Privacy policy
Privacy Policy
This is an English translation of the Japanese original. In case of discrepancy, the Japanese version prevails.
Rare Co., Ltd. (the "Company") will handle the personal information of customers obtained through the online store of its brand "EnSage" (ensage-tokyo.com, the "Site") appropriately as set out below, in compliance with the Act on the Protection of Personal Information (the "APPI") and other relevant laws, regulations and guidelines.
1. Business Information
- Business name: Rare Co., Ltd.
- Address: 2-17-4 Iwamotocho, Taigo Building II 3C, Chiyoda-ku, Tokyo 101-0047, Japan
- Personal Information Protection Manager: Ke Sen
- Contact: contact@ensage-tokyo.com
2. Information We Collect
The Company obtains the following information by lawful and fair means.
- Contact information such as name, address (billing and shipping), phone number and email address
- Account information (login information, settings, etc.)
- Information about orders and transactions (purchase, return, exchange and cancellation history, items added to cart, products viewed, etc.)
- Payment information (payment method, payment verification results, etc.). Card information such as credit card numbers is collected and managed directly by payment service providers, and the Company does not retain it.
- The content of communications in inquiries and customer support
- Subscription information for newsletters and similar communications
- Device and browser information, IP address, identifiers such as cookies, and browsing and usage history of the Site
3. Purposes of Use
The Company uses personal information within the scope of the following purposes.
- Accepting orders, shipping products, billing and processing payments, and handling returns and exchanges
- Communicating about order details, shipping status, etc.
- Responding to inquiries and providing customer support
- Creating and managing accounts and verifying identity
- Providing information about new products, campaigns, events, etc. (newsletters, etc.; you may unsubscribe at any time)
- Analyzing usage of the Site, improving services and products, and developing new services
- Delivering advertising tailored to your interests and measuring advertising effectiveness
- Preventing fraudulent orders and unauthorized access, and ensuring security
- Fulfilling legal obligations and protecting the Company's rights
Any change to the purposes of use will be made within a scope reasonably recognized as relevant to the purposes before the change, and the changed purposes will be published on the Site.
4. Provision to Third Parties
The Company will not provide personal information to third parties without your prior consent, except in the following cases.
- When required by law
- When necessary to protect a person's life, body or property and it is difficult to obtain the person's consent
- When especially necessary to improve public health or promote the sound growth of children and it is difficult to obtain the person's consent
- When it is necessary to cooperate with a national government agency, a local government, or a party entrusted by them in performing affairs prescribed by law
- When provided in connection with outsourcing as set out in the following section
- When provided in connection with succession of business due to a merger or other reasons
5. Outsourcing
The Company may outsource all or part of the handling of personal information to external businesses to the extent necessary to achieve the purposes of use. In such cases, the Company selects contractors appropriately and exercises necessary and appropriate supervision. Our main contractors are as follows.
- Online store operation and systems: Shopify Inc. and its group companies
- Payment processing: Payment service providers such as Shopify Payments (including Shop Pay), Apple Pay and Google Pay, and card companies
- Product delivery: Domestic and international delivery companies
- Email delivery: Klaviyo, Inc.
- Analytics and advertising: Google LLC (Google Analytics, Google Ads), Meta Platforms, Inc. (Meta Pixel)
6. Provision to Third Parties in Foreign Countries
In connection with the outsourcing described above, the Company may provide personal information to third parties in foreign countries as follows. By using the Site, you are deemed to consent to this.
- Canada and the United States: Shopify Inc. (Canada) and its group companies, Klaviyo, Inc. (US), Google LLC (US), Meta Platforms, Inc. (US), etc.
- People's Republic of China: The Company ships products from its group's own warehouses in Tokyo and in Guangzhou, China. For orders shipped from the Guangzhou warehouse, information necessary for delivery (name, address, phone number, order details, etc.) is handled at that warehouse and provided to local delivery companies responsible for delivery. Because the Guangzhou warehouse is located in a foreign country, this constitutes provision to a third party in a foreign country under the APPI.
- International shipments: Information necessary for delivery and customs clearance is provided to delivery companies and customs authorities in the destination country or region.
Information on the personal information protection systems of each country is available on the website of the Personal Information Protection Commission (https://www.ppc.go.jp/personalinfo/legal/kaiseihogohou/#gaikoku). A summary is as follows.
- Canada: Personal information is protected under the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and other laws.
- United States: There is no comprehensive federal personal information protection law, but there are sector-specific federal laws and state laws (such as the California Consumer Privacy Act).
- People's Republic of China: Personal information is protected under the Personal Information Protection Law and other laws, but there are systems that allow government agencies to collect information (such as the National Intelligence Law).
The above recipients either take measures corresponding to the eight principles of the OECD Privacy Guidelines or have agreed, by contract with the Company or otherwise, to take measures equivalent to those required under the APPI. For details, please contact our inquiry desk.
7. Security Control Measures
The Company takes the following measures to prevent leakage, loss or damage of personal information and otherwise to ensure its security.
- Basic policy: We have established this Policy to ensure the proper handling of personal information.
- Organizational measures: We have appointed a responsible person, clarified the persons handling personal information and the scope of information handled, and established a reporting system for violations of law, leaks or other incidents.
- Personnel measures: We provide necessary training regularly to employees who handle personal information.
- Physical measures: We take measures to prevent unauthorized persons from viewing personal information and to prevent theft or loss of equipment and documents.
- Technical measures: We have introduced access controls, SSL/TLS encryption of communications, and mechanisms to prevent unauthorized access.
- Understanding the external environment: When handling personal information in a foreign country, we take security measures after understanding that country's personal information protection system.
8. Cookies, Analytics and Advertising
The Site uses cookies and similar technologies to provide site functions (cart, login, etc.), analyze usage, and deliver and measure advertising. The information obtained through these does not include information that identifies a specific individual, such as a name.
- Google Analytics (Google LLC): Used to analyze usage of the Site. For details, see https://policies.google.com/technologies/partner-sites.
- Google Ads (Google LLC): Used to deliver advertising and measure its effectiveness.
- Meta Pixel (Meta Platforms, Inc.): Used to deliver advertising on Facebook and Instagram and measure its effectiveness.
- Klaviyo (Klaviyo, Inc.): Used for email delivery and for providing information based on your activity on the Site.
You can disable cookies in your browser settings. If a cookie settings (consent) screen is displayed on the Site, you can also refuse cookies used for analytics and marketing purposes from that screen. However, if you disable cookies, some functions of the Site may not be available.
9. Requests for Disclosure, Correction, Suspension of Use, etc.
You may request, with respect to your personal information held by the Company, notification of the purposes of use, disclosure (including disclosure of records of provision to third parties), correction, addition or deletion of its content, suspension of use or erasure, and suspension of provision to third parties.
- How to request: Please email our inquiry desk (contact@ensage-tokyo.com), stating the details of your request.
- Identity verification: We verify your identity using the name, email address, order number, etc. used at the time of your order. For requests by an agent, we will ask for documents that confirm the authority of the agent.
- Response: After verifying your identity, we will respond without delay in accordance with the law, in principle by email.
- Fee: Free of charge.
If we cannot comply with a request under the provisions of law, we will explain the reason. You may also unsubscribe from newsletters via the unsubscribe link in each email.
10. Minors
If you are a minor, please use the Site with the consent of a parent or other legal guardian.
11. Revisions to This Policy
The Company may revise this Policy in response to changes in laws, changes in business, or other reasons. Any material changes will be announced on the Site. The revised Policy takes effect when it is posted on this page.
12. Inquiries
For inquiries or complaints regarding this Policy and the handling of personal information, please contact:
- Rare Co., Ltd. (EnSage)
- 2-17-4 Iwamotocho, Taigo Building II 3C, Chiyoda-ku, Tokyo 101-0047, Japan
- Personal Information Protection Manager: Ke Sen
- Email: contact@ensage-tokyo.com
Established: October 23, 2026