Last updated: October 26, 2025
Introduction
Cardster.net, operated by YourJapan Inc., (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website cardster.net and make purchases from us.
This Privacy Policy complies with:
- Japan’s Act on the Protection of Personal Information (APPI)
- U.S. privacy laws, including state-specific regulations
- General Data Protection Regulation (GDPR) for EU customers
- Other applicable international privacy laws
Information We Collect
2.1 Personal Information You Provide
We collect information that you voluntarily provide when you:
- Create an account
- Make a purchase
- Contact customer service
- Subscribe to our newsletter
- Participate in surveys or promotions
This information may include:
- Name
- Email address
- Mailing address
- Phone number
- Payment information (processed securely by our third-party payment providers)
- Date of birth (if required for age verification)
- Account credentials
2.2 Automatically Collected Information
When you visit our Site, we automatically collect certain information, including:
- IP address
- Browser type and version
- Device information
- Operating system
- Referring URLs
- Pages viewed and time spent on pages
- Click-stream data
- Cookies and similar tracking technologies
2.3 Information from Third Parties
We may receive information about you from:
- Payment processors
- Shipping carriers
- Marketing partners
- Social media platforms (if you connect your account)
- Fraud prevention services
How We Use Your Information
We use your information for the following purposes:
3.1 Order Processing and Fulfillment
- Processing and completing your orders
- Sending order confirmations and updates
- Arranging shipping and delivery
- Processing payments and preventing fraud
- Handling returns and refunds
3.2 Account Management
- Creating and managing your account
- Authenticating your identity
- Providing customer support
- Communicating about your account
3.3 Marketing and Communications
- Sending promotional emails and newsletters (with your consent)
- Personalizing your shopping experience
- Conducting market research and surveys
- Informing you about new products and special offers
3.4 Site Improvement and Analytics
- Analyzing Site usage and trends
- Improving our products and services
- Developing new features
- Conducting research and analytics
3.5 Legal and Security
- Complying with legal obligations
- Enforcing our Terms of Service
- Protecting against fraud and security threats
- Resolving disputes
- Protecting our rights and property
Legal Basis for Processing (GDPR)
For users in the European Economic Area, we process your personal data based on:
- Contract performance: Processing necessary to fulfill our contract with you
- Legitimate interests: Our business interests in providing and improving our services
- Consent: Where you have given explicit consent
- Legal obligation: Compliance with applicable laws
Cookies and Tracking Technologies
5.1 Types of Cookies We Use
- Essential Cookies: Necessary for Site functionality
- Performance Cookies: Help us understand how visitors use our Site
- Functional Cookies: Remember your preferences
- Targeting Cookies: Deliver relevant advertisements
5.2 Managing Cookies
You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our Site.
5.3 Do Not Track
Some browsers have “Do Not Track” features. Currently, we do not respond to Do Not Track signals.
How We Share Your Information
We do not sell your personal information. We may share your information with:
6.1 Service Providers
Third-party vendors who perform services on our behalf:
- Payment processors
- Shipping carriers
- Email service providers
- Web hosting providers
- Analytics providers
- Marketing platforms
- Customer service platforms
6.2 Business Transfers
In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity.
6.3 Legal Requirements
We may disclose your information when required by law or to:
- Comply with legal processes
- Respond to government requests
- Enforce our Terms of Service
- Protect our rights, privacy, safety, or property
- Prevent fraud or security threats
6.4 With Your Consent
We may share your information for other purposes with your explicit consent.
International Data Transfers
7.1 Cross-Border Transfers
As we are based in Japan and serve international customers, your information may be transferred to and processed in Japan or other countries where our service providers operate.
7.2 Safeguards
We implement appropriate safeguards for international transfers, including:
- Standard contractual clauses
- Adequacy decisions
- Privacy Shield frameworks (where applicable)
- Other legally approved mechanisms
7.3 U.S. Customers
For U.S. customers, your data may be processed in Japan and other countries. By using our Site, you consent to this transfer.
7.4 EU Customers
For EU customers, we ensure that data transfers comply with GDPR requirements through appropriate safeguards.
Data Security
8.1 Security Measures
We implement appropriate technical and organizational measures to protect your information, including:
- Encryption of sensitive data (SSL/TLS)
- Secure payment processing
- Access controls and authentication
- Regular security assessments
- Employee training on data protection
8.2 Limitations
No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
Data Retention
We retain your personal information for as long as necessary to:
- Fulfill the purposes described in this Privacy Policy
- Comply with legal obligations
- Resolve disputes
- Enforce our agreements
Specific retention periods:
- Account information: Duration of account plus 180 days
- Transaction records: 180 days for accounting and tax purposes
- Marketing data: Until you unsubscribe or request deletion
Your Privacy Rights
10.1 Rights for All Users
You have the right to:
- Access your personal information
- Correct inaccurate information
- Request deletion of your information (subject to legal obligations)
- Opt-out of marketing communications
- Object to certain processing activities
10.2 Additional Rights for EU Users (GDPR)
- Right to data portability
- Right to restriction of processing
- Right to object to automated decision-making
- Right to lodge a complaint with a supervisory authority
10.3 Additional Rights for California Users (CCPA/CPRA)
- Right to know what personal information is collected
- Right to know whether personal information is sold or disclosed
- Right to opt-out of the sale of personal information (we do not sell personal information)
- Right to non-discrimination for exercising privacy rights
- Right to correct inaccurate information
- Right to limit use of sensitive personal information
10.4 Additional Rights for Other U.S. State Residents
Residents of Virginia, Colorado, Connecticut, Utah, and other states with privacy laws may have additional rights similar to those described above.
10.5 Exercising Your Rights
To exercise your privacy rights, please contact us at:
- Email: info@cardster.net
- Privacy Request Form: Contact Us
- Mail:
YourJapan Inc.
3F Kanda Araki Building, 1-14-6 Kanda Sudacho,
Chiyoda-ku, Tokyo 101-0041, JAPAN
We will respond to your request within the timeframe required by applicable law (typically 30-45 days).
Children’s Privacy
Our Site is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete it promptly. If you believe we have collected information from a child, please contact us immediately.
Third-Party Links
Our Site may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to read their privacy policies.
Marketing Communications
13.1 Opt-In
We will only send you marketing communications if you have consented to receive them.
13.2 Opt-Out
You may opt-out of marketing communications at any time by:
- Clicking the “unsubscribe” link in emails
- Updating your account preferences
- Contacting us directly
13.3 Transactional Communications
Even if you opt-out of marketing, we will still send you transactional communications related to your orders and account.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the updated policy on our Site with a new “Last Updated” date
- Sending you an email notification (for significant changes)
- Obtaining your consent where required by law
Your continued use of the Site after changes constitutes acceptance of the updated Privacy Policy.
Contact Information
15.1 General Privacy Inquiries
For questions about this Privacy Policy or our privacy practices:
Email: info@cardster.net
Address:
YourJapan Inc.
3F Kanda Araki Building, 1-14-6 Kanda Sudacho,
Chiyoda-ku, Tokyo 101-0041, JAPAN
Jurisdiction-Specific Provisions
16.1 Japan
We comply with Japan’s Act on the Protection of Personal Information (APPI). For inquiries regarding personal information handling in Japan, please contact us at the address above.
16.2 United States
We comply with applicable U.S. federal and state privacy laws. State-specific rights are described in Section 10.
16.3 European Union
We comply with the General Data Protection Regulation (GDPR). EU-specific rights are described in Section 10.
16.4 Other Jurisdictions
We comply with applicable privacy laws in all jurisdictions where we operate. If you have questions about your rights under local law, please contact us.