Privacy Policy

Last updated: September 10, 2026

This Privacy Policy explains how テックウインド株式会社 (“we,” “us,” “our,” or the “Company”) collects, uses, stores, shares and otherwise processes personal information when you visit our online store, place an order, contact us or otherwise use our services.

Our online store serves customers in Hungary.

Where the General Data Protection Regulation (“GDPR”) or other applicable European or Hungarian data protection law applies, personal information will be processed in accordance with the applicable legal requirements.

Please read this Privacy Policy carefully to understand how your personal information may be handled.

1. Company and Data Controller Information

The company responsible for operating the online store is:

Company name: テックウインド株式会社
Corporate number: 1010001143143
Responsible person: 王 夢周

Registered address:
東京都文京区湯島3丁目19番11号
Japan

Email: support@baala.shop
Telephone: +81 90 1846 5481

For personal information processed under our responsibility in connection with the online store, テックウインド株式会社 acts as the data controller unless another party processes the information as an independent controller under applicable law.

2. Scope of This Privacy Policy

This Privacy Policy may apply when you:

• Visit or browse our online store;
• Create or manage a customer account, where available;
• Add products to your shopping cart;
• Place or manage an order;
• Make a payment;
• Receive or track a delivery;
• Request a return, exchange or refund;
• Contact customer support;
• Submit a form, review or other content;
• Subscribe to marketing communications;
• Manage cookie preferences; or
• Otherwise interact with our online store or related services.

The website, online store, customer support functions and related e-commerce services are referred to collectively as the “Services.”

3. Personal Information We May Collect

The personal information we collect depends on how you interact with the Services.

3.1 Identity and Contact Information

We may collect information such as:

• Full name;
• Billing address;
• Shipping address;
• Postal code;
• City;
• Country;
• Email address;
• Telephone number; and
• Other contact information you provide.

3.2 Order and Transaction Information

When you place or manage an order, we may process information including:

• Products ordered;
• Product quantity or variation;
• Order number;
• Purchase amount;
• Order status;
• Delivery information;
• Returns;
• Exchanges;
• Refunds;
• Cancellation information; and
• Communications relating to the transaction.

3.3 Payment Information

Depending on the payment method selected at checkout, payment-related information may include:

• Payment method;
• Transaction amount;
• Payment status;
• Billing information;
• Transaction reference; and
• Limited payment confirmation information.

Complete card or payment-account information may be processed directly by Shopify, banks, card networks or independent payment service providers.

We do not require customers to send passwords, full card credentials or payment-account login information to us by email.

3.4 Customer Account Information

If customer accounts are available, we may process:

• Account name;
• Email address;
• Authentication information;
• Saved addresses;
• Account preferences;
• Order history; and
• Communication settings.

3.5 Customer Support Information

When you contact us, we may receive:

• Your name;
• Contact information;
• Order number;
• Product information;
• The content of your message;
• Complaint information;
• Return or refund information;
• Photographs or videos you choose to provide; and
• Other information reasonably necessary to respond to your request.

3.6 Technical and Usage Information

When you use the Services, certain technical information may be collected automatically, such as:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Language settings;
• Device or cookie identifiers;
• Pages viewed;
• Date and time of access;
• Referring website;
• Click and navigation information;
• Approximate location derived from an IP address;
• Website performance information; and
• Security or error information.

3.7 Marketing and Preference Information

Where applicable, we may process information concerning:

• Marketing preferences;
• Products or categories viewed;
• Interaction with promotional communications;
• Advertising interactions;
• Cookie preferences; and
• Other shopping preferences.

4. How We Collect Personal Information

We may collect personal information from several sources.

Information You Provide Directly

You may provide information when you:

• Place an order;
• Create an account;
• Complete a form;
• Enter billing or delivery information;
• Contact customer service;
• Request a return or refund;
• Subscribe to communications; or
• Otherwise provide information through the Services.

Information Collected Automatically

Certain information may be collected through technologies such as:

• Cookies;
• Server logs;
• Analytics tools;
• Device identifiers;
• Security technologies; and
• Similar technologies.

Information Received From Service Providers

We may receive relevant information from service providers involved in operating the Services, including:

• Shopify;
• Payment providers;
• Banks;
• Courier companies;
• Logistics providers;
• Warehousing or fulfilment providers;
• Hosting providers;
• Customer-support providers;
• Fraud-prevention providers;
• Analytics providers; and
• Marketing or advertising providers.

5. How We Use Personal Information

We may use personal information for purposes including:

• Operating and maintaining the online store;
• Processing and confirming orders;
• Processing or verifying payments;
• Arranging fulfilment and delivery;
• Providing order and tracking information;
• Managing customer accounts;
• Communicating about orders;
• Responding to customer enquiries;
• Providing customer support;
• Processing cancellations;
• Managing returns, exchanges and refunds;
• Detecting suspicious or unauthorized transactions;
• Preventing fraud;
• Protecting the security of the Services;
• Maintaining appropriate accounting and transaction records;
• Improving website functionality;
• Understanding how customers use the Services;
• Improving customer support;
• Managing customer preferences;
• Sending marketing communications where legally permitted;
• Measuring marketing performance where permitted;
• Complying with legal, tax and accounting obligations;
• Responding to lawful requests from authorities; and
• Establishing, exercising or defending legal claims.

We will not use personal information for purposes that are incompatible with the purposes for which it was collected unless another lawful basis permits that processing.

6. Legal Bases for Processing

Where the GDPR applies, we process personal information only where an appropriate legal basis is available.

6.1 Performance of a Contract

We may process information where necessary to:

• Process an order;
• Receive or verify payment;
• Deliver purchased products;
• Provide order-related communications;
• Provide customer support;
• Process returns or refunds; or
• Perform other obligations arising from a purchase contract.

6.2 Compliance With Legal Obligations

We may process or retain information where necessary to comply with:

• Tax obligations;
• Accounting requirements;
• Consumer protection requirements;
• Regulatory requirements;
• Court orders;
• Lawful government requests; or
• Other applicable legal obligations.

6.3 Legitimate Interests

Where permitted by law, we may process information where reasonably necessary for legitimate business interests, including:

• Preventing fraud;
• Protecting the security of our Services;
• Preventing unauthorized activity;
• Responding to customer enquiries;
• Improving website performance;
• Understanding business performance;
• Maintaining appropriate business records; and
• Establishing or defending legal claims.

Where we rely on legitimate interests, we consider the interests, rights and freedoms of the individuals concerned.

6.4 Consent

Where consent is required, we may ask for your consent before:

• Sending certain promotional communications;
• Activating non-essential cookies;
• Using certain analytics technologies;
• Using advertising or personalization technologies; or
• Processing information for other optional purposes requiring consent.

You may withdraw your consent at any time.

Withdrawal of consent does not affect processing that lawfully took place before the withdrawal.

7. Sharing Personal Information

We may share personal information only where reasonably necessary for legitimate purposes described in this Privacy Policy.

Recipients may include the following categories.

Shopify and Technology Providers

Our online store may use Shopify and other technology providers to host, operate, maintain and secure the Services.

Information submitted through the online store may therefore be processed through systems operated by Shopify or other service providers.

Payment Providers

Information necessary to process a transaction may be shared with:

• Payment processors;
• Banks;
• Card networks;
• Payment gateways; and
• Fraud-prevention providers.

These providers may process certain information independently in accordance with their own legal obligations and privacy policies.

Fulfilment and Delivery Providers

Relevant information may be provided to:

• Warehouses;
• Fulfilment providers;
• Postal services;
• Couriers;
• Shipping companies; and
• Delivery tracking providers.

Information provided for delivery purposes may include your name, address, postal code, telephone number, email address, order reference and necessary delivery instructions.

Customer Service Providers

Where applicable, information may be shared with providers assisting with:

• Customer enquiries;
• Order management;
• Complaints;
• Returns; and
• Refunds.

Analytics, Marketing and Advertising Providers

Where permitted by law and, where necessary, after obtaining consent, certain information may be processed by analytics, marketing or advertising providers for purposes such as:

• Measuring website performance;
• Understanding use of the Services;
• Measuring marketing campaigns; and
• Providing relevant promotional content.

Professional and Legal Recipients

We may disclose information to accountants, lawyers, auditors, insurers or other professional advisers where reasonably necessary.

Information may also be disclosed to courts, regulators, government authorities or law-enforcement authorities where required or permitted by applicable law.

We do not sell customer personal information to third-party advertisers.

8. Shopify

Our online store uses Shopify as an e-commerce technology platform.

Shopify may process information necessary to provide, maintain, secure and improve its services.

Some processing performed by Shopify may be carried out on our behalf, while certain processing may be performed by Shopify independently under its own privacy obligations.

Shopify's handling of personal information is also subject to its applicable privacy documentation and legal obligations.

9. Cookies and Similar Technologies

Our online store may use cookies and similar technologies.

Cookies may be used to:

• Operate essential website functions;
• Maintain the shopping cart;
• Support checkout;
• Maintain account sessions;
• Remember preferences;
• Protect website security;
• Prevent fraud;
• Understand website traffic;
• Measure website performance; and
• Support analytics, marketing or advertising activities where permitted.

Essential Cookies

Some cookies are necessary for functions such as:

• Shopping cart operation;
• Checkout;
• Account login;
• Payment processing; and
• Website security.

These cookies may be used where necessary to provide the Services.

Non-Essential Cookies

Analytics, advertising and certain personalization cookies may not be essential for the operation of the store.

Where consent is required under applicable law, these technologies will be activated only after the required consent has been obtained.

Customers may manage available cookie choices through the cookie preference controls provided on the website.

Changing or disabling certain cookies may affect some website functions.

10. Marketing Communications

Where legally permitted, we may send information about products, offers or store updates.

Where consent is required, promotional communications will be sent only after the appropriate consent has been obtained.

You may unsubscribe from promotional email communications by:

• Using the unsubscribe option contained in the relevant email; or
• Contacting us at support@baala.shop.

Opting out of marketing does not prevent us from sending necessary service communications relating to:

• Orders;
• Payments;
• Shipping;
• Returns;
• Refunds;
• Account administration; or
• Security matters.

11. International Data Transfers

Our company is registered in Japan, while our online store serves customers in Hungary.

As a result, personal information may be processed or transferred outside Hungary or the European Economic Area in connection with the operation of the Services.

Our technology, payment, logistics or other service providers may also process information in different countries.

Where the GDPR or another applicable law requires safeguards for an international transfer, we will use an appropriate lawful transfer mechanism where required.

Such mechanisms may include:

• An applicable adequacy decision;
• Approved contractual safeguards;
• Standard contractual clauses where appropriate; or
• Another transfer mechanism permitted by applicable law.

12. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or as required by applicable law.

The appropriate retention period may depend on:

• The duration of the customer relationship;
• Order fulfilment;
• Delivery;
• Returns and refunds;
• Tax obligations;
• Accounting requirements;
• Fraud-prevention requirements;
• Applicable limitation periods;
• Dispute resolution;
• Regulatory requirements; and
• The need to establish or defend legal claims.

When information is no longer reasonably required, it may be deleted, anonymized or otherwise handled in accordance with applicable legal requirements.

13. Security

We use reasonable administrative, organizational and technical measures designed to protect personal information against risks such as:

• Unauthorized access;
• Accidental loss;
• Unlawful disclosure;
• Unauthorized alteration;
• Misuse; and
• Destruction.

Measures may include, where appropriate:

• Restricted access;
• Authentication controls;
• Secure hosting systems;
• Encryption;
• Fraud monitoring; and
• Other appropriate security measures.

However, no internet transmission, website or electronic storage system can be guaranteed to be completely secure.

14. Your Data Protection Rights

If the GDPR applies to the processing of your personal information, you may have rights including the right to:

• Request access to your personal information;
• Request correction of inaccurate information;
• Request completion of incomplete information;
• Request deletion of eligible personal information;
• Request restriction of processing;
• Object to certain processing;
• Object to direct marketing;
• Request portability of eligible data;
• Withdraw consent where processing is based on consent; and
• Lodge a complaint with a competent data protection supervisory authority.

These rights are subject to the conditions and exceptions provided by applicable law.

For example, we may need to retain certain information where necessary to:

• Fulfil an order;
• Meet tax or accounting obligations;
• Prevent fraud;
• Resolve a dispute; or
• Establish, exercise or defend a legal claim.

15. Right to Object to Direct Marketing

You may object at any time to the processing of your personal information for direct marketing purposes.

After receiving a valid objection, we will stop processing the relevant personal information for direct marketing as required by applicable law.

16. How to Exercise Your Privacy Rights

To submit a privacy or data protection request, please contact:

Email: support@baala.shop
Telephone: +81 90 1846 5481

To help us identify and respond to your request, we may ask for information such as:

• Your full name;
• Email address associated with the account or order;
• Relevant order number;
• Description of your request; and
• Information reasonably necessary to verify your identity.

We will request only information reasonably necessary to verify the request and protect personal information from unauthorized disclosure.

Privacy requests will be handled within the period required by applicable law.

17. Complaints

If you have questions or concerns regarding the processing of your personal information, you may contact us at:

Email: support@baala.shop
Telephone: +81 90 1846 5481

If the GDPR applies, you may also have the right to lodge a complaint with the competent data protection supervisory authority in Hungary, your place of habitual residence, place of work or where an alleged infringement occurred.

Contacting us first does not prevent you from exercising any right to contact a supervisory authority.

18. Information Concerning Minors

The Services are intended for customers who are legally able to enter into purchase transactions or who use the Services with appropriate authorization where required.

We do not knowingly seek to collect personal information from children in violation of applicable law.

If a parent or legal guardian believes that a child has provided personal information improperly, please contact us at:

support@baala.shop

We will review the circumstances and take appropriate action where required by applicable law.

19. Third-Party Websites and Services

The Services may contain links to websites, applications or services operated by independent third parties.

We do not necessarily control how independent third parties collect or process personal information.

When you leave our online store or use an independent third-party service, the privacy policy and terms of that provider may apply.

We recommend reviewing the relevant third party's privacy information before providing personal information.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• Applicable law;
• Regulatory requirements;
• Our Services;
• Technology;
• Payment or delivery arrangements;
• Service providers; or
• Our business operations.

The current version will be made available through our online store.

Where required by applicable law, material changes will be communicated through an appropriate method.

The “Last updated” date at the beginning of this Policy indicates the date of the latest revision.

21. Contact Information

If you have questions about this Privacy Policy or the handling of personal information, please contact:

テックウインド株式会社
Corporate number: 1010001143143
Responsible person: 王 夢周

Registered address:
東京都文京区湯島3丁目19番11号
Japan

Email: support@baala.shop
Telephone: +81 90 1846 5481