Privacy Policy

1. Introduction

This Privacy Policy explains how Thiri Mingalar Zay — Japan Branch ("we," "us," or "our") collects, uses, discloses, and protects personal information when you use the Thiri Mingalar Zay mobile application (the "App") and our website (together, the "Services").

By creating an account or using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the Services.

We process personal information in accordance with applicable laws, including the Act on the Protection of Personal Information (APPI) of Japan.

2. Data Controller / Developer Contact

The data controller responsible for your personal information is:

Thiri Mingalar Zay — Japan Branch
1-2-3 Placeholder Building, Shinjuku, Tokyo 160-0000, Japan
Email: support@thirimingalarzay.jp
Phone: +81-3-1234-5678

For privacy inquiries, data access requests, or account deletion requests, contact us at support@thirimingalarzay.jp. We aim to respond within 30 days.

3. Summary of Data We Collect

The table below summarizes the main categories of data collected through the App. This summary is provided to meet transparency requirements for the Apple App Store and Google Play Store.

4. Information We Collect in Detail

4.1 Information You Provide

• Account information: email address and password when you register or sign in. Passwords are never stored in plain text.
• Profile information: name or other details you choose to add to your account.
• Order information: shipping and billing addresses, phone number, products ordered, and delivery instructions.
• Payment information: payment card details are entered directly into our third-party payment processor's secure interface. We do not store full payment card numbers on our servers.
• Communications: messages you send to customer support, including any information you include in those messages.

4.2 Information Collected Automatically

• Device type, operating system, unique device identifiers, and app version
• IP address and approximate location (country or region level)
• App usage events necessary to operate the Services (e.g., login, checkout)
• Crash reports and diagnostic data to maintain app stability

4.3 Device Permissions

The App may request the following device permissions. You can manage permissions in your device settings. Denying non-essential permissions may limit certain features.

• Internet / network access: required to browse products, sign in, and place orders.
• Push notifications (optional): if enabled, to send order status updates and service announcements. You may disable notifications in device settings.
• Photo library / camera (optional): only if you choose to attach photos when contacting support (e.g., damaged item reports). We do not access photos without your action.

4.4 Information We Do Not Collect

We do not intentionally collect:

• Health or medical data
• Precise GPS location or continuous location tracking
• Contacts, SMS, call logs, or microphone/audio recordings
• Biometric data (Face ID / fingerprint data stays on your device)
• Data from children under 18 years of age

5. How We Use Your Information

We use personal information to:

• Create, authenticate, and manage your email/password account
• Process, fulfill, and deliver your orders within Japan
• Send transactional messages (order confirmations, shipping updates)
• Provide customer support and respond to inquiries
• Detect, prevent, and address fraud, abuse, and security issues
• Improve, maintain, and debug the App and website
• Comply with legal, tax, and regulatory obligations

We do not use your personal information for cross-app or cross-site tracking for advertising purposes. We do not sell your personal information.

6. Legal Basis for Processing

We process personal information based on:

• Contract: to provide the Services and fulfill your orders
• Consent: where you opt in (e.g., optional notifications)
• Legitimate interests: to secure and improve the Services
• Legal obligation: where required by applicable law

7. How We Share Information

We do not sell, rent, or trade your personal information. We may share data with:

• Service providers who help us operate the Services (hosting, payment processing, email delivery, analytics or crash reporting if enabled), under contractual confidentiality and data protection obligations
• Shipping and logistics partners to deliver orders to your address in Japan
• Payment processors to process transactions securely under their own privacy policies
• Legal and regulatory authorities when required by law, court order, or to protect rights, safety, and security
• Business transfers in connection with a merger, acquisition, or sale of assets, with notice where required by law

8. Data Retention

We retain personal information only as long as necessary for the purposes described in this policy, including:

• Account data: while your account is active and for a reasonable period afterward to resolve disputes or comply with law
• Order and transaction records: as required for accounting, tax, and consumer protection obligations (typically up to 7 years where applicable)
• Support communications: as long as needed to resolve your inquiry
• Logs and diagnostics: for a limited period for security and troubleshooting, then deleted or anonymized

When data is no longer needed, we delete or anonymize it in accordance with our retention practices and applicable law.

9. Account and Data Deletion

If you create an account, you may request deletion of your account and associated personal data. This meets Apple App Store and Google Play requirements for apps that support account creation.

How to request deletion:

1. In the App: go to Account Settings → Delete Account (when available in your app version), or
2. By email: send a deletion request from your registered email address to support@thirimingalarzay.jp with the subject line "Account Deletion Request."

We will verify your identity before processing the request. Account deletion is typically completed within 30 days. Some information may be retained where required by law (e.g., order and tax records) or for legitimate business purposes such as fraud prevention, after which it will be deleted or anonymized.

10. Data Security

We implement appropriate technical and organizational safeguards, including:

• Password hashing and secure authentication
• Encryption in transit (HTTPS/TLS) for data sent between the App and our servers
• Access controls limiting employee access to personal data
• Regular review of security practices

No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

11. Your Privacy Rights

Depending on your location, you may have the right to:

• Access personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your account and personal data (see Section 9)
• Withdraw consent where processing is based on consent
• Object to or restrict certain processing
• Receive a copy of your data in a portable format, where applicable

To exercise these rights, contact support@thirimingalarzay.jp. We may need to verify your identity before fulfilling your request.

If you are located in the European Economic Area or United Kingdom, you may also have the right to lodge a complaint with your local data protection authority. Japan residents may contact us directly regarding APPI-related inquiries.

12. Cookies and Website Technologies

Our website may use essential cookies and similar technologies necessary for site operation and security. We do not use third-party advertising cookies on this landing website. If we introduce analytics cookies in the future, we will update this policy and, where required, obtain consent.

13. Third-Party Links and Services

The Services may contain links to third-party websites or services (such as payment providers). We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing personal information.

14. Children's Privacy

The Services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us at support@thirimingalarzay.jp and we will delete it promptly.

15. International Data Transfers

Your information may be processed in Japan and in other countries where our service providers operate. When we transfer data internationally, we take steps to ensure appropriate safeguards consistent with applicable law.

16. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page at https://thirimingalarzay.jp/privacy with an updated "Last updated" date. Where required by law or app store policies, we will provide additional notice (such as an in-app notification). Continued use of the Services after the effective date constitutes acceptance of the updated policy.

17. Contact Us

For privacy questions, data access requests, or account deletion requests:

Thiri Mingalar Zay — Japan Branch
1-2-3 Placeholder Building, Shinjuku, Tokyo 160-0000, Japan
Email: support@thirimingalarzay.jp
Phone: +81-3-1234-5678