Privacy policy

Last updated: 28 July 2026

Privacy Policy

1. Who controls your personal data

For the EU Store, the data controller is:

Japanese Melody Europe B.V.
Keizersgracht 520 H
1017 EK Amsterdam
The Netherlands

KVK: 42066615
VAT ID: NL869554037B01
Email: support@japanese-melody.com

The Japanese Melody United States store is operated by Japanese Melody LLC, a separate United States company, under its own privacy policy. Japanese Melody Europe B.V. is responsible for personal data processed in connection with the EU Store.

2. Personal data we collect

Depending on how you interact with us, we may collect:

Identity and contact information

  • name;

  • billing and delivery address;

  • email address;

  • account details; and

  • any contact information you voluntarily provide.

Order and transaction information

  • products ordered;

  • ring or bracelet size;

  • order value;

  • discounts;

  • delivery method;

  • return, exchange, refund, and warranty history;

  • payment status; and

  • limited payment-related information supplied by the payment provider.

We do not store full payment-card details.

Communications and customer-service information

  • emails and messages;

  • complaint and support history;

  • photographs or documents you send;

  • survey responses; and

  • preferences you communicate to us.

Account and preference information

  • login and account settings;

  • language;

  • delivery country;

  • marketing preferences;

  • cookie choices; and

  • wish-list or saved-cart information where enabled.

Technical and usage information

  • IP address;

  • browser and device information;

  • operating system;

  • referring pages;

  • pages and products viewed;

  • cart and checkout activity;

  • approximate location derived from IP address;

  • timestamps;

  • security logs; and

  • cookie or similar identifiers.

Reviews and user content

  • ratings;

  • review text;

  • photographs or video;

  • social-media handle where supplied; and

  • related product and order information.

3. How we obtain personal data

We obtain data:

  • directly from you;

  • automatically through the EU Store and cookies;

  • from Shopify and payment providers;

  • from delivery and fulfilment providers;

  • from advertising, analytics, review, and customer-service providers;

  • from social-media platforms when you interact with us; and

  • from lawful fraud-prevention and identity-verification sources.

4. Why we process personal data and our legal bases

To take steps at your request and perform the contract

We process data to:

  • operate the cart and checkout;

  • accept and process orders;

  • take payment;

  • arrange fulfilment and delivery;

  • provide order confirmations and tracking;

  • manage returns, exchanges, refunds, and warranty claims;

  • operate customer accounts; and

  • provide customer support.

Legal basis: performance of a contract or steps taken at your request before entering into a contract.

To comply with legal obligations

We process and retain data to:

  • maintain accounting and tax records;

  • comply with VAT and consumer-protection rules;

  • respond to lawful authority requests;

  • comply with product-safety and recall duties;

  • manage legal claims; and

  • prevent prohibited transactions where required by law.

Legal basis: compliance with legal obligations.

For legitimate interests

Where our interests are not overridden by your rights, we process data to:

  • secure the EU Store and accounts;

  • detect and prevent fraud and abuse;

  • investigate delivery and payment problems;

  • improve products, customer service, and website performance;

  • maintain business records not already required by law;

  • establish, exercise, or defend legal claims;

  • conduct limited audience and performance analysis; and

  • manage group operations and service providers.

Legal basis: our legitimate interests or those of a relevant third party.

You may object to processing based on legitimate interests. We will stop unless we demonstrate compelling legitimate grounds or need the data for legal claims.

With consent

Where consent is required, we use it for:

  • email or similar direct marketing;

  • non-essential analytics cookies;

  • advertising and retargeting cookies;

  • personalised advertising; and

  • optional features that require consent.

You can withdraw consent at any time without affecting processing that occurred before withdrawal.

5. Marketing

We send marketing messages where you have consented or where another lawful basis expressly permits them.

Every marketing email contains an unsubscribe option. You may also contact support@japanese-melody.com.

After unsubscribe, we may retain limited information on a suppression list to ensure that we respect your request.

Service messages relating to an order, account, return, safety notice, or policy change are not marketing and may still be sent where necessary.

6. Google advertising, analytics, and measurement

Where enabled and after any consent required by law, we may use Google services including:

  • Google Analytics 4;

  • Google Ads conversion tracking;

  • Google Ads remarketing and audience features;

  • Google Merchant Center measurement features;

  • Google Tag Manager;

  • Google Consent Mode;

  • enhanced conversions or similar privacy-enhancing measurement features; and

  • other Google advertising or measurement tools identified in the cookie-preference centre.

These services may process information such as:

  • cookie and similar identifiers;

  • IP address and approximate location;

  • browser, device, operating-system, and language information;

  • pages and products viewed;

  • referring URLs and advertising click identifiers;

  • cart, checkout, purchase, refund, and conversion events; and

  • hashed customer information, such as an email address or telephone number, only where the relevant feature is enabled and its use is lawful.

We use this information to measure website and advertising performance, attribute sales, prevent fraud and abuse, build or exclude advertising audiences, limit repeated advertising, and show more relevant advertisements.

Third-party vendors, including Google, may show Japanese Melody advertisements on Google services and on other websites and apps. Google and other participating vendors may use cookies, device identifiers, advertising click identifiers, and information about previous visits to the EU Store to measure advertising and, where consent has been given, to personalise advertising.

Non-essential Google analytics, advertising, audience, remarketing, and personalised-advertising technologies are used only after valid consent where consent is required. We communicate relevant consent choices to Google through Consent Mode or another compatible mechanism.

Depending on the service and configuration, Google may act as our processor or as an independent controller. Google may process information outside the European Economic Area. We use the applicable contractual and transfer safeguards made available for the relevant service.

You can reject or withdraw consent at any time through the Cookie settings link on the EU Store. You can also:

These external controls are additional to, and do not replace, the consent controls available on the EU Store. Withdrawal does not affect processing that occurred before withdrawal.

7. Meta advertising and measurement

Where enabled and after any consent required by law, we may use Meta Business Tools, including:

  • the Meta Pixel;

  • Meta Conversions API;

  • Meta advertising conversion measurement;

  • Custom Audiences;

  • remarketing and audience-exclusion features; and

  • related Facebook and Instagram advertising tools identified in the cookie-preference centre.

These tools may process information such as:

  • cookie, browser, device, and advertising identifiers;

  • IP address and approximate location;

  • pages and products viewed;

  • referring pages;

  • cart, checkout, purchase, refund, and conversion events; and

  • hashed customer information, such as an email address or telephone number, only where the relevant feature is enabled and its use is lawful.

We use these tools to measure advertising effectiveness, attribute conversions, create or exclude audiences, limit repeated advertising, and show more relevant advertisements on Facebook, Instagram, and other Meta services.

Meta may use cookies, device identifiers, Pixel events, Conversions API events, and information about interactions with the EU Store to measure advertising and, where consent has been given, to personalise advertising.

The Meta Pixel and other non-essential Meta advertising technologies must not be activated for an EU visitor before valid consent where consent is required. Where server-side events are sent through Conversions API, we apply the visitor’s consent choice and other required controls.

Depending on the service and configuration, Meta Platforms Ireland Limited may act as our processor, joint controller, or independent controller. Meta may process information outside the European Economic Area using the safeguards applicable to the relevant service.

You can reject or withdraw consent at any time through the Cookie settings link on the EU Store. You can also review and manage advertising and privacy choices through the Meta Privacy Centre and the advertising preferences available in your Facebook or Instagram account. These external controls are additional to the controls available on the EU Store.

8. Customer Match and audience uploads

We may use customer-list or audience-matching features offered by Google or Meta only where we have an appropriate legal basis and have provided the required information.

Where such a feature is used, contact information is normally transformed into a hashed format before or during transmission. We do not upload customer lists for personalised advertising where consent or another required legal basis is absent.

You may object to direct marketing or withdraw consent at any time by using the cookie settings, unsubscribing from marketing, or contacting support@japanese-melody.com.

9. Cookies and similar technologies

We use cookies and similar technologies as explained in our Cookie Policy.

Strictly necessary technologies may be used without consent where legally permitted. Analytics, advertising, and other non-essential technologies are activated only after valid consent where consent is required.

You can change your choices through the cookie-settings link on the EU Store.

10. Who receives personal data

We disclose personal data only where reasonably necessary, including to:

Shopify

Shopify provides the ecommerce platform, hosting, checkout, security, and related services. Shopify Payments and its banking or payment partners process payments and fraud checks.

Fulfilment, warehouse, and delivery providers

We share the data needed to pick, pack, deliver, track, return, and investigate orders. This includes our fulfilment operation in Venray and the carriers selected for your order.

Payment, fraud, and authentication providers

These providers process payments, identity checks, authentication, fraud signals, refunds, and payment disputes.

Professional and operational providers

This can include accountants, tax advisers, lawyers, insurers, IT providers, cloud-hosting providers, email and customer-service providers, and security specialists.

Analytics, advertising, and social-media providers

Where enabled and lawfully permitted, this can include providers such as Google and Meta for analytics, advertising, conversion measurement, and social-media functions.

Reviews and trust services

Where enabled, providers such as Judge.me may process review invitations, ratings, review content, and related order data.

Japanese Melody LLC

We may share limited data with Japanese Melody LLC where it provides brand, marketing, IT, administrative, or customer-support services to Japanese Melody Europe B.V. Such access is limited to what is necessary and is subject to appropriate contractual and data-protection safeguards.

Authorities and legal recipients

We may disclose data where required by law, court order, regulatory request, product-safety obligation, or to protect legal rights and prevent fraud or harm.

Business transfers

If all or part of the business is reorganised, financed, sold, or transferred, relevant data may be disclosed subject to confidentiality and applicable law.

We do not sell personal data for money.

11. International transfers

Some service providers or affiliated recipients may process personal data outside the European Economic Area.

Where required, we rely on a lawful transfer mechanism, such as:

  • an adequacy decision;

  • the European Commission’s Standard Contractual Clauses;

  • an applicable data-protection framework; or

  • another mechanism permitted by data-protection law.

You may contact us for further information about the safeguards relevant to your data.

12. Retention

We keep personal data only for as long as necessary for the stated purpose, including:

  • order, invoice, payment, stock, and core accounting records: generally at least 7 years;

  • records subject to EU One Stop Shop retention rules: up to 10 years where applicable;

  • account information: while the account remains active and for a reasonable period afterwards;

  • customer-service and complaint records: normally up to 3 years after the matter is closed, unless a longer period is needed for legal claims;

  • warranty and conformity records: for the relevant legal or commercial warranty period and a reasonable limitation period afterwards;

  • marketing data: until consent is withdrawn or you unsubscribe, with limited suppression data retained afterwards;

  • fraud and security records: for as long as reasonably required to investigate and prevent abuse; and

  • cookie data: for the duration stated in the cookie-preference centre or relevant provider information.

When data is no longer required, we delete, anonymise, or securely restrict it, unless continued retention is legally required.

13. Your rights

Subject to applicable conditions, you may have the right to:

  • access your personal data;

  • correct inaccurate data;

  • request deletion;

  • restrict processing;

  • receive portable data;

  • object to processing based on legitimate interests;

  • object at any time to direct marketing;

  • withdraw consent;

  • request information about international-transfer safeguards; and

  • lodge a complaint with a supervisory authority.

To exercise a right, email support@japanese-melody.com.

We may need to verify your identity. We will respond within the period required by law, normally one month.

14. Supervisory authority

You may complain to the Dutch Data Protection Authority, Autoriteit Persoonsgegevens, or to the competent data-protection authority in the EU country where you live, work, or believe an infringement occurred.

15. Automated checks

Payment and fraud-prevention providers may use automated systems to assess transaction risk, identity, or payment eligibility.

Where an automated decision produces legal or similarly significant effects and applicable law grants you that right, you may request human intervention, express your view, or challenge the decision.

16. Security

We use reasonable technical and organisational measures designed to protect personal data, including access controls, secure providers, encryption in transit where appropriate, staff-access limitations, and monitoring.

No online service can guarantee absolute security. Please protect your password and contact us if you suspect unauthorised account activity.

17. Children

The EU Store is not directed to children under 16, and we do not knowingly collect personal data from them without appropriate authorisation.

Purchases must be made by a person with legal capacity or with the permission and supervision of a parent or legal guardian.

18. Changes

We may update this Privacy Policy to reflect legal, operational, or technical changes. The updated date appears at the top.

Material changes will be communicated where required.

19. Contact

Japanese Melody Europe B.V.
Keizersgracht 520 H
1017 EK Amsterdam
The Netherlands

Email: support@japanese-melody.com