Hakizoku respects your privacy and is committed to handling personal data lawfully, fairly and transparently.

This Privacy Policy explains how we collect, use, disclose, retain and protect personal data when you visit the Hakizoku website, create an account, place an order, contact us, subscribe to marketing communications or otherwise interact with our services.

This Policy applies to customers and website users. Additional rights may apply depending on the laws of your country or region.

1. Data Controller and Contact Details

The data controller responsible for the personal data described in this Privacy Policy is:

AVETIC SARL
Trading as Hakizoku
Share capital: €2,000
RCS Fréjus: 801 871 492
Centre Europe BP 498
Boulevard du Cerceron
83700 Saint-Raphaël
France

Email: support@hakizoku.com

Questions or requests concerning your personal data may be sent to support@hakizoku.com.

2. Personal Data We Collect

Depending on how you interact with Hakizoku, we may collect the following categories of personal data:

• Identity and contact data: name, email address, telephone number, billing address, shipping address and country;
• Account data: customer account details, login information, saved preferences and account activity;
• Order and transaction data: products ordered, order number, purchase date, price, currency, discounts, delivery method, order status, returns, refunds and customer-service history;
• Payment-related data: payment method, payment status, transaction reference and limited payment information supplied by the payment provider. Complete payment card details are normally collected directly by the payment provider and are not made available to Hakizoku;
• Delivery data: recipient details, delivery address, carrier, parcel tracking information and delivery events;
• Communications: messages, emails, complaints, return requests, product enquiries and other correspondence sent to us;
• Marketing data: newsletter subscriptions, communication preferences, campaign interactions and consent records;
• Technical and usage data: IP address, browser type, device information, operating system, language, approximate location derived from the IP address, pages viewed, referring pages, timestamps, website interactions, error logs and security events;
• Cookie and analytics data: identifiers and information collected through cookies, pixels or similar technologies, subject to applicable consent requirements;
• Fraud-prevention data: risk signals, failed payment attempts, suspected misuse, account links and information reasonably necessary to protect customers and the website;
• User content: product reviews, ratings, comments or other content submitted through available website features.

We do not intend to collect special categories of personal data such as health information, biometric data, religious beliefs, political opinions or similar sensitive information.

Please do not provide such information unless it is genuinely necessary for a specific request.

3. How We Collect Personal Data

We may collect personal data:

• directly from you when you place an order, create an account, complete a form, subscribe to communications, contact customer support or submit content;
• automatically when you browse or use the website, including through server logs, cookies and similar technologies;
• from service providers involved in payments, fraud prevention, hosting, customer support, analytics or delivery;
• from carriers and postal services when they provide tracking or delivery updates;
• from lawful public or professional sources where reasonably necessary to prevent fraud, resolve a dispute or comply with a legal obligation.

4. Why We Use Personal Data

We may use personal data to:

• operate, maintain and secure the Hakizoku website;
• create and manage customer accounts;
• process, confirm, prepare and deliver orders;
• manage payments, refunds, returns, cancellations and pre-orders;
• provide parcel tracking and delivery support;
• verify transactions and prevent fraud, abuse and security threats;
• answer questions, complaints and customer-service requests;
• administer legal guarantees and resolve disputes;
• send service communications relating to accounts or orders;
• send marketing communications where permitted;
• personalise website content and remember user preferences;
• measure website performance and understand how our store is used;
• improve our products, services, navigation and customer support;
• maintain accounting, tax and business records;
• establish, exercise or defend legal claims;
• comply with applicable laws, court orders and lawful requests from public authorities.

We will not use personal data for a materially incompatible purpose without providing appropriate information and, where legally required, obtaining consent.

5. Legal Bases for Processing

Where the General Data Protection Regulation (GDPR) or equivalent data protection rules apply, we rely on one or more of the following legal bases:

• Performance of a contract: where processing is necessary to process an order, receive payment, arrange delivery, manage a return, provide customer support or administer an account requested by you;
• Legal obligation: where processing is necessary to comply with accounting, tax, consumer-protection, product-safety, fraud-prevention or regulatory requirements;
• Legitimate interests: where processing is necessary to operate and improve the website, secure transactions, prevent fraud, answer non-contractual enquiries, maintain records, understand store performance or protect our legal rights, provided that those interests are not overridden by your rights and freedoms;
• Consent: for certain marketing communications, non-essential cookies, tracking technologies or other processing activities where consent is legally required;
• Establishment, exercise or defence of legal claims: where information is necessary to manage a complaint, chargeback, suspected fraud or dispute.

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal of consent does not affect processing that was lawful before consent was withdrawn.

6. Information Required to Place an Order

Certain information is necessary for us to enter into and perform a sales contract with you.

This may include your name, contact details, billing information, delivery address and information necessary to process payment.

If required information is not provided, we may be unable to accept, process or deliver your order.

Optional fields will be identified where appropriate.

7. Payments

Payments are processed through authorised payment service providers.

These providers may collect and process payment information as independent data controllers or as processors acting on our behalf, depending on the service concerned and applicable law.

Hakizoku generally receives payment confirmation, transaction identifiers, payment method information and limited anti-fraud information rather than complete payment card credentials.

We do not retain payment card security codes after a transaction.

Where a payment provider offers the option to save payment information for future purchases, any required consent and storage are managed in accordance with that provider's terms and applicable law.

8. Shipping and International Delivery

To deliver an order, we may share the minimum personal data necessary with relevant:

• carriers;
• postal operators;
• fulfilment providers;
• customs intermediaries;
• delivery partners.

This information may include the recipient's name, address, email address, telephone number, order reference, parcel contents where required for customs purposes and declared value.

For international shipments, customs authorities or other public bodies may require access to delivery and transaction information.

Their processing of personal data is governed by applicable law.

9. Accounts and Guest Checkout

Where available, you may place an order through a customer account or as a guest.

Account data may be used to provide login access, order history, saved information and other requested features.

You are responsible for keeping your account credentials confidential.

Please contact us promptly at support@hakizoku.com if you believe that your account has been accessed or used without authorisation.

You may request closure of your customer account by contacting support@hakizoku.com.

Account closure does not require us to delete information that must be retained for legal, accounting, fraud-prevention or dispute-resolution purposes.

10. Customer Support and Communications

When you contact Hakizoku, we may use the information you provide to:

• verify your identity where necessary;
• investigate your request;
• respond to you;
• provide customer support;
• maintain an appropriate record of the interaction.

Order confirmations, payment notifications, dispatch updates, security or safety notices, policy notifications and responses to customer enquiries are service communications.

They are not marketing messages and may be sent where necessary to perform a contract or comply with applicable law.

11. Marketing Communications

We may send newsletters, product announcements, restock notifications, pre-order information, promotional offers and similar marketing communications where you have consented or where another lawful basis permits us to do so.

You may unsubscribe from marketing communications at any time by using the unsubscribe link included in our marketing emails or by contacting support@hakizoku.com.

Opting out of marketing communications does not prevent us from sending essential communications relating to your orders, account or customer-service requests.

We may retain limited information on a suppression list so that your decision to opt out continues to be respected.

12. Cookies and Similar Technologies

The Hakizoku website may use cookies and similar technologies for purposes including:

• keeping your shopping cart active;
• maintaining login or browsing sessions;
• securing checkout;
• remembering preferences;
• measuring website performance;
• analytics;
• advertising and campaign measurement where appropriate consent has been obtained.

Strictly necessary technologies may be used without consent where permitted by law because the requested website service cannot function properly without them.

Non-essential cookies and tracking technologies are activated only after valid consent where required by applicable law.

You can accept, refuse or adjust available choices through the website's cookie controls.

Where consent is required, withdrawing consent must be as easy as giving it.

Your browser settings may also allow you to delete or block cookies, although disabling certain necessary cookies may affect website functionality.

More detailed information about the technologies used, their providers, purposes and durations may be made available through our Cookie Policy and cookie preference controls.

13. Analytics and Advertising

Where enabled, analytics services may help us understand:

• website traffic;
• page performance;
• customer journeys;
• website usage;
• technical performance.

Advertising or social-media technologies may also be used to measure campaigns or display relevant content.

These tools may collect information such as device identifiers, IP addresses, browsing events and campaign information.

Where consent is legally required, these technologies will not be activated before consent has been obtained.

You may withdraw or modify your choices through the website's cookie settings.

14. Reviews and User Content

If you submit a product review, comment or other content intended to be displayed publicly, the name or alias you choose and the content of your submission may be visible to other users.

Do not include personal or sensitive information such as your:

• home address;
• telephone number;
• order number;
• payment information;
• other confidential information;

in publicly visible content.

We may process review data to verify purchases, prevent fraudulent reviews, moderate unlawful content and improve the customer experience.

15. Fraud Prevention and Website Security

We may process limited account, transaction, device and usage information where reasonably necessary to identify or prevent:

• fraud;
• payment abuse;
• automated purchasing;
• account compromise;
• security incidents;
• attempts to bypass purchase limits;
• other abusive or unlawful activity.

An order or account may be reviewed where risk indicators are detected.

We will not make a decision based solely on automated processing that produces legal or similarly significant effects unless such processing is permitted by applicable law and accompanied by appropriate safeguards.

16. When We Share Personal Data

We may disclose personal data, where necessary and appropriate, to:

• website hosting and e-commerce infrastructure providers;
• payment processors and fraud-prevention providers;
• carriers, postal operators, fulfilment services and customs intermediaries;
• customer-support, email and communication providers;
• analytics, advertising and cookie providers where lawfully enabled;
• IT, security, backup and technical service providers;
• accountants, insurers, auditors, legal advisers and other professional advisers;
• public authorities, courts, regulators or law-enforcement bodies where disclosure is legally required or otherwise lawfully justified;
• a purchaser, investor or adviser involved in a genuine proposed sale, restructuring or transfer of all or part of the business, subject to appropriate confidentiality and data-protection safeguards.

Service providers acting on our behalf may process personal data only for agreed purposes and must provide appropriate confidentiality and security protections.

We do not sell personal data for money.

We do not disclose personal data to unrelated third parties for their own direct-marketing purposes without any permission required by applicable law.

17. International Data Transfers

Because Hakizoku may serve customers internationally and use service providers located in different countries, personal data may be processed outside France or the European Economic Area.

Where personal data is transferred to a country that does not benefit from an applicable adequacy decision, appropriate safeguards may be used where required by law.

These safeguards may include the European Commission's Standard Contractual Clauses together with supplementary protections where appropriate.

Other legally recognised transfer mechanisms may apply depending on the destination and service provider.

You may contact support@hakizoku.com for further information about safeguards relevant to your personal data.

18. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including legal, accounting, security and dispute-resolution requirements.

General retention periods may include:

• Order, invoicing and accounting records: for the duration of the commercial relationship and generally for up to 10 years where required by applicable French accounting obligations;
• Customer account data: while the account remains active and subsequently for an appropriate period, except for information retained for another lawful purpose;
• Customer data used for marketing: during the commercial relationship and generally for up to 3 years after the last purchase or customer contact, unless you opt out earlier;
• Prospect data: generally for up to 3 years after collection or the last meaningful contact;
• Customer-support records: for the period necessary to handle the request and for an appropriate subsequent period for service quality, evidence or dispute management;
• Fraud, security and dispute records: for the period necessary to investigate the issue and for applicable legal limitation periods;
• Consent and opt-out records: for as long as reasonably necessary to demonstrate and respect your choices;
• Cookie and tracker data: for the period indicated in our cookie information and consent tools, subject to applicable legal limits.

When personal data is no longer required, it may be deleted, anonymised or securely archived with restricted access where continued retention is legally necessary.

19. Data Security

We use reasonable technical and organisational measures designed to protect personal data against:

• unauthorised access;
• loss;
• alteration;
• disclosure;
• misuse;
• destruction.

Measures may include access controls, encryption in transit, secure hosting, backups, monitoring and restrictions on service-provider access.

No internet-based service can be guaranteed to be completely secure.

You should use a strong and unique password, keep your account credentials confidential and contact us immediately at support@hakizoku.com if you suspect unauthorised activity.

Where required by law, we will notify the competent supervisory authority and affected individuals of a personal-data breach presenting the relevant level of risk.

20. Your Data Protection Rights

Subject to the conditions and exceptions provided by applicable law, you may have the right to:

• obtain confirmation as to whether we process your personal data;
• request access to your personal data and receive a copy;
• request correction of inaccurate or incomplete data;
• request deletion of personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• object at any time to direct marketing;
• receive certain data in a structured, commonly used and machine-readable format;
• request portability of eligible personal data;
• withdraw consent at any time;
• request information about relevant international-transfer safeguards;
• challenge certain decisions based solely on automated processing where they produce legal or similarly significant effects.

These rights are not absolute.

For example, we may need to retain certain information to comply with legal obligations, complete a transaction, establish or defend legal claims or protect the rights of others.

21. How to Exercise Your Rights

To exercise your data-protection rights, contact us at:

Email: support@hakizoku.com

or write to:

AVETIC SARL / Hakizoku
Centre Europe BP 498
Boulevard du Cerceron
83700 Saint-Raphaël
France

Please clearly describe your request.

We may request additional information only where reasonably necessary to confirm your identity or clarify the scope of your request.

We will respond within the timeframe required by applicable law.

Under the GDPR, this is generally one month, subject to any legally permitted extension for complex or numerous requests.

Privacy requests are normally free of charge.

A reasonable fee may be charged, or a request may be refused, only where permitted by applicable law, including where a request is manifestly unfounded or excessive.

22. Right to Lodge a Complaint

If you believe that your personal data has been handled unlawfully, you may contact us first at support@hakizoku.com so that we can investigate the issue.

You also have the right to lodge a complaint with the French data-protection authority:

Commission nationale de l'informatique et des libertés (CNIL)
3 Place de Fontenoy
TSA 80715
75334 Paris Cedex 07
France

Website: www.cnil.fr

If you live elsewhere in the European Economic Area, you may also have the right to contact the supervisory authority in your country of residence, place of work or the place of the alleged infringement.

23. Children's Privacy

The Hakizoku website is not directed at young children.

A person who does not have the legal capacity to enter into a sales contract must place an order through, or with the authorisation of, a parent or legal guardian.

We do not knowingly collect personal data from children in circumstances where parental authorisation is legally required and has not been provided.

A parent or legal guardian who believes that a child has improperly submitted personal data to Hakizoku may contact us at support@hakizoku.com.

24. Third-Party Websites

The Hakizoku website may contain links to:

• payment providers;
• carriers;
• social networks;
• review platforms;
• other third-party websites or services.

Those organisations operate independently and may have their own privacy notices and data-processing practices.

Hakizoku is not responsible for personal-data processing carried out independently by those third parties.

We encourage you to review the privacy information provided by any third-party service you choose to use.

25. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical, operational or commercial changes.

The updated version will be published on this page with a revised “Last updated” date.

Where a change materially affects how personal data is processed, we will provide additional notice or request consent where required by applicable law.

26. Contact Us

For any questions, concerns or requests relating to this Privacy Policy or your personal data, please contact:

Hakizoku
Operated by AVETIC SARL
Share capital: €2,000
RCS Fréjus: 801 871 492
Centre Europe BP 498
Boulevard du Cerceron
83700 Saint-Raphaël
France

Email: support@hakizoku.com