Back to home

Privacy policy

Privacy Policy

Last Updated: August 3, 2026

Oishii! Hokkaido! (Operated by OTis Co., Ltd.; hereinafter referred to as "the Company") operates this website, online store, and related information, content, functions, products, and services (hereinafter collectively referred to as "the Service").

The Service is operated using the e-commerce platform provided by Shopify Inc. and its affiliates (hereinafter referred to as "Shopify").

This Privacy Policy explains how the Company collects, uses, manages, and provides your personal information when you browse or use the Service, purchase products, engage in other transactions, or contact the Company.

In the event of any conflict between the Terms of Use and this Privacy Policy regarding the handling of personal information, this Privacy Policy shall prevail.

Please read this Privacy Policy carefully before using the Service.

1. Definition of Personal Information

In this Privacy Policy, "Personal Information" refers to information that can identify an individual customer, or information that can identify an individual customer when cross-referenced with other information.

Information that has been appropriately processed so that individuals cannot be identified and personal information cannot be restored, or statistical information that has no correspondence with individuals, will be handled in accordance with applicable laws and regulations.

2. Personal Information Collected by the Company

In providing the Service, the Company may collect or process the following personal information.

2-1. Contact Information

  • Name

  • Shipping address

  • Billing address

  • Phone number

  • Email address

  • Country or region

  • Postal code

2-2. Order and Transaction Information

  • Order number

  • Purchased products and quantities

  • Product price

  • Shipping costs

  • Order date and time

  • Payment status

  • Shipping status

  • Information regarding returns, refunds, and cancellations

  • Past order history

  • Shipping tracking number

  • Shipping destination country or region

  • Expected return date and other information necessary to adjust the shipping timing

  • Information related to customs duties, import taxes, and customs clearance

2-3. Payment Information

  • Payment method used

  • Information regarding payment approval or denial

  • Transaction identification information

  • Information regarding refunds

  • Other information necessary for payment processing

Payment information such as credit card numbers is, in principle, processed by Shopify Payments or other payment providers; the Company does not directly hold the full card number.

2-4. Account Information

  • Email address used for login

  • Account authentication status

  • Various account settings

  • My Page usage history

  • Cancellation requests and other account operation history

2-5. Communications with the Company

  • Inquiry details

  • Emails and other communications with customer support

  • Photos or documents provided regarding missing items, misdeliveries, etc.

  • Complaints, requests, and response history

2-6. Device and Usage Information

  • IP address

  • Information about the device, OS, and browser used

  • Cookies and other identifiers

  • Access date and time

  • Pages viewed

  • History of adding items to cart, purchases, and other operations

  • Referrer URL

  • Method of access and usage status of the Service

  • Information regarding access or orders via affiliated accommodation facilities or other referral sources

3. Methods of Collecting Personal Information

The Company may collect personal information through the following methods.

3-1. Information Collected Directly from Customers

You may be asked to provide personal information when you perform the following actions:

  • Ordering a product

  • Creating an account

  • Registering a shipping or billing address

  • Contacting the Company

  • Submitting applications for cancellations, refunds, etc.

  • Registering for email distributions, etc.

  • Entering information through the Service in any other way

3-2. Information Collected Automatically Through the Service

When you access or use the Service, we may automatically collect device information, usage status, access paths, etc., through Cookies, logs, and other similar technologies.

3-3. Information Obtained from Shopify, Payment Providers, and Contractors

The Company may obtain information necessary for providing the Service from Shopify, payment providers, shipping providers, cloud service providers, and other contractors.

3-4. Information Obtained via Affiliated Accommodation Facilities, etc.

If you use the Service via a QR code or dedicated URL placed at an affiliated accommodation facility, etc., we may obtain information necessary to identify said facility or other referral source, as well as information regarding the access path.

4. Purposes of Using Personal Information

The Company uses the obtained personal information for the following purposes.

4-1. Product Sales and Provision of the Service

  • Accepting and confirming orders

  • Processing and confirming payments

  • Procurement, preparation, packing, and shipping of products

  • Calculating shipping costs

  • Confirming shipping destinations and shipping feasibility

  • Adjusting shipping timing based on the provided expected return date

  • Confirming shipping status

  • Order confirmations, shipping notifications, and other communications

  • Cancellations, refunds, and other transaction processing

  • Creation and management of customer accounts

4-2. International Shipping and Customs Procedures

  • Arranging EMS and other international shipping services

  • Creating documents necessary for import/export and customs clearance

  • Providing necessary information to customs, shipping providers, and other relevant agencies

  • Tracking shipping status

  • Investigating shipping delays, losses, returns, and other shipping accidents

  • Responding to import regulations and shipping restrictions

4-3. Customer Support

  • Responding to inquiries

  • Confirming missing items, misdeliveries, and other defects

  • Responding to applications for cancellations, refunds, etc.

  • Identity verification

  • Handling complaints, requests, and disputes

4-4. Operation, Maintenance, and Improvement of the Service

  • Management of orders, packing, shipping, and customer support

  • Calculation of shipping costs and number of packages

  • Management of sales and refunds

  • Analysis of Service usage status

  • Improvement of the website and purchase screens

  • Improvement of product composition and sales methods

  • Improvement of shipping methods and cost calculations

  • System maintenance, fault response, and quality control

  • Investigation of bugs and errors

  • Planning of new products or services

4-5. Management of Affiliated Accommodation Facilities and Other Referral Sources

  • Confirming which accommodation facility or referral source was used for an order

  • Aggregating the number of orders and sales for each affiliated facility or referral source

  • Calculating referral fees and other settlement amounts

  • Confirming unauthorized access or orders

  • Analysis of sales channels and service usage status

  • Contract and settlement management with affiliated facilities and other referral sources

4-6. Security and Fraud Prevention

  • Account authentication

  • Detection of fraudulent orders, fraudulent payments, and impersonation

  • Investigation of illegal, unauthorized, or malicious acts

  • Ensuring the safety of the system and the Service

  • Protection of the rights of the Company, customers, and third parties

4-7. Marketing and Advertising

Only when consent has been obtained from the customer or permitted by applicable laws, personal information may be used for the following purposes:

  • Information on products, services, campaigns, etc.

  • Distribution of email newsletters and other advertisements or promotions

  • Analysis of advertising effectiveness and usage status

  • Guidance on products or services based on customer interests

Customers can stop distributions at any time by using the opt-out procedure described in marketing emails.

However, even after opting out, emails necessary for transactions, such as order confirmations, shipping notifications, refunds, and security, may still be sent.

4-8. Compliance with Laws and Regulations

  • Responding to applicable laws, regulations, and administrative requests

  • Preservation of tax, accounting, and transaction records

  • Responding to trials, disputes, investigations, and other legal proceedings

  • Application and enforcement of the Company's Terms of Use and various policies

  • Protection of the rights, property, and safety of the Company or third parties

5. Use of Cookies and Other Technologies

The Company and Shopify may use Cookies and other similar technologies for the purpose of providing the Service, ensuring security, analyzing usage status, saving settings, personalization, and advertising.

Cookies include those necessary for the basic operation of the Service and optional ones used for personalization, analysis, or advertising.

Customers may be able to allow, restrict, or refuse the use of optional Cookies through browser settings or Cookie banners and other setting screens displayed by the Company in target countries or regions.

However, if Cookies necessary for the provision of the Service are disabled, some functions such as login, cart, and purchase procedures may not work properly.

6. Third-Party Provision and Outsourcing of Personal Information

The Company may provide personal information to third parties or outsource its handling within the necessary scope in the following cases.

Handling of cases where the recipient or contractor is located outside Japan is subject to the provisions of Section 8 of this Privacy Policy.

6-1. Provision to Shopify

Personal information is transmitted to and processed by Shopify to utilize functions such as hosting, order management, payment, account management, security, and analysis for the Service.

6-2. Provision to Payment Providers

Necessary information is provided to Shopify Payments, credit card companies, and other payment-related providers for payment approval, processing, prevention of unauthorized use, refunds, and dispute resolution.

6-3. Provision to Shipping Providers, Customs, etc.

Necessary information may be provided to the following parties for product shipment, import/export procedures, customs clearance, delivery, tracking, and investigation of shipping accidents:

  • Japan Post

  • EMS and other shipping providers

  • Postal/shipping providers in the destination country or region

  • Customs and other administrative agencies

  • Customs brokers

  • Businesses involved in shipping or import/export

Information provided may include name, address, phone number, email address, order details, product contents, quantity, price, and other information necessary for shipping or customs clearance.

6-4. Provision to Business Contractors

The Company may outsource the handling of personal information to contractors performing the following tasks within the scope necessary for operating the Service:

  • System development and maintenance

  • Cloud services and data management

  • Data analysis

  • Customer support

  • Product procurement, packing, and shipping

  • Email distribution

  • Fraud detection and security

  • Accounting, tax, and legal affairs

The Company will take necessary measures during the selection and contracting of contractors to ensure that personal information is managed appropriately.

6-5. Information Provision to Affiliated Accommodation Facilities, etc.

The Company may aggregate the number of orders, sales amount, commission fees, and other information for each affiliated accommodation facility or other referral source and provide this to said affiliates.

In principle, the information provided is limited to aggregated information that does not identify individuals or information necessary for settlement; the customer's name, address, phone number, email address, etc., will not be provided.

However, this does not apply if there is a request or consent from the customer, if required by law, or if sharing individual information is necessary to resolve a problem.

6-6. Provision Based on Laws and Regulations

In the following cases, personal information may be provided without the individual's consent:

  • When based on laws and regulations

  • When a lawful request is received from a court, police, customs, tax office, or other public agency

  • When necessary for the protection of a person's life, body, or property

  • When necessary to protect the rights and safety of the Company, customers, or third parties

  • When provided in connection with a merger, business transfer, or other business succession

7. Relationship with Shopify

The Service is hosted by an e-commerce platform provided by Shopify Inc. and its affiliates (hereinafter referred to as "Shopify").

Shopify collects and processes personal information regarding the customer's access to and use of the Service to provide, protect, and improve the Service.

Information entered or transmitted by the customer to the Service is transmitted to Shopify and the service providers used by Shopify and may be stored or processed in countries or regions including those outside Japan.

For details regarding the provision or transfer of personal data to Shopify or other providers located in foreign countries, please refer to Section 8 of this Privacy Policy.

The Company has enabled Shopify Network Intelligence.

Through Shopify Network Intelligence, Shopify may process information about interactions between customers and this store, other merchants, or Shopify in combination with other Shopify data for purposes such as providing additional services, improving services and functions provided by Shopify, fraud prevention, analysis, advertising optimization, personalization, and other purposes defined by Shopify.
Shopify Network Intelligence settings apply to the entire store.

This does not mean that other merchants can directly view the personal information of the Company's customers.

Regarding additional processing of personal information by Shopify, customers may, depending on applicable laws, exercise rights such as withdrawing consent or objecting to processing. For details and procedures regarding these rights, please refer to Shopify's Privacy Policy for Consumers and the Privacy Portal.

Shopify Privacy Policy for Consumers:
https://www.shopify.com/legal/privacy/consumers

Shopify Privacy Portal:
https://privacy.shopify.com/

8. Transfer of Personal Information Overseas (Provision to Third Parties in Foreign Countries)

To achieve the purposes of use such as hosting of the Service, order management, payment processing, product shipment, and customs clearance, the Company may use servers located outside Japan or provide personal data of customers to, or outsource the handling of personal data to, providers, shipping providers, payment providers, customs, and other relevant agencies located in foreign countries.

When providing personal data to a third party in a foreign country based on the individual's consent, the Company will provide the following information and obtain consent from the customer.

8-1. Main Foreign Countries or Regions of Transfer

(1) Canada

Customer personal data may be handled in Canada through the headquarters of Shopify Inc. and other service delivery systems of Shopify.

In Canada, the handling of personal information is governed by federal and provincial laws.

For details on the system, please refer to the "Survey on Systems for the Protection of Personal Information in Foreign Countries" published by the Personal Information Protection Commission.

(2) United States of America

Customer personal data may be handled in the United States of America through servers, technical service providers, payment-related providers, and other service providers used to provide Shopify's services.

In the United States, the handling of personal information is governed by sector-specific federal laws and state laws.

For details on the system, please refer to the "Survey on Systems for the Protection of Personal Information in Foreign Countries" published by the Personal Information Protection Commission.

(3) Singapore

Customer personal data may be handled in Singapore through the provision of Shopify Payments and other payment-related services.

In Singapore, the handling of personal information is governed by laws regarding the protection of personal information.

For details on the system, please refer to the "Survey on Systems for the Protection of Personal Information in Foreign Countries" published by the Personal Information Protection Commission.

(4) Destination Country or Region Specified by the Customer

To perform overseas shipping, personal data necessary for product delivery and customs clearance is provided to customs, customs brokers, local postal providers, shipping providers, and other relevant agencies located in the destination country or region.

Overseas destination countries or regions for the Service include South Korea, China, Taiwan, Malaysia, Singapore, Thailand, Hong Kong, Philippines, Australia, Canada, and the United Kingdom.

For personal information protection systems in each country or region, please refer to the "Survey on Systems for the Protection of Personal Information in Foreign Countries" published by the Personal Information Protection Commission.

8-2. Personal Information Protection Measures Taken by Recipients

(1) Shopify and Payment Providers

Shopify and the payment providers used by the Company handle personal data based on their published privacy policies, security policies, terms of use, and other official documents. The Company confirms the personal information protection systems of the recipients or contractors based on these official documents and other information available to the Company.

Credit card information and other payment information are handled by Shopify Payments, card companies, and other payment-related providers based on applicable laws, contracts, and payment security standards.

The Company may not directly hold full payment information such as credit card numbers.

(2) Shipping Providers, Customs, and Customs-Related Agencies

Japan Post, postal/shipping providers in the destination country or region, customs, customs brokers, and other relevant agencies handle personal data within the scope necessary for product delivery and customs clearance in accordance with applicable laws, rules regarding international mail, and other regulations.

(3) Other Business Contractors

When outsourcing the handling of personal data to a provider located in a foreign country, the Company confirms the personal information protection system of the contractor and, as necessary, requires appropriate handling of personal data through contracts or other methods.

If personal data is provided based on the fact that the recipient has established a system to continuously take measures equivalent to those required under the Act on the Protection of Personal Information, the Company will periodically check the implementation status of such measures and the personal information protection system of said foreign country in accordance with the law and take necessary and appropriate measures.

8-3. Cases Where the Transfer Destination Cannot Be Identified in Advance

Due to circumstances such as the operation status of cloud services used in the Service, payment methods, shipping destinations, shipping paths, etc., the foreign country or recipient of the personal data transfer may not be identifiable at the time consent is obtained from the customer.

In such cases, the Company will provide, to the extent possible, the fact that the foreign country or recipient cannot be identified in advance, the reason for this, and information that serves as a reference for the customer's judgment.

8-4. Request for Information Provision

Based on applicable laws, customers may request the Company to provide information regarding the provision of personal data to third parties in foreign countries, including the foreign country or region of transfer and the personal information protection measures taken by said third party.

If you wish to request information, please contact the contact point listed at the end of this Privacy Policy.

9. Links to External Websites and Services

The Service may contain links to external websites, social media, shipping tracking services, and other online services not managed by the Company.

Regarding the handling of personal information in external services, please check the privacy policy and other terms of said services.

The Company is not responsible for the content, accuracy, safety, or handling of personal information of external services not operated or managed by the Company.

10. Personal Information of Children

The Service is not primarily intended for minors.

The Company does not intentionally collect personal information from children of an age that requires the consent of a legal representative.

If a parent or guardian notices that a child has provided personal information to the Company, please contact the contact point at the end of this Privacy Policy.

The Company will consider deletion or other actions after conducting identity verification and checks necessary under the law.

11. Secure Management of Personal Information

The Company will take necessary and appropriate organizational, human, physical, and technical security management measures to prevent unauthorized access, loss, theft, falsification, leakage, destruction, or damage of personal information.

The Company provides appropriate management and supervision to employees and business contractors who handle personal information.

However, the security of communication or information storage on the internet cannot be completely guaranteed.

Please manage the authentication information used to access your customer account appropriately at your own responsibility and do not share it with third parties.

12. Retention Period of Personal Information

The Company retains personal information for the period necessary to achieve the purpose of use or for the period required by applicable laws.

The following circumstances are considered when determining the retention period:

  • Response to orders, shipping, refunds, and customer support

  • Account maintenance

  • Obligations to preserve tax, accounting, and transaction records

  • Response to unauthorized use, chargebacks, and disputes

  • Enforcement of contracts and policies

  • Response to legal claims

  • Necessity for security and service improvement

Personal information that is no longer necessary for retention will be deleted, erased, or anonymized in accordance with applicable laws and the Company's management policy.

13. Customer Rights

Depending on the laws of the country or region where you reside, you may have the following rights regarding the personal information held by the Company.

13-1. Confirmation of Purpose of Use, etc.

You may request an explanation regarding the purpose of use or handling status of personal information by the Company.

13-2. Request for Disclosure

Based on applicable laws, you may request the disclosure or provision of information regarding the personal information of the customer held by the Company, records of third-party provision, and certain information regarding the provision of personal data to third parties in foreign countries.

13-3. Correction, Addition, or Update

If the personal information of the customer held by the Company is inaccurate or incomplete, you may request its correction, addition, or update.

13-4. Deletion or Erasure

Based on applicable laws, you may request the deletion or erasure of personal information of the customer held by the Company.

However, deletion may not be immediate if there is a legitimate reason, such as the preservation of transaction records, fulfillment of legal obligations, or response to disputes.

13-5. Cessation of Use or Third-Party Provision

Based on applicable laws, you may request the cessation of use, erasure, or cessation of third-party provision of personal information.

13-6. Data Portability

Depending on applicable laws and conditions, you may request to receive a copy of your personal information held by the Company or to transfer it to another provider.

13-7. Withdrawal of Consent

If the processing of personal information is based on consent, you may withdraw that consent for the future.

The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

13-8. Stopping Marketing Distributions

If you receive marketing emails from the Company, you can stop distributions at any time by using the unsubscribe link etc. in the email.

14. How to Exercise Rights

If you wish to make a request regarding personal information, please contact the contact point at the end of this Privacy Policy.

When accepting a request, the Company may ask for the submission of information or documents necessary for identity verification.

In the case of a request by a representative, the Company may ask for the submission of documents that can confirm the delegation from the individual or other necessary materials.

The Company will respond to requests within a reasonable period in accordance with applicable laws.

The Company may be unable to respond to all or part of a request if it falls under a legal exception, if there is a risk of harming the rights and interests of the individual or a third party, if it would significantly hinder the Company's operations, or if it is necessary for the fulfillment of legal obligations.

No disadvantageous treatment will be given to a customer for exercising their rights.

15. Complaints and Inquiries

If you have any questions, complaints, or objections regarding the Company's handling of personal information, please contact the contact point at the end of this Privacy Policy.

Depending on the country or region where you reside, you may have the right to lodge a complaint with the personal information protection agency or supervisory authority with jurisdiction over the Company's response.

16. Changes to this Privacy Policy

The Company may change this Privacy Policy from time to time in response to changes in service content, systems, providers or apps used, business operations, laws, and other factors.

The updated Privacy Policy will be posted on this website, and the last updated date will be updated.

In the case of significant changes, the Company may notify you via website display, email, or other appropriate methods in accordance with applicable laws.

17. Contact Information

If you have questions, complaints, or wish to exercise your rights regarding personal information or the Company's handling of personal information and this Privacy Policy, please contact the following:

Operating Business: OTis Co., Ltd.

Service Name: Oishii! Hokkaido!

General Manager of Operations: Hisashi Omiya

Address:
〒053-0802
2-3-1 Yayoi-cho, Tomakomai-shi, Hokkaido

Phone Number:
0144-78-3500

Contact Form

Reception Hours:
Weekdays 9:00 AM – 6:00 PM
Excluding Saturdays, Sundays, public holidays, and New Year's holidays.