Privacy Policy

Last updated: 15 August 2026

This policy explains what personal data HARAJUKU FASHION collects, on what legal basis, who receives it, how long it is kept, and what you can require of us. It applies to harajuku-fashion.com and to any order placed through it.

1. Data Controller

Trading nameHARAJUKU FASHION Legal entityDAJE, entreprise individuelle registered in France SIREN841 395 429 Registered officeNarbonne, France Contactcontact@harajuku-fashion.com

We are not required to appoint a Data Protection Officer. All privacy requests are handled directly at the address above.

2. Data We Collect

Data you give us

  • Identity and contact — first name, last name, email address, telephone number.
  • Delivery — postal address, and where required by the carrier, additional delivery instructions.
  • Order — items ordered, sizes, amounts, order history, correspondence with customer service.
  • Account — where you create one: login credentials and saved preferences.
  • Marketing — where you subscribe: email address and consent record.

Data collected automatically

  • Technical — IP address, browser type, device, operating system, referring page.
  • Usage — pages viewed, time on page, products consulted, cart activity.

Data we never collect

We do not receive or store your card number, expiry date or security code. Payment data is captured directly by the payment provider and never transits through our systems. We do not knowingly collect data from anyone under 16.

3. Purposes and Legal Bases

Fulfilling your orderPerformance of a contract — Art. 6(1)(b) GDPR Customer supportPerformance of a contract Invoicing and accountingLegal obligation — Art. 6(1)(c) Fraud preventionLegitimate interest — Art. 6(1)(f) Marketing emailsConsent — Art. 6(1)(a), withdrawable at any time Analytics and improvementConsent, via the cookie banner

4. Recipients

Your data is shared only with parties strictly necessary to operate the store, each bound by a data processing agreement:

  • E-commerce platform — Shopify International Limited, Ireland.
  • Print and fulfilment partners — receive name, delivery address and item details only.
  • Carriers — receive delivery details for the purpose of delivery.
  • Payment providers — process the transaction as independent controllers.
  • Email provider — for order notifications and, where consented, marketing.
  • Public authorities — where disclosure is legally required.

We do not sell, rent or trade personal data. Ever.

5. International Transfers

Certain providers process data outside the European Economic Area, including in the United States. Such transfers are covered by an adequacy decision of the European Commission where one applies, or otherwise by the Commission's standard contractual clauses together with supplementary technical measures. A copy of the safeguards applied may be requested at the contact address above.

6. Retention Periods

Order and invoice records10 years from the end of the financial year, as required by French commercial law Customer accountFor as long as the account is active, then 3 years from last contact Prospect and marketing data3 years from last contact, or until you unsubscribe Support correspondence3 years from the close of the request Cookies and analytics13 months maximum

7. Security

The site is served exclusively over HTTPS. Access to administrative systems is restricted, individually authenticated and protected by two-factor authentication. Payment pages are operated by PCI-DSS compliant providers. Should a personal data breach occur presenting a risk to your rights, we will notify the CNIL within 72 hours and inform you directly where the risk is high.

8. Your Rights

Under Articles 15 to 22 of the GDPR you have the right to:

  • Access — obtain confirmation of processing and a copy of your data.
  • Rectification — correct inaccurate or incomplete data.
  • Erasure — have your data deleted, subject to our legal retention obligations.
  • Restriction — limit processing in the cases provided by law.
  • Portability — receive your data in a structured, machine-readable format.
  • Objection — object to processing based on legitimate interest, and to direct marketing at any time and without justification.
  • Post-mortem instructions — define directives on the fate of your data after death, under French law.

Write to contact@harajuku-fashion.com. We reply within one month, extendable by two months for complex requests. Proof of identity may be requested where there is reasonable doubt.

If you consider that your rights have not been respected, you may lodge a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or online at cnil.fr.

9. Changes

This policy may be updated to reflect changes in our processing or in applicable law. The version in force is the one published on this page, with its revision date. Material changes affecting your rights will be notified by email where we hold your address.