Privacy policy

OUR APPROACH TO THE PROTECTION OF PERSONAL INFORMATION

LIHIT LAB., INC. (“the Company”) is a Japan‑based comprehensive manufacturer of office supplies, contributing to society through the development of various office tools essential for operational efficiency, labor‑saving, and modernization. In the course of conducting campaigns, sales promotions, distribution of materials, responding to inquiries, and administering surveys, the Company handles personal information provided by customers. We recognize that we bear the responsibility to establish and maintain a strict and appropriate management system to protect such personal information.

To fulfill this responsibility, the Company has established a Compliance Program for the Protection of Personal Information. In order to ensure that this program functions effectively, all directors, managers, employees, temporary staff, and part‑time staff will work together with a constant awareness of the importance of personal information protection and will act accordingly.

From this standpoint, the Company has formulated both a Personal Information Protection Policy and a Privacy Policy, which clarify our fundamental approach and standards for handling personal information. Through these policies, we will implement thorough management practices and continue to earn the trust of our customers.

The Privacy Policy consists of:
・a Global Common Policy applicable to customers worldwide, and
・Country/Region‑Specific Sections that reflect the legal requirements of particular jurisdictions.

Even for customers located in regions not specifically covered in the Country/Region‑Specific Sections, the Company will handle personal information appropriately in accordance with the applicable laws of the relevant jurisdiction. Please note that the Country/Region‑Specific Sections provide examples of major legal frameworks and do not represent an exhaustive list of all laws and regulations the Company must comply with.

PERSONAL INFORMATION PROTECTION POLICY

The Company complies with all applicable Japanese laws, governmental guidelines, and other relevant standards concerning the handling of personal information obtained through all of our business activities, as well as personal information of our employees and related personnel. Furthermore, the Company has established a Personal Information Protection Management System based on the “Guidelines for Establishing and Operating a Personal Information Protection Management System under the Privacy Mark System,” which conforms to the Japanese Industrial Standard JIS Q 15001. Through this system, the Company ensures the proper protection of personal information.
When acquiring and using personal information, the Company will clearly specify the purposes of use. The Company will not handle personal information beyond the scope necessary to achieve the specified purposes (i.e., no use for unintended purposes). The Company will also implement appropriate management measures to prevent any use outside the stated purposes.
The Company will not provide acquired personal information to any third party without the consent of the individual concerned, unless permitted or required by applicable laws and regulations. However, the Company may provide personal information to service providers—such as Shopify, payment service providers, and delivery companies—to the extent necessary for the provision of our services. In such cases, the Company will manage the information appropriately in accordance with applicable laws and regulations.
When the Company receives complaints or inquiries regarding the handling of personal information, we will promptly investigate the facts and respond in good faith within a reasonable period of time.
To ensure the proper management of acquired personal information, the Company will implement organizational, personnel‑related, physical, and technical security measures to prevent and remedy any leakage, loss, or damage of personal information.
Taking into account changes in social conditions and the business environment, the Company will continuously review and improve its Personal Information Protection Management System and its efforts to protect personal information.

Definition of “Personal Information”

“Personal Information” refers to information relating to an individual, including but not limited to: name, date of birth, age, gender, address (including billing and shipping addresses), telephone number, email address, employer, department, work address, work telephone number, family structure, hobbies, preferences, credit card information (not retained directly when using payment processing services), bank account numbers, payment account information such as PayPal, Apple Pay, and Google Pay (for integration purposes), purchase history (order dates, purchased items, purchase amounts), items in the shopping cart, browsing and click history on the site, IP address, cookie information, device information (browser type, operating system, etc.), location information (when necessary), identifiers or strings assigned to individuals, information on websites visited, details of complaints, inquiries, customer support history, reviews, feedback, and any other information that can identify or may identify a specific individual, whether alone or in combination with other information. Customers under the age of thirteen (13) are not permitted to use this website.

Established: March 1, 2005
Revised: May 1, 2023
LIHIT LAB., INC.
President and CEO: Hirokazu Tanaka

Contact for Inquiries Regarding This Personal Information Protection Policy
LIHIT LAB., INC.
E-mail: info-global1938@lihit-lab.co.jp
You may also submit inquiries through the “Contact Us” page on our website.

PUBLIC NOTICE REGARDING PERSONAL INFORMATION

PRIVACY POLICY

Global Common Privacy Policy

Purposes of Use of Personal Information
The Company publicly discloses the purposes of use for personal information over which we have the authority to respond to requests for disclosure and other related actions. We use such information only within the scope necessary to achieve the business activities and purposes described below.

(1)Business Activities
Manufacturing and sale of office supplies
Leasing and related real estate activities
All ancillary operations related to the above

(2)Purposes of Use
Personal information of customers and business partners may be used for the following purposes:
To provide information regarding our products and services
To sell, provide, process orders, handle payments, and arrange shipment of products and services
To manage purchase history and to create and manage customer accounts
To distribute newsletters and email communications
To provide coupons, promotional offers, and campaign information
To customize the website experience (including retargeting advertisements)
To send invitations to seminars, exhibitions, and events
To provide support for products and services (order status, defective product handling, etc.)
To respond to inquiries
To manage reviews and feedback
To detect and prevent fraudulent orders and payments, and to ensure account security
To conduct product development, surveys, and data analysis
To perform contractual obligations For business meetings, communications, and coordination
To comply with tax and legal obligations and to respond to requests from government authorities

(3)Types of Personal Information Collected
The Company collects the following categories of personal information to the extent necessary to achieve the purposes above.

Information obtained directly from customers:
Name, address, telephone number, email address
Shipping address information
Order information and purchase history
Inquiry details
Account registration information

Information collected automatically (via cookies, etc.):
IP address, browser information, device information
Browsing history and click history
Behavioral data collected through cookies, web beacons, etc.
Analytics data provided by Shopify

Information obtained from third parties:
Payment status from payment service providers
Delivery information from shipping carriers
Analytics data from advertising partners
SNS login information
Security Measures for the Protection of Personal Data
The Company complies with applicable laws and guidelines and implements necessary and appropriate measures (“Security Measures”) to prevent leakage, loss, or damage of personal data and to ensure its secure management.

(1)Establishment of Basic Policy
To ensure the proper handling of personal data, the Company has established a basic policy titled “Personal Information Protection Policy” (https://www.eng.lihit-lab.com/privacy-policy/). Specific methods for collecting, using, and managing personal data are governed by this Privacy Policy.

(2)Development of Internal Rules
The Company has established internal rules that define methods for handling personal data, the roles and responsibilities of managers and staff, and related procedures.

(3)Organizational Security Measures
The Company appoints a Personal Information Protection Manager responsible for overseeing the handling of personal information.
We maintain a Personal Information Protection Management System and enforce internal controls. Employees (including contract and temporary staff) are required to comply with internal rules related to security measures.
When violations or potential violations are identified, employees must report them to the responsible manager. When outsourcing operations involving personal information, the Company conducts strict supervision to ensure that contractors maintain appropriate security measures.

(4)Personnel Security Measures
The Company provides regular training and education to employees regarding the proper handling of personal information.

(5)Physical and Technical Security Measures
Access to areas where personal data is handled is controlled for employees and third parties. Documents, media, and equipment containing personal information are stored securely to prevent theft. Access controls, antivirus measures, anti-malware measures, and system monitoring are implemented for systems handling personal data.
Examples:
Prohibition of storing personal data outside designated storage locations
High level password authentication policies
Logging and analysis of access and operation history

(6)Understanding External Environments
The Company uses services provided by Shopify Commerce Singapore Pte. Ltd. as the e commerce platform for our global online store (https://global-store.lihit-lab.com/). Personal data submitted by customers is stored and processed on servers distributed across multiple countries managed by Shopify (primarily Canada, the United States, and other regions). Shopify uses an international data transfer framework and selects optimal data centers based on customer location. The Company assesses the personal data protection systems of Singapore (Shopify’s location) and the countries/regions where data is stored, and implements appropriate safeguards such as Standard Contractual Clauses (SCCs).
For details, please refer to: https://help.shopify.com/en/manual/privacy-and-security/privacy/international-data-transfers/onward-transfers?utm_source=chatgpt.com
Shopify’s policies:
Privacy Policy: https://www.shopify.jp/legal/privacy
Terms of Service: https://www.shopify.com/jp/legal/terms#DataProtection (shopify.com in Bing)
For an overview of foreign data protection systems, refer to the Personal Information Protection Commission (PPC): https://www.ppc.go.jp/personalinfo/legal/kaiseihogohou/#gaikoku (ppc.go.jp in Bing)
Procedures for Disclosure, Correction, and Other Requests
The Company accepts requests from individuals regarding retained personal data, including disclosure, notification of purpose of use, correction, suspension of use, cessation of third party provision, and disclosure of third party provision records (“Disclosure Requests”).
Contact for Disclosure Requests: Please submit your request via email to the address below.
Email: info-global1938@lihit-lab.co.jp
Please note that we do not accept in person requests at our offices.
Inquiries and Complaints Regarding Personal Information
For inquiries or complaints regarding the handling of personal information, please contact:
LIHIT LAB., INC
Email: info-global1938@lihit-lab.co.jp
You may also submit inquiries through the “Contact Us” page on our website.
Handling of Information on Our Website
The Company implements appropriate technical and organizational measures based on Shopify’s security standards to prevent leakage, loss, or alteration of personal information on our website (“Company Website”). We automatically collect and process information related to website users (IP address, browser information, device information, access logs, cookies, etc.) for the following purposes:
i To detect unauthorized access and ensure security
ii To analyze access status and improve the website
iii To manage sessions in web forms
iv To integrate with social media through embedded content (e.g., YouTube) and share buttons The Company does not link this information to personal information. However, depending on the user’s browsing environment, access data (date/time, device environment, etc.) may be automatically transmitted to external services such as social media platforms, either in identifiable or anonymized form. The Company Website integrates with the following external services. Please refer to each provider’s privacy policy for details:

X (formerly Twitter)
X Corp. https://twitter.com/ja/privacy
Instagram / Facebook
Meta Platforms, Inc. https://about.meta.com/ja/actions/protecting-privacy-and-security/
(about.meta.com in Bing)
YouTube
Google Inc. https://www.youtube.com/intl/ALL_jp/howyoutubeworks/user-settings/privacy/
(youtube.com in Bing)
Google Analytics
Google Inc.
Purpose: Usage analysis
Privacy Policy: https://policies.google.com/privacy?hl=ja (policies.google.com in Bing)
Data collection details: https://www.google.com/intl/ja/policies/privacy/partners
(google.com in Bing)
Optout: https://policies.google.com/privacy?hl=ja#infodelete (policies.google.com in Bing)

Users may disable cookies and tracking technologies through their browser settings or via external service providers’ websites. When personal information is collected through inquiry forms or other procedures on the Company Website, the purposes of use will be clearly indicated, and consent will be obtained before submission. Such information will be managed appropriately in accordance with our Personal Information Protection Policy.
Provision of Personal Information to Third Parties
(1) The Company may provide personal information to the following entities:
Shopify (e commerce platform)
Payment service providers (e.g., PayPal)
Delivery companies (e.g., DHL)
Advertising partners (e.g., Google, Meta)
When disclosure is required by law
(2) The Company does not “sell” personal information as defined under the CCPA.
Information Obtained from External Services (SNS Login)
The Company may offer login functionality through external services such as Google, Facebook, Apple, and LINE. In such cases, we may receive account information (e.g., name, email address) from the relevant service. The scope of information obtained, and the purposes of use will be clearly indicated on the login screen, and processing will occur only with customer consent.
SNS login may involve the transfer of personal data outside the EU (e.g., to Japan or the United States). The Company implements appropriate safeguards, including Standard Contractual Clauses (SCCs), in accordance with the GDPR.
International Data Transfers (GDPR)
The Company may transfer personal data outside the EU (e.g., to Japan or the United States). In such cases, we implement appropriate safeguards—including contractual protections such as SCCs, technical measures such as encryption, and organizational access controls—to ensure GDPR compliant protection.
Retention Periods for Personal Information
The Company retains personal information only for the period necessary to achieve the purposes of use or as required by applicable laws.
Main retention periods:
Account information: While the account remains active and for 2 years after account cancellation
Order information: 10 years (in accordance with accounting and tax laws)
Cookie data: 1–24 months (varies by cookie type)
Information required to be retained for longer periods under applicable laws (e.g., transaction records, accounting records) will be stored accordingly.
Account Deletion and Erasure of Personal Data
Customers may request deletion of their account and erasure of their personal data. The Company will respond without undue delay in accordance with applicable laws.
However, information required to be retained under accounting, tax, fraud prevention, or other legal obligations may be stored for the legally mandated period.
Requests for account deletion may be submitted through the Contact Form. Customers may unsubscribe from newsletters at any time using the unsubscribe link included in each email.
Links to External Sites
Links on this website may direct users to third party websites. The Company is not responsible for the privacy practices of such third parties, and their handling of personal information is governed by their respective privacy policies. GDPR and CCPA

For more information, please refer to: https://help.shopify.com/ja/manual/privacy-and-security/privacy/gdpr/comply-with-gdpr
https://help.shopify.com/ja/manual/promoting-marketing/shopify-audiences/data-and-privacy/state-privacy-law-compliance
Effective Date: September 4, 2026

Cookie Policy
For details, please refer to: Shopify Cookie Policy – Shopify Japan Effective Date: September 4, 2026
Revisions to This Privacy Policy
This Privacy Policy may be revised due to changes in laws or other circumstances. Revised versions will take effect upon publication on this website.

Country/Region‑Specific Privacy Policy Sections

Customers in the EU/EEA and the United Kingdom (GDPR / UK GDPR)
For customers located in the EU/EEA and the United Kingdom, the GDPR/UK GDPR applies. The Company processes personal data of customers in these regions based on the following legal grounds under the GDPR/UK GDPR.
(1)Legal Bases for Processing
Performance of a contract
Legitimate interests
Legal obligations
Consent (e.g., for marketing activities)
(2)Your Rights
Customers have the following rights under the GDPR/UK GDPR:
Right of access
Right to rectification
Right to erasure (“right to be forgotten”)
Right to restriction of processing
Right to data portability
Right to object
Right to refuse automated decision‑making, including profiling
(3)Right to Lodge a Complaint
Customers may lodge a complaint with the data protection supervisory authority in their country of residence.
Customers in the State of California (CCPA / CPRA)
For customers residing in California, the CCPA/CPRA applies.
The Company provides the following rights in accordance with the CCPA/CPRA.
(1)Your Rights
Right to access
Right to deletion
Right to opt‑out of “sale” or “sharing” of personal information (Do Not Sell/Share)
Right to non‑discrimination
(2)Categories of Personal Information Collected in the Past 12 Months
Examples include identifiers, commercial information, and internet activity information.
The Company does not “sell” or “share” personal information as defined under the CCPA/CPRA.
Customers in Japan (APPI)
For customers located in Japan, the Act on the Protection of Personal Information (APPI) applies. The Company handles personal information appropriately in accordance with the APPI.
(1)Your Rights
Right to request disclosure
Right to request correction
Right to request suspension of use
Right to request cessation of third‑party provision

Established: May 1, 2023
Last Revised: April 1, 2026

LIHIT LAB., INC. 1-1-22 Nohjinbashi, Chuo-ku, Osaka City, Osaka Prefecture
President and CEO: Hirokazu Tanaka
Data Protection Officer: General Manager of Sales Division