Privacy Policy
1. Introduction
Paper Harbor (“we”, “us”, or “our”) operates the website paper-harbor.com and provides natural gemstones, mineral collecting and esoteric crystals. We are committed to protecting your personal information in accordance with Japan’s Act on the Protection of Personal Information (APPI / 個人情報保護法) and the EU General Data Protection Regulation (GDPR) where applicable.
This Privacy Policy explains what data we collect when you browse our website, request a quote, place an order, or contact our team, and how that data is stored, used, and shared.
2. Data Controller
The entity responsible for your personal data is:
Paper Harbor
2-7-14 Kumoji, Naha-shi, Okinawa 900-0015, Japan
Phone: +81 98-863-5248
Email: privacy@paper-harbor.com
3. Information We Collect
3.1 Information you provide directly
When you enquire about rare gemstones, request a quote for collectible minerals, subscribe to our updates, or contact us through our website forms, we may collect:
- Full name
- Email address
- Phone number
- Postal address (for shipping estimates or on-site consultations)
- Project details and specific requirements related to hand-set amulets
3.2 Information collected automatically
Our web server and analytics tools may automatically record:
- IP address and coarse location information
- Browser type, operating system, and device category
- Pages visited, time on site, and referral source
- Cookie identifiers (see our Cookie Policy)
4. How We Use Your Information
We process personal data for the following purposes:
- Fulfilling orders and requests: preparing quotations, processing orders for rare gemstones and lapidary services, and arranging delivery or service appointments.
- Communication: responding to enquiries about our natural gemstones, mineral collecting and esoteric crystals, sending order-status updates, and providing after-service support.
- Website improvement: analysing browsing patterns so we can improve our product listings and the overall user experience.
- Legal compliance: meeting obligations under Japanese commercial law and tax regulations.
5. Legal Basis for Processing
Under APPI, all processing purposes are published before data collection begins. For persons in the European Economic Area, we process data based on:
- Consent for joining our newsletter and permitting non-essential cookie categories.
- Contractual necessity — when you request a quote or place an order.
- Legitimate interest — in understanding how visitors browse our website so we can improve the experience.
California visitors benefit from CCPA protections: you may request information about the data we hold, ask for its removal, and opt out of data sales. We do not participate in the sale of personal information.
6. Data Sharing and Third Parties
We do not sell your personal information. We may share data with:
- Shipping and logistics partners for product delivery within Japan and internationally.
- Payment processors that handle transactions securely under PCI-DSS standards.
- Analytics providers that help us understand site usage (data is anonymised where feasible).
- Legal authorities if required by Japanese law or a valid court order.
7. International Transfers
Japan-based servers store your data. For any cross-border transmission, we secure APPI Article 28-compliant agreements with receiving entities.
8. Data Retention
We retain personal data only as long as necessary:
- Estimate requests and messages: up to 24 months after the most recent exchange.
- Purchase and address records: 7 years as required by Japanese commercial and tax law.
- Subscribers to our updates: until they request removal.
- System logs: purged automatically after 12 months.
9. Your Rights
Under APPI and, where applicable, GDPR and CCPA, you have the right to:
- Demand a report of the personal data held by us in relation to you.
- Correct inaccurate or outdated information.
- Request deletion of data that is no longer necessary.
- Withdraw consent for marketing communications at any time.
- Object to processing based on legitimate interest.
- Request data portability in a machine-readable format (GDPR).
- Opt out of personal data sale (CCPA) — we do not engage in such sales.
To exercise any of these rights, contact us at privacy@paper-harbor.com or call +81 98-863-5248. We will respond within 30 days.
10. Children’s Privacy
Our website and services related to natural gemstones, mineral collecting and esoteric crystals are not directed at children under 16. We do not knowingly collect personal data from minors. If you believe a child has submitted information to us, please contact us so we can delete it promptly.
11. Security Measures
We secure every page with SSL/TLS encryption, grant personal data access only where operationally necessary, and revisit our procedures on a regular cycle. We recognise that no technology is infallible, yet we take reasonable steps to safeguard your information.
12. Changes to This Policy
We may modify this Privacy Policy from time to time in response to service changes or legal updates. All noteworthy revisions will be published here with a revised date.
13. Contact Us
If you have questions about this Privacy Policy or how we handle your personal data, please reach out:
Paper Harbor — Privacy Enquiries
2-7-14 Kumoji, Naha-shi, Okinawa 900-0015, Japan
Phone: +81 98-863-5248
Email: privacy@paper-harbor.com