigen Lan
• Contact: support@kokomart.jp (Tel: 03-5645-5678)

2. Information We Collect

• Information you provide when ordering or registering, such as name, email address, phone number and delivery address
• Information generated through use of the service, such as order history, inquiries and reviews
• Identifiers provided by external services when you sign in with a linked account (Google, LINE, WeChat, X)
• Information collected via cookies and similar technologies, such as login state, cart contents, language preference and browsing activity
• Technical information such as IP address and browser details, collected to prevent fraud

Credit card numbers and other payment credentials are collected and processed directly by payment service providers and are never stored on our servers.

3. Purposes of Use

• Receiving orders, processing payments, arranging delivery, and related communication
• Sending order confirmations, shipping notices and payment notifications
• Responding to inquiries and handling returns or exchanges
• Providing points, coupons, the referral program and related services
• Securing logins and detecting and preventing unauthorized access and fraudulent orders
• Analyzing usage to improve the service
• Complying with legal obligations

4. Third Parties and Contractors

Except as required by law, we do not provide personal information to third parties without your consent. We may entrust handling to the following categories of contractors to the extent necessary:

• Payment processing: Stripe and other payment providers we adopt
• Delivery: shipping carriers (name, address and phone number appear on the shipping label)
• Infrastructure and data storage: Amazon Web Services (Tokyo region)
• Email delivery: email service providers
• Analytics and site improvement: the analytics providers listed in Section 6

5. Transfers to Third Parties Located Abroad

When you use social login, information required for authentication is exchanged with the relevant provider (Google, LINE, WeChat (Tencent), X, etc.; see each provider's published information for its countries of operation). Our payment and analytics contractors also include businesses located abroad (such as the United States). We confirm the data protection regimes of the relevant countries and ensure appropriate handling through contracts and other measures.

6. Cookies and External Transmission

This site uses cookies and similar technologies to keep you signed in, operate the cart, remember your language preference and prevent fraud. You can disable cookies in your browser settings, but some features such as login and the cart may become unavailable.

When you use this site, information is transmitted from your device to the following third parties. Details per recipient are as follows.

Google LLC (United States) — Google Analytics / Google Tag Manager

• Information transmitted: cookie identifiers, URLs and referrers of pages viewed, device and browser type, IP address, in-site interaction events
• Purpose: statistical analysis of usage to improve the service
• Recipient's policy: Google policy
• How to stop transmission: Google Analytics Opt-out Add-on, or your browser's cookie settings

Microsoft Corporation (United States) — Microsoft Clarity

• Information transmitted: cookie identifiers, URLs of pages viewed, click and scroll interaction recordings, device and browser type, IP address
• Purpose: interaction recording and heatmap analysis to improve the user experience
• Recipient's policy: Microsoft Privacy Statement
• How to stop transmission: your browser's cookie or tracking-prevention settings

Stripe, Inc. (United States) — Payment processing

• Information transmitted: payment details such as card number, order amount, device and browser information, IP address
• Purpose: processing payments and detecting and preventing fraudulent use
• Note: payment details are collected and processed directly by Stripe and are not stored on our servers.
• Recipient's policy: Stripe Privacy Policy

Cloudflare, Inc. (United States) — Cloudflare Turnstile

• Information transmitted: IP address, browser information, technical information about your interaction
• Purpose: detecting and preventing automated fraudulent registration and access
• Recipient's policy: Cloudflare Privacy Policy

7. Security Measures

We take reasonable security measures to prevent unauthorized access to, and loss or leakage of, personal information, including TLS encryption, access controls, logging and supervision of contractors.

8. Disclosure, Correction and Deletion Requests

We respond without delay, in accordance with the law, to requests from the individual concerned for disclosure, correction, addition, deletion, suspension of use or suspension of third-party provision of retained personal data, after verifying identity. Please contact the office listed in Section 1. No fee is charged in principle.

9. Complaints and Consultations

Complaints and consultations regarding the handling of personal information are accepted at the contact listed in Section 1.

10. Revisions

This policy may be revised in response to changes in law or in the service. Material changes will be announced on this site.