Last Updated: January 1, 2025
KuraCraft Market operates as a platform connecting artisans with buyers and learners. This privacy notice explains how we collect, use, share, and protect your personal information when you interact with our marketplace, workshops, and related services.
Information We Collect From You
When you register as a buyer, artisan, or workshop participant, we collect identification details including your name, email address, phone number, and billing address. If you create an artisan storefront, we collect business information, portfolio materials, and banking details for payment processing.
Your browsing activity generates technical data including IP addresses, device identifiers, browser types, and interaction patterns with our platform. This helps us understand how you navigate our services and improve your experience.
Transaction and Payment Data
We process payment information through secure third-party processors. While we store transaction history and order details, full credit card numbers are never retained on our servers. Payment processors handle sensitive financial data according to PCI DSS standards.
For artisans receiving payments, we collect and store bank account information necessary to facilitate commission payouts and sales transfers.
Communication Records
Messages exchanged through our platform between buyers and artisans, workshop registration communications, customer support inquiries, and commission negotiation threads are stored to facilitate transactions and provide assistance when needed.
We may review communications to resolve disputes, improve service quality, and ensure compliance with our community guidelines.
How We Use Your Information
Your data enables core platform functions including processing purchases, managing workshop bookings, facilitating custom commissions, and maintaining your account profile. Artisans use buyer information to fulfill orders and communicate about custom projects.
We analyze aggregated usage patterns to improve our interface, develop new features, and optimize the matching between artisans and potential customers. This analysis never identifies individual users in our reporting.
Marketing communications about new artisan collections, upcoming workshops, and platform updates are sent only to users who have opted in. You can modify these preferences at any time through your account settings.
Information Sharing With Third Parties
Artisans receive buyer contact and shipping information necessary to fulfill orders. They are contractually required to use this data only for transaction completion and are prohibited from marketing to customers outside our platform.
Payment processors, shipping carriers, email service providers, and analytics tools receive limited data necessary to perform their specific functions. These service providers operate under strict data processing agreements.
We disclose information when required by Japanese law, in response to valid legal processes, or to protect the rights and safety of our users and platform.
International Data Transfers
While our primary operations are based in Japan, some service providers and customers operate internationally. Data transferred outside Japan receives protection through standard contractual clauses and adequacy determinations where available.
Users accessing our platform from outside Japan should be aware that their information will be processed according to Japanese privacy laws and international standards we maintain.
Cookie and Tracking Technologies
Our platform uses cookies to maintain your login session, remember your preferences, and analyze how users interact with our services. Essential cookies are necessary for platform functionality, while optional cookies support analytics and improvements.
You can control cookie settings through our cookie preference center and your browser settings. Disabling certain cookies may limit some platform features. For detailed information, see our Cookie Policy.
Your Privacy Rights and Choices
You have the right to access your personal information, request corrections to inaccurate data, and download your account information in portable formats. Account deletion requests are processed within 30 days, though some information may be retained for legal and accounting purposes.
You can opt out of marketing communications while continuing to receive transactional emails about your orders and bookings. Privacy settings in your account allow you to control how your profile appears to other users.
Data Retention Periods
Active account information is retained as long as you maintain your account. Transaction records are kept for seven years to comply with financial regulations. Deleted account data is purged from active systems within 90 days, though backup systems may retain data for an additional six months.
Marketing consent records and communication logs are maintained according to legal requirements and are deleted when no longer necessary for legitimate business purposes.
Security Measures We Implement
Your data is protected through encryption during transmission and at rest. Access controls limit which employees can view personal information, and all access is logged for security monitoring.
Regular security assessments, penetration testing, and vulnerability scanning help us identify and address potential risks. While we implement industry-standard protections, no system is completely secure, and we encourage users to maintain strong passwords and report suspicious activity.
Children's Privacy Protection
Our platform is not intended for users under 16 years of age. We do not knowingly collect information from children. If we become aware that a child has provided personal information, we will delete it promptly and terminate the associated account.
Workshop participation by minors requires parental consent and supervision arrangements made directly with the hosting artisan.
Changes to This Privacy Notice
We update this policy periodically to reflect changes in our practices, legal requirements, or platform features. Material changes will be communicated through email and prominent notice on our platform at least 30 days before taking effect.
Continued use of our services after changes become effective indicates acceptance of the updated terms. You can always access previous versions through our policy archive.
Contact Information for Privacy Matters
Questions about this privacy notice, requests to exercise your rights, or concerns about how your data is handled should be directed to our privacy team:
Email: privacy@torainwood.com
Mail: Privacy Officer, KuraCraft Market, Japan, 〒222-0037 Kanagawa, Yokohama, Kohoku Ward, Okurayama, 2 Chome−7−47 シャトレ大倉山 103
We respond to privacy inquiries within 30 days. For urgent security concerns, contact security@torainwood.com.