Privacy policy
Last Updated: September 6, 2026
This Privacy Policy describes how Yumi Harada, trading as kasane ("We", "Us", or "Our") collects, uses, and discloses your personal information when you visit, use our services, make a purchase from kasane.uk, or otherwise communicate with us.
Our store is powered by Shopify, which enables us to provide our services to you. We are committed to protecting your privacy under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Please read this policy carefully to understand how we handle your data.
Personal Information We Collect
Depending on how you interact with our store, we collect and process the following categories of personal information:
- Contact Details: Your name, billing address, shipping address, phone number, and email address.
- Financial Information: Credit card, debit card, transaction details, form of payment, and payment confirmations. All payments are handled securely via encrypted third-party gateways; we do not store raw card numbers.
- Account Information: If you register an account, we collect your username, encrypted password, and account preferences.
- Transaction Information: Details about the items you view, place in your cart, add to a wishlist, or purchase, return, exchange, or cancel.
- Review and Feedback Information: Content, ratings, and photos you provide when submitting a product review or customer feedback.
- Communications: Any information you provide when sending a customer support inquiry or interacting with us via email.
- Device and Usage Information: Information automatically collected via cookies and tracking technologies about your device, browser, network connection, IP address, and how you navigate our site.
Sources of Personal Information
We obtain your personal information through the following methods:
- Directly from you: When you manually fill out forms, create an account, purchase products, sign up for back-in-stock alerts, submit product reviews, or contact our support team.
- Automatically through cookies: As you navigate kasane.uk, our platform automatically registers technical device data and usage statistics, subject to your cookie consent preferences.
- From trusted service providers: We receive order updates and payment confirmations from our secure payment gateways and verification providers.
How We Use Your Personal Information (Legal Basis)
The UK GDPR requires us to state the explicit legal basis for processing your data. We utilize your data for the following reasons:
1. Performance of a Contract: To process payments, fulfill orders, handle shipping, manage returns/exchanges, and keep you updated regarding your purchases.
2. Consent: To send you marketing communications (emails or text messages), publish customer reviews and ratings, send requested back-in-stock notifications via third-party tools, and load non-essential marketing, advertising, and analytics cookies (including via Google, Meta, and Pinterest services). You can withdraw consent at any time.
3. Legitimate Interests: To maintain security, authenticate your account, prevent fraud, evaluate store usage trends, and improve our general product offerings.
4. Legal Obligations: To comply with applicable UK tax laws, commercial bookkeeping regulations, or respond to valid court orders and law enforcement requests.
Cookies and Similar Technologies
Cookies are small packets of data placed on your device to keep track of items in your cart, remember your settings, and provide analytics data.
We use Google Analytics features, including Google Signals, which allow us to compile cross-device reporting, audience demographics, and remarketing data. If you are signed in to your Google account, Google may associate your visit to kasane.uk with your Google account data to provide personalized advertising across devices. You can manage or opt out of personalized advertising by visiting your Google My Ad Center settings.
For a detailed breakdown of the exact cookies we use and to adjust your preferences, please visit our dedicated Cookie Policy.
Do Not Track Signals
Please note that because there is no consistent industry-standard framework for recognizing "Do Not Track" signals, our system ignores these automated browser headers. Instead, we rely entirely on our explicit Customer Privacy Banner to capture your clear tracking preferences.
How We Disclose Personal Information
We share your data only with specific processors necessary to run our store. We do not sell your personal information. Disclosures include:
- Core Infrastructure Vendors: Primarily Shopify (our e-commerce host), along with specialized third-party applications required for explicit functionalities. This includes the 'REZ Preorder, Back In Stock' app (operated by REZ Commerce) and the Judge.me app (operated by Judge.me, whose privacy policy can be reviewed via their website).
- Advertising and Marketing Partners: Platforms like Meta Platforms, Inc. (for advertising, conversion tracking, and analytics via Meta tools), Google LLC (for product listings, shopping, and analytics via Google services), and Pinterest, Inc. (for social commerce, product catalog sync, and conversion tracking via Pinterest tools).
- Payment and Order Fulfillment Partners: Payment gateways, delivery services (couriers), and warehouse/logistics tools.
- Business Transfers: In connection with, or during negotiations of, any merger, sale of business assets, or financing of our business.
Relationship with Shopify
Our store is hosted by Shopify. Shopify processes your data to run the technical platform. Additionally, to help protect, secure, and improve our business operations, we utilize certain Shopify enhanced features that analyze structural trends across different merchants. In these specific circumstances, Shopify acts as an independent data controller. To learn more about how they manage this processing, please visit the Shopify Consumer Privacy Policy.
Cross-Border Data Transfers
Because kasane is hosted on Shopify and leverages integrated global apps and advertising services (such as 'REZ Preorder, Back In Stock', Judge.me, Meta, Google, and Pinterest), the data we collect may be transferred to, and processed in, countries outside the United Kingdom and the European Economic Area (EEA), such as Canada and the United States.
Whenever your data is transferred internationally to a country not recognized as providing adequate data protection by the UK government, we ensure it remains safe. These transfers are strictly protected by contractual frameworks including the UK International Data Transfer Agreement (IDTA), the UK Addendum to the Standard Contractual Clauses, or are fully covered under the Shopify Data Processing Addendum (DPA) agreed upon by our processors.
Automated Decision-Making
We utilize automated systems via Shopify to screen transactions for potential risk or fraud. This automated analysis checks factors like IP addresses and billing information against known fraud risk indicators. If our system blocks a transaction automatically, it does not have a legal effect on you, but it may prevent you from completing a purchase. If your transaction is restricted via this automated process, you have the right to challenge the decision and request a human review within 21 days of notification by contacting us at the email address below.
Security and Data Retention
We employ commercial SSL encryption and security practices to keep your data safe. However, no internet transmission is 100% secure. You are responsible for keeping your account credentials private.
We retain your transactional data only for as long as required to maintain your customer account, fulfill our services, or comply with statutory UK accounting and tax retention periods (typically 6 years following a purchase transaction).
Your Statutory Rights
As a resident of the United Kingdom, you possess the following rights regarding your personal information under the UK GDPR:
- Right to Access: Request a copy of all personal information we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure (To be Forgotten): Request deletion of your data where it is no longer legally necessary for us to retain it.
- Right to Restrict or Object to Processing: Ask us to limit or stop processing your data. You have an absolute right to object to the processing of your data for direct marketing purposes at any time.
- Right to Portability: Request that your data be packaged up and transferred to a third party.
- Right to Withdraw Consent: Instantly cancel your marketing signatures, review publication permissions, or non-essential cookie permissions.
To exercise these rights, contact us at the email address below. We will verify your identity before fulfilling the request. If you utilize an authorized agent to file a request on your behalf, we will require direct verification or a legal power of attorney to confirm they have your explicit authorization.
Children's Data
Our services are not intended for children under the age of 13. We do not knowingly collect personal data from children. If you believe your child has provided us with data without your parental consent, please contact us immediately so we can expunge it from our systems.
Complaints
If you have any complaints regarding our handling of your data, please contact us directly so we can resolve the issue. You also have the legal right to lodge an official complaint directly with the UK data protection regulatory authority, the Information Commissioner's Office (ICO), via their website: ico.org.uk.
Contact Us
For any questions about our privacy policies, or to exercise your rights, please reach out to the Data Controller:
Legal Entity: Yumi Harada, trading as kasane
ICO Registration Number: ZC202287
Business Address:
kasane,
Prime Apartments, 483 Green Lanes,
London,
N13 4FG,
United Kingdom
Email Address: info@kasane.uk
Contact Page: https://kasane.uk/policies/contact-information