Privacy policy

Privacy Policy

Last Updated: February 17, 2026

1. Introduction and Data Controller

Joint Sewing ("Joint Sewing," "we," "us," or "our") is an international online store operated by SOUHIRO US LLC, a company registered in the State of Oregon, United States.

This Privacy Policy explains how we collect, use, share, transfer, retain, and protect personal information when individuals visit https://jointsewing.com, purchase products, create customer accounts, subscribe to marketing communications, or contact us.

Our store is powered by Shopify. Orders are primarily fulfilled and shipped from Japan.

SOUHIRO US LLC generally acts as the data controller for personal information processed in connection with our direct-to-consumer retail activities.

We handle personal information in accordance with applicable privacy and data protection laws, including the EU GDPR, UK GDPR, relevant U.S. state privacy laws, and Japan's Act on the Protection of Personal Information, where applicable.


2. Information We Collect

Depending on how customers interact with our store, we may collect:

Identity and Contact Information: Names, email addresses, telephone numbers, billing addresses, shipping addresses, and customer account details.

Order and Transaction Information: Purchased products, quantities, order numbers, transaction amounts, payment status, purchase history, shipping records, returns, refunds, and customer service communications.

Technical Information: IP addresses, browser and device information, approximate location, website usage information, cookies, and similar identifiers.

Marketing Information: Subscription preferences, marketing consent records, promotional communications, and advertising interactions.

Shipping and Customs Information: Recipient details and other information reasonably necessary for international shipping, customs clearance, and legal compliance.

We seek to collect only information reasonably necessary for the relevant purposes.


3. Purposes and Legal Bases for Processing

We use personal information to:

  • Process purchases, payments, and orders.

  • Arrange shipping, customs clearance, and delivery.

  • Provide customer support and manage returns and refunds.

  • Maintain website functionality and security.

  • Prevent fraud and unauthorized transactions.

  • Comply with tax, accounting, customs, and legal obligations.

  • Improve our services and customer experience.

  • Send marketing communications where permitted.

  • Analyze website performance and advertising effectiveness where enabled.

Where the EU GDPR or UK GDPR applies, our legal bases may include:

  • Contract performance — Article 6(1)(b): Processing orders, payments, delivery, and contractual customer support.

  • Legal obligation — Article 6(1)(c): Compliance with applicable legal recordkeeping and regulatory requirements.

  • Legitimate interests — Article 6(1)(f): Fraud prevention, website security, and proportionate business improvements.

  • Consent — Article 6(1)(a): Optional marketing and non-essential tracking where consent is legally required.

Where we rely on legitimate interests, we consider the potential impact on individuals' rights and freedoms.

Consent may be withdrawn at any time without affecting the lawfulness of earlier processing.

Purchasing products does not automatically constitute consent to optional marketing or non-essential tracking.


4. Shopify and Payment Processing

Our online store operates through Shopify, which provides e-commerce hosting, checkout, order management, and related services.

Authorized payment providers process information necessary for payment authorization, fraud prevention, and transaction completion.

We do not intentionally store complete payment card numbers on our own systems.

Depending on the activity, service providers may act as data processors or independent controllers.

Shopify's privacy information is available at:

https://www.shopify.com/legal/privacy


5. Sharing Personal Information

We may share personal information with authorized recipients where necessary and lawful, including:

  • Shopify and related technology providers.

  • Payment processors and fraud prevention providers.

  • DHL, FedEx, and other logistics providers.

  • Customs brokers and government authorities.

  • Customer support and fulfillment service providers.

  • Website security, analytics, and advertising providers, where used.

  • Legal, tax, accounting, and professional advisers.

We seek appropriate contractual protections where third parties process personal information on our behalf.

We do not sell customer contact lists to unrelated third parties for their independent direct marketing.

Certain advertising-related activities may qualify as a sale, sharing, or targeted advertising under applicable U.S. privacy laws. Where required, we provide appropriate disclosures and opt-out rights.


6. Cookies and Tracking Technologies

Our website uses cookies and similar technologies for essential shopping functions, website security, preferences, analytics, and advertising where enabled.

Strictly Necessary Technologies: Support shopping carts, checkout, authentication, and security.

Analytics Technologies: Help measure website usage and performance where enabled.

Advertising Technologies: Support advertising measurement and relevant marketing where enabled.

Where applicable law requires prior consent, non-essential tracking technologies must not be activated before valid consent is obtained.

Customers must be able to accept or reject non-essential tracking without losing access to essential shopping functions.

Where privacy preference controls are available, customers may change or withdraw their consent through those controls.

Customers may also contact hello@jointsewing.com for assistance.

Third-party applications and manually installed tracking technologies may require additional consent management.


7. Marketing Communications

We may send promotional emails, product announcements, and special offers where permitted by law.

Where required, we obtain consent before sending marketing communications.

Customers may unsubscribe using the link in a marketing email or by contacting hello@jointsewing.com.

Necessary transactional messages, including order confirmations, payment notifications, and shipping updates, may continue where lawful.


8. International Data Transfers

Joint Sewing operates internationally through a U.S. legal entity, with fulfillment activities primarily in Japan.

Personal information may be processed in the United States, Japan, and other countries where authorized service providers operate.

Where an international transfer is subject to EU GDPR or UK GDPR restrictions, an appropriate lawful transfer mechanism must be used.

Depending on the circumstances, this may include an applicable adequacy decision, Standard Contractual Clauses, the UK International Data Transfer Agreement, the UK Addendum, or another lawful mechanism.

Where legally necessary, appropriate transfer assessments and supplementary safeguards will be applied.

Customers may request information about applicable transfer safeguards at hello@jointsewing.com.


9. Data Retention

We retain personal information only as long as reasonably necessary for the relevant purpose, subject to applicable legal obligations.

Order and Payment Records: Retained as necessary for tax, accounting, contractual, and legal requirements.

Shipping and Customs Records: Retained as necessary for delivery, customs compliance, and dispute resolution.

Customer Accounts: Generally retained while accounts remain active or while information is required for lawful business purposes.

Customer Support Records: Retained as reasonably necessary to resolve inquiries and disputes.

Marketing Records: Retained while the relevant lawful basis remains valid. Limited suppression information may be retained after unsubscribing.

Security and Technical Records: Retained according to security needs and applicable legal requirements.

We periodically review retained information and delete or anonymize it when no longer required.

Customers may request information about applicable retention criteria.


10. Data Security

We implement reasonable technical, administrative, and organizational safeguards appropriate to the risks involved.

These may include access controls, authentication, secure transmission, restricted access, service provider oversight, and incident response procedures.

No electronic storage or transmission method is completely secure.


11. Privacy Rights

Depending on applicable law, individuals may have rights to:

  • Access their personal information.

  • Correct inaccurate information.

  • Request deletion.

  • Restrict or object to certain processing.

  • Request data portability.

  • Withdraw consent.

  • Opt out of certain targeted advertising or data sharing.

  • Lodge complaints with competent authorities.

Requests may be submitted to hello@jointsewing.com.

We may request reasonable identity verification and will respond within applicable legal deadlines.


12. United States Privacy Rights

Residents of certain U.S. states may have additional rights concerning access, correction, deletion, portability, and opting out of certain sales, sharing, or targeted advertising.

Where applicable law requires specific request or opt-out mechanisms, those mechanisms will be provided.

We will not unlawfully discriminate against customers for exercising applicable privacy rights.


13. European Union and United Kingdom Privacy Rights

Where the EU GDPR or UK GDPR applies, individuals may have rights under Articles 7, 15–18, and 20–22, including access, correction, deletion, restriction, portability, objection, withdrawal of consent, and protections concerning qualifying automated decisions.

We generally respond to valid GDPR requests within one month, subject to legally permitted extensions.

EU individuals may contact their competent data protection supervisory authority.

UK individuals may contact the Information Commissioner's Office:

https://ico.org.uk

EU and UK Representatives

SOUHIRO US LLC is established outside the EU and UK.

Where Article 27 requires the appointment of a representative, an appropriate representative must be appointed and their identity and contact details made available as legally required.

Any applicable exemption must be assessed based on the actual nature, frequency, and risks of our processing activities.

For privacy inquiries, contact hello@jointsewing.com.


14. Children's Privacy

Our online store is intended for individuals legally capable of purchasing products.

We do not knowingly collect children's personal information in violation of applicable law.

Where unlawful collection is identified, appropriate deletion measures will be taken.


15. Personal Data Breaches

We maintain procedures to assess and respond to suspected personal data breaches.

Where applicable law requires notification, we will notify the competent authority and affected individuals within the applicable legal timeframes.

Under the EU GDPR or UK GDPR, reportable breaches may require supervisory authority notification within 72 hours where feasible.


16. Third-Party Websites

Our website may contain links to independent third-party services.

Those services may maintain their own privacy policies and practices.


17. Changes to This Policy

We may update this Privacy Policy to reflect changes in our business, technology, or legal obligations.

Updated versions will be published with an appropriate revision date.

Where legally required, additional notice or consent will be provided.


18. Contact Information

Store Name: Joint Sewing

Legal Operator: SOUHIRO US LLC

Registered Jurisdiction: Oregon, United States

Website: https://jointsewing.com

Email: hello@jointsewing.com

Order Fulfillment Location:

14-27 Nishinokyo
Nagaokakyo-shi, Kyoto 617-0816
Japan

For privacy inquiries or requests, contact hello@jointsewing.com.

Nothing in this Privacy Policy limits mandatory rights under applicable data protection laws.