1. Privacy Policy Summary
Saisei Pharma Co., Ltd. (“we,” “us,” or “the Company”) handles customers’ personal information lawfully and appropriately and strives to protect it. This Privacy Policy applies to the websites, online store, email communications, registrations for free guides and campaigns, inquiries, surveys, and other related services operated by the Company (collectively, the “Services”).
The following is a summary of the main points of this Privacy Policy. Please review each section for details.
Information We Collect
In connection with purchases, applications for free guides, email subscriptions, inquiries, surveys, and other provision of the Services, we may collect the following types of information.
- Name, email address, telephone number, and address
- Order details, purchase history, delivery destination, and limited payment-related information
- Inquiry details, survey responses, and email subscription status
- IP address, cookie ID, device information, browsing history, and responses to advertisements or emails
- Other information voluntarily provided by customers
As a general rule, we do not actively request health information that is not necessary for purchases or applications for free guides.
Main Purposes of Use
We use collected personal information mainly for the following purposes.
- To process orders, payments, deliveries, returns, and refunds
- To provide free guides, materials, and other content requested by customers
- To provide information about wellness, products, services, and campaigns
- To respond to inquiries, general product consultations, and complaints
- To improve our website, products, and services
- To analyze website access, measure advertising effectiveness, and display interest-based advertisements
- To ensure security, prevent unauthorized use, and comply with laws and regulations
For email marketing, non-essential cookies, advertising-related use, and other processing that requires consent under applicable law, we will obtain customer consent in advance where necessary.
Sharing with External Services
We may share personal information with Shopify, payment providers, digital wallets, delivery companies, email distribution services, cloud services, analytics services, advertising services, and other contractors or service providers to the extent necessary to provide the Services.
We do not sell customers’ personal information to third parties for monetary or other consideration.
However, through the use of advertising cookies and advertising measurement services, online identifiers, browsing history, responses to advertisements, and other information may be sent to advertising service providers. Customers may be able to choose whether non-essential cookies and similar technologies are used through cookie settings or other methods we provide.
Your Rights
Depending on the laws applicable in your country or region of residence, you may have rights concerning your personal information, including the following.
- The right to receive an explanation of how personal information is handled
- The right to request access to or disclosure of personal information
- The right to request correction of inaccurate information
- The right to request deletion, suspension of use, or restriction of processing
- The right to withdraw consent
- The right to opt out of marketing emails
- The right to opt out of the sale, sharing, or use of personal information for targeted advertising
- The right to lodge a complaint with a supervisory authority
The content, conditions, and exceptions relating to these rights may vary depending on your country or region of residence.
Contact
For inquiries regarding this Privacy Policy, our handling of personal information, cookies, email communications, or the exercise of rights, please contact us at the following contact point.
- Business Operator Handling Personal Information
- Saisei Pharma Co., Ltd.
- Contact Point for Personal Information
- Personal Information Protection Officer
- Email Address
- order-sp@saisei-pharma.jp
- Contact Form
- https://saisei-pharma.co.jp/pages/contact
We will respond to requests to exercise rights without undue delay and, in principle, within one month after receiving the request.
Full Privacy Policy
The following explains in detail how we handle personal information.
2. Personal Information We Collect
We may collect the following information through our websites, online store, email communications, campaigns, inquiries, and other services.
Information Provided Directly by Users
- Name
- Email address
- Telephone number
- Address
- Delivery address
- Billing address
- Order details and purchase history
- Inquiry details
- Survey responses
- Email subscription and unsubscribe status
- Other information provided through forms, order procedures, or communications with us
Payment-Related Information
When you purchase products, credit card numbers, expiration dates, security codes, and other information necessary for payment are collected and processed through Shopify, Shopify Payments, Google Pay or other digital wallets, or third-party payment services used by us.
We do not directly store complete credit card numbers or security codes in our own systems.
To confirm orders and payments, prevent unauthorized use, process refunds, and manage transactions, we may view or collect limited payment-related information such as the payment method used, card brand, last digits of the card number, payment status, transaction ID, and similar information.
If you use Google Pay, payment information held by Google and information related to your Google account are handled in accordance with Google’s Privacy Policy and the Google Payments Privacy Notice.
The privacy policies and terms of Shopify, Google, or each payment service provider may apply to the handling of payment information.
Information Collected Automatically
- IP address
- Cookie ID and other online identifiers
- Browser, device, and operating system information
- Access date and time
- Pages viewed
- Referrer URL
- Advertising identifiers
- Email open and link-click history
- Approximate country, region, or location information
- Information about actions, usage, and purchasing behavior on the website
Information Obtained from Third Parties
We may obtain personal information from the following third parties to the extent necessary for service provision, payment, delivery, advertising, analytics, and other business operations.
- E-commerce platforms such as Shopify
- Shopify Payments and other payment providers
- Google Pay and other digital wallet services
- Credit card companies, banks, and other financial institutions
- Delivery companies
- Advertising and analytics services
- Social networking services and external account-linking services
- Email distribution services
- Customer support services
- Other contractors and service providers
Information obtained from third parties may include order information, payment method used, payment status, delivery status, advertising and website usage, registration information, and other information necessary to provide our Services.
3. Purposes of Use of Personal Information
Providing Products and Services
- Accepting orders, processing payments, and arranging delivery
- Communicating order confirmations and delivery status
- Handling returns, refunds, and inquiries
- Preventing unauthorized use
Free Guides and Email Communications
- Sending free guidebooks
- Sending registration confirmation emails
- Providing wellness information
- Providing information about products, services, and campaigns
- Managing email delivery
- Analyzing open rates and click-through rates
Website Operation and Improvement
- Analyzing website usage
- Improving content and services
- Responding to errors and ensuring security
- Measuring advertising effectiveness
- Displaying advertisements according to interests
Legal Compliance and Protection of Rights
- Keeping records required by law
- Responding to fraudulent acts or violations of terms
- Responding to legal claims and disputes
4. Legal Bases for Processing Personal Information
We process personal information based on one or more of the following legal bases in accordance with applicable personal information protection laws.
The applicable legal basis may vary depending on the customer’s country or region of residence, the Services used, and the purpose for which personal information is used.
4.1 Performance of a Contract or Pre-Contractual Steps
We process personal information to the extent necessary to perform a contract with you or to take steps at your request before entering into a contract.
This includes the following purposes.
- Receiving product orders
- Confirming order details
- Processing payments
- Packing and delivering products
- Communicating delivery status
- Handling returns, exchanges, and refunds
- Responding to purchase-related inquiries
- Sending free guides, materials, or other content requested by customers
- Providing services requested by customers
4.2 Customer Consent
Where we have obtained valid consent from you, we process personal information within the scope of that consent.
This includes the following purposes.
- Email communications regarding wellness information, products, services, and campaigns
- Use of non-essential cookies, analytics cookies, and advertising cookies
- Delivery of advertisements according to customer interests
- Measurement of advertising effectiveness
- Participation in surveys, campaigns, or other voluntary programs
- International transfers or third-party disclosures where consent is required by law
- Processing of health information or other sensitive information
4.3 Compliance with Legal Obligations
We process personal information to the extent necessary to comply with legal obligations applicable to us.
This includes the following purposes.
- Retention of tax, accounting, and transaction records
- Identity verification required by law
- Responding to lawful requests from administrative agencies, courts, supervisory authorities, or other public bodies
- Responding to consumer protection, product safety, and other legal obligations
- Responding to the exercise of personal information rights
- Reports, filings, and recordkeeping required by law
4.4 Legitimate Interests of the Company or Third Parties
We may process personal information as necessary to pursue our legitimate interests or those of third parties, provided that such processing does not unduly infringe customers’ rights or interests.
This includes the following purposes.
- Safe operation of websites, online stores, and systems
- Prevention and investigation of unauthorized access, fraudulent orders, fraud, and other misuse
- Maintenance of information security
- Improvement of services, products, content, and customer support
- Analysis of website usage and service quality
- Handling inquiries, complaints, and disputes
- Protection of our rights, property, and legal interests
- Internal audits, business management, and business operations
- Information on related products or services for existing customers to the extent permitted by applicable law
4.5 Protection of Vital Interests
We may process personal information where necessary to protect the life, body, or other vital interests of a customer or another person and where it is difficult to obtain consent.
4.6 Public Interest or Official Authority
We may process personal information where required by applicable law for tasks carried out in the public interest or to respond to lawful requests from public authorities.
4.7 Purposes of Use and Main Legal Bases
The main processing activities we conduct and their primary legal bases are generally as follows.
- Product orders, payments, and delivery: performance of a contract
- Returns, exchanges, refunds, and purchase-related inquiries: performance of a contract and legitimate interests
- Sending free guides or requested materials: pre-contractual steps and response to the customer’s request
- Ongoing email marketing: consent or, where permitted by applicable law, legitimate interests
- Use of essential cookies: performance of a contract and legitimate interests
- Use of analytics and advertising cookies: consent or legitimate interests depending on the region and processing details
- Improvement of websites and services: legitimate interests
- Response to misuse, fraud, and security threats: legitimate interests and legal obligations
- Retention of tax, accounting, and transaction records: legal obligations
- Response to legal claims, disputes, and protection of rights: legitimate interests and legal obligations
- Processing of health information and other sensitive information: explicit consent or another lawful basis permitted by applicable law
Multiple legal bases may apply to the same processing. We determine the appropriate legal basis according to the purpose, circumstances, and applicable law.
4.8 Changes to Legal Bases
If we change the purpose of use or legal basis for processing personal information, we will consider the relationship with the original purpose, customers’ reasonable expectations, the nature of the personal information, and the impact on customers.
If the changed purpose is not compatible with the original purpose, we will notify customers in advance and obtain new consent or take other lawful measures where necessary.
5. Email Marketing
5.1 Email Delivery
Where we have obtained your consent, we send email communications regarding wellness information, products and services, campaigns, events, surveys, and other information from us.
5.2 Content of Emails
Our emails may include free guides or other content, registration confirmations, wellness and self-care information, product and service information, campaign and event information, surveys, website updates, and other information related to the scope of your consent.
5.3 Measurement of Opens and Clicks
Emails sent by us may use pixel tags, individually identifiable links, and similar technologies to check delivery status, open status, and link clicks. We use this information to manage email delivery, improve content, analyze customer interests, and improve product and service information.
5.4 Unsubscribing and Withdrawal of Consent
You may unsubscribe from marketing emails at any time through the unsubscribe link in each marketing email, an email preference page, or our contact point. Even after unsubscribing, we may still send transactional or administrative communications necessary for orders, payments, delivery, returns, refunds, security, terms, important privacy policy updates, legal compliance, or provision of the Services.
5.5 Retention of Unsubscribe Information
To respect your unsubscribe request and prevent accidental re-sending of marketing emails, we may retain your email address and unsubscribe records as an unsubscribe list for the necessary period. This information is used for unsubscribe management, legal compliance, and response records, not to send marketing emails.
5.6 Communications to Existing Customers
Where permitted by applicable law, we may send information about similar products or services to customers who have previously purchased or used our products or services. In such cases, we provide a clear and easy means to unsubscribe when information is collected and in each email.
6. Cookies, Analytics, and Advertising
6.1 Use of Cookies and Similar Technologies
Our websites and online store may use cookies, pixel tags, local storage, device identifiers, and similar technologies (collectively, “Cookies”) for service provision, improved convenience, usage analysis, security, advertising effectiveness measurement, and other purposes.
Cookies are small data files stored in your browser or device when you view a website. Through Cookies, we or our service providers may identify or record your device, browser, website usage, and similar information.
Cookies generally do not directly store your name. However, when combined with account information, order information, email addresses, or other information held by us, they may be handled as information relating to a particular customer.
6.2 Types and Purposes of Cookies
Essential Cookies
Essential Cookies are necessary to provide websites and online stores properly and securely. They include cookies used to retain cart contents, manage sessions and login status, provide order and checkout functions, retain language, currency, and regional settings, prevent unauthorized access or misuse, ensure security, and store cookie choices.
Functional Cookies
Functional Cookies record language, region, display settings, and other choices to make the website more convenient to use.
Analytics Cookies
Analytics Cookies help us understand website usage and improve websites, products, content, and services. We may analyze visits, viewed pages, time spent, referrers, devices, browsers, and website actions.
Advertising Cookies
Advertising Cookies are used to display advertisements according to customer interests, adjust ad frequency, measure advertising effectiveness, and confirm results such as website visits or purchases from advertisements. Advertising providers may combine information collected on our website with information collected on other websites, apps, or services.
6.3 Shopify Cookies
Our online store is operated using the Shopify e-commerce platform provided by Shopify Inc. and its affiliates. Shopify may use Cookies for store display, shopping carts, checkout, payments, security, fraud prevention, analytics, service improvement, and other purposes. Please review Shopify’s privacy information for details.
6.4 Google Analytics
We may use Google Analytics, an analytics service provided by Google LLC, to analyze website and online store usage and improve our services. Google Analytics uses Cookies to collect information such as viewed pages, access date and time, time spent, referrers, browser and device information, IP address, approximate country or region, website events, and identifiers assigned to cookies or devices. We do not intentionally send Google Analytics names, email addresses, telephone numbers, or other information that directly identifies customers.
6.5 Advertising and Measurement Services
We may use Google Ads, Meta Ads, and other advertising and marketing services to deliver advertisements, measure advertising effectiveness, and improve services. Through Cookies, pixel tags, and similar technologies, information such as ad views or clicks, website visits, purchases, registrations, inquiries, IP addresses, browser and device information, cookie IDs, advertising identifiers, and approximate location may be sent to advertising service providers.
6.6 Email Opens and Clicks
Please see “5.3 Measurement of Opens and Clicks” for the measurement of email opens and link clicks.
6.7 Managing Cookies
You may consent to, refuse, or change settings for non-essential Cookies through a cookie consent banner or cookie settings screen. You may also refuse cookie storage or delete stored cookies through browser settings. If cookies are disabled, some functions such as carts, login, and language or region settings may not work properly.
6.8 Consent and Changes
In regions where consent is required by applicable law, we obtain consent before using analytics cookies, advertising cookies, and other non-essential Cookies. You may change or withdraw consent at any time through cookie settings. Withdrawal does not affect the lawfulness of processing performed before withdrawal.
7. Third-Party Disclosure and Outsourcing
7.1 Disclosure to Third Parties
Except in the following cases, we do not provide customers’ personal data to third parties without prior consent.
- Where based on laws and regulations
- Where necessary to protect a person’s life, body, or property and obtaining consent is difficult
- Where especially necessary for public health or the sound upbringing of children and obtaining consent is difficult
- Where cooperation with a national or local government or other public authority is necessary for legally prescribed affairs and obtaining consent may hinder those affairs
- Where we receive a lawful disclosure request from a court, law enforcement agency, supervisory authority, or other public body
- Where personal data is transferred in connection with merger, company split, business transfer, or other business succession
- Where otherwise permitted by applicable law
When we provide personal data to a third party based on customer consent, we will inform customers of the recipient, the information provided, the purpose of use, and other matters required by applicable law.
7.2 Sharing with Contractors and Service Providers
We may outsource all or part of the handling of personal information to contractors and service providers to the extent necessary for operation of the Services and achievement of the purposes stated in this Privacy Policy.
- Shopify and other e-commerce platform providers
- Shopify Payments and other payment providers
- Google Pay and other digital wallet providers
- Credit card companies, banks, and other financial institutions
- Warehousing, packing, shipping, and delivery providers
- Email distribution and customer management service providers
- Cloud, server, data storage, and security service providers
- Website production, maintenance, and system administration providers
- Analytics and advertising measurement service providers
- Customer support and inquiry response contractors
- Accountants, tax accountants, attorneys, and other professionals
- Other contractors necessary to provide the Services
We provide personal information to contractors only to the extent necessary for their outsourced work and supervise their handling of personal information appropriately in accordance with applicable law.
7.3 Information Shared
Depending on the nature of the work, information shared with contractors and service providers may include name, email address, telephone number, delivery and billing addresses, order details, purchase history, payment status, transaction identifiers, delivery status, inquiry details, email subscription status, IP address, cookie ID, device information, access history, advertising interactions, registrations, purchases, and other information necessary for the outsourced work.
7.4 Information Provided to Advertising and Analytics Services
When we use analytics, ad delivery, or ad measurement services, website browsing history, ad views and clicks, purchase or registration actions, IP addresses, device information, and other online identifiers may be sent to service providers through Cookies, pixel tags, and similar technologies.
7.5 Transfer in Business Succession
If we conduct a merger, company split, business transfer, reorganization, asset sale, or other business succession, customers’ personal information may be disclosed or transferred to the successor, prospective transferee, or professional advisors.
7.6 Provision to Businesses Located Outside Japan
Our contractors and service providers may be located outside Japan or may handle personal information on servers outside Japan. Please see “9. International Transfers of Personal Information” for details.
8. Sale of Personal Information and Sharing for Advertising Purposes
8.1 Sale of Personal Information
We do not sell customers’ personal information to third parties for monetary or other consideration, and we do not sell or provide customer lists containing names, addresses, email addresses, telephone numbers, order details, or other customer information for third parties’ independent marketing purposes.
However, under some applicable laws, certain disclosures not involving monetary consideration may be deemed a “sale.” If our disclosures constitute a sale under such laws, we will provide required notices and opt-out methods.
8.2 Sharing for Advertising Purposes
For ad delivery, advertising measurement, audience analysis, and interest-based advertising, we may share certain information with advertising and analytics providers, including IP addresses, cookie IDs, advertising identifiers, browser and device information, viewed pages, referrer URLs, ad interactions, product views, cart additions, purchases, registrations, inquiries, approximate location, and other online identifiers necessary for advertising and measurement.
We do not intentionally provide advertising or analytics providers with information that directly identifies customers, such as names, addresses, telephone numbers, or complete payment information, beyond what is necessary for ad delivery or measurement. We may use functions that send hashed email addresses, telephone numbers, or other information to advertising services in accordance with applicable law and customer consent.
8.3 Targeted Advertising and Cross-Context Behavioral Advertising
We or our advertising service providers may combine your use of our website with information collected on other websites, apps, or services to display advertisements according to your interests. Where required by applicable law, we provide means to opt out through cookie settings, data-sharing opt-out pages, or other appropriate methods.
8.4 Opt-Out of Sale or Sharing
Depending on applicable law in your region, you may have the right to opt out of the sale or sharing of personal information or use for targeted advertising. You may be able to submit an opt-out request through “Do Not Sell or Share My Personal Information,” “Your Privacy Choices,” cookie settings, data-sharing opt-out pages, or the contact point in this Privacy Policy. Where required and technically recognized by our systems, we respect valid opt-out preference signals such as Global Privacy Control.
8.5 No Discrimination for Opting Out
We do not refuse products or services, apply unfairly different prices or conditions, or otherwise discriminate because a customer exercised personal information rights. However, if use of personal information is necessary for a specific service or function, refusal of that use may make all or part of that service or function unavailable.
8.6 Categories Sold or Shared
Where disclosure is required by applicable law, we will state in regional additional provisions or separate privacy notices the categories of personal information sold or shared in the past 12 months or other period prescribed by law, categories of recipients, and purposes of use. If we have not sold or shared personal information during the relevant period, we will state that fact.
9. International Transfers of Personal Information
9.1 Handling Outside Japan
We provide the Services from Japan. If customers outside Japan use the Services, their personal information may be transferred to Japan and stored or processed in Japan. Personal information may also be transferred to and processed in countries or regions other than Japan when our e-commerce platform, payment, digital wallet, cloud, email distribution, analytics, advertising, customer support, or other service providers are located outside Japan or use servers outside Japan. These countries or regions may include Japan, Canada, Singapore, the United States, and other countries or regions where we, our service providers, their affiliates, or subcontractors are located.
9.2 Information That May Be Transferred
Information transferred abroad may include name, email address, telephone number, delivery and billing addresses, order details, purchase history, payment status, delivery status, inquiry details, email subscription, opens and clicks, IP address, cookie ID, device information, access history, advertising interactions, registrations, purchases, and other information necessary to provide the Services.
9.3 Purposes of International Transfers
We may transfer personal information internationally for online store operations, orders, payments, refunds, shipping, delivery, free guides and email communications, cloud storage and system operations, website maintenance, security, fraud prevention, analytics, service improvement, advertising, customer support, legal compliance, audits, and dispute handling.
9.4 Safeguards for International Transfers
When transferring personal information internationally, we take necessary and appropriate safeguards in accordance with applicable data protection laws. These may include adequacy decisions, standard contractual clauses, UK international data transfer agreements or addenda, data processing agreements, contractual confidentiality and security obligations, restrictions on purpose, subcontractor management, transfer impact assessments or risk assessments, encryption, access controls, customer consent, and other transfer mechanisms permitted by law.
9.5 Transfers from the EEA
Where personal data of customers in the EEA is transferred outside the EEA, we use appropriate transfer mechanisms under the GDPR, such as adequacy decisions, standard contractual clauses, and additional safeguards where necessary.
9.6 Transfers from the United Kingdom
Where personal data of customers in the United Kingdom is transferred outside the UK, we use transfer mechanisms approved under the UK GDPR and related laws, such as UK adequacy regulations, international data transfer agreements, and UK addenda.
9.7 Provision from Japan to Third Parties in Foreign Countries
When we provide personal data to a third party in a foreign country under Japan’s Act on the Protection of Personal Information, we obtain consent or confirm that the recipient maintains a legally required personal information protection system, and we provide required information where consent is used.
9.8 Inquiries Regarding Recipients and Safeguards
Customers may contact our personal information contact point regarding major overseas service providers, major transfer destinations, or an overview of applicable safeguards. We may limit disclosure to protect service provider security, trade secrets, or third-party rights.
10. Retention Periods
10.1 Basic Policy
We retain personal information only for the period necessary to achieve the purposes of collection and use, to fulfill contractual or legal obligations, and to protect our or third parties’ legitimate rights and interests. When retention is no longer necessary, we delete, erase, or anonymize the information securely in accordance with applicable law and internal rules.
10.2 Main Retention Periods
Order, purchase, and transaction information is retained for the period required by applicable law or necessary for sales, delivery, warranty, returns, refunds, accounting, tax, audits, and disputes. Account information is retained while the account is active and for a necessary period after withdrawal. Inquiry and support records are retained for a reasonably necessary period after completion. Free guide and email information is retained while necessary for providing content and managing subscriptions, including minimal unsubscribe records where necessary. Survey and campaign information, cookie and advertising information, security logs, and rights request records are retained for the periods necessary for their purposes.
10.3 Criteria for Determining Retention
Where a specific retention period is not set, we consider the purpose of collection, period necessary for providing products or services, contractual relationship, legal retention obligations, product quality and safety, returns, warranties, inquiries, possible lawsuits or disputes, security needs, volume and sensitivity of information, potential impact of incidents, and whether the purpose can be achieved using anonymized information.
10.4 Review of Retention
We periodically review whether continued retention of personal information is necessary in light of purposes of use, legal obligations, and business needs.
10.5 Deletion and Anonymization
After the retention period ends, we delete or erase personal information in a reasonable and secure manner that makes restoration or reuse difficult. We may retain and use properly anonymized or aggregated information for statistics, analysis, research, service improvement, and similar purposes.
10.6 Backups and Contractor Systems
Deleted personal information may temporarily remain in backups, disaster recovery data, or contractor systems. We do not use such information in ordinary business and delete or overwrite it according to applicable retention cycles, contracts, and safeguards.
10.7 Legal Claims or Investigations
If litigation, disputes, audits, administrative investigations, legal claims, security incidents, or related responses are ongoing, we may retain relevant personal information beyond the usual retention period for as long as necessary.
11. Security Measures
11.1 Basic Policy
We take necessary and appropriate organizational, human, physical, and technical security measures to prevent unauthorized access, leakage, loss, damage, alteration, misuse, and other incidents involving personal information, taking into account the nature of the information, purposes and methods of handling, risks, and technical standards.
11.2 Organizational Measures
We clarify responsibilities, define authorities, establish internal rules, maintain records, implement reporting systems, conduct inspections and audits, respond to legal changes, and prepare incident response procedures.
11.3 Human Measures
We provide education and supervision for personnel handling personal information, clarify confidentiality obligations, provide guidance on limited business use, alert staff to phishing and malware risks, and review access rights when roles change.
11.4 Physical Measures
We manage areas where personal information is handled, lock documents and media, prevent theft and loss of devices and media, safely dispose of documents and media, manage external removal of information, and prevent leakage from screens, printouts, and storage locations.
11.5 Technical Measures
We implement access control using user IDs, passwords and other authentication, additional verification where necessary, limited permissions, encrypted communications, updates to systems and devices, malware and unauthorized access countermeasures, log monitoring, suspicious access detection, backups, recovery procedures, and deletion of unnecessary accounts, permissions, and data.
11.6 Privacy by Design and Default
When introducing new services, systems, campaigns, or mechanisms involving personal information, we consider privacy and security from the planning and design stages and aim to minimize collection, clarify purposes, limit access, use minimal retention periods, provide understandable consent and privacy settings, prevent unnecessary sharing, and consider deletion or anonymization.
11.7 Management of Contractors
When outsourcing personal information handling, we review contractors’ security and privacy systems according to the nature and risk of the work and establish necessary contractual obligations.
11.8 Security Incidents
If we become aware of a leakage, loss, damage, unauthorized access, or other security incident or potential incident, we promptly confirm facts and impact, prevent expansion of damage, investigate causes, restore systems, and take measures to prevent recurrence. Where required by law, we report to relevant authorities and notify affected customers.
11.9 Customer Security
Customers should properly manage account information, passwords, and devices and avoid reuse or disclosure of passwords. If you notice unauthorized account use or a suspected issue, please contact us promptly.
11.10 Limits of Security
Although we take reasonable and appropriate security measures, no internet communication, information system, or electronic storage method can be guaranteed to be completely secure.
12. Customer Rights
12.1 Basic Policy
Depending on the personal information protection laws applicable in your country or region, you may have certain rights regarding personal information handled by us. We respond to legitimate exercises of rights in accordance with applicable law.
12.2 Right to Know
You may have the right to receive an explanation of matters such as the categories of personal information collected, sources, purposes, legal bases, recipients or recipient categories, international transfers and safeguards, retention periods, rights, automated decision-making, and contact methods.
12.3 Access and Disclosure
You may have the right to confirm whether we process your personal information and to request access to or a copy of personal information held by us.
12.4 Correction, Addition, or Update
If your personal information held by us is inaccurate, incomplete, or outdated, you may have the right to request correction, addition, or update.
12.5 Deletion or Erasure
Where conditions under applicable law are met, you may have the right to request deletion or erasure of personal information. We may retain information where necessary for orders, contracts, legal obligations, security, disputes, protected purposes, or other purposes permitted by law.
12.6 Suspension or Restriction
Where conditions under applicable law are met, you may request suspension of use, erasure, suspension of third-party provision, or restriction of processing.
12.7 Withdrawal of Consent
Where processing is based on consent, you may withdraw consent at any time for the future. Withdrawal does not affect processing lawfully conducted before withdrawal.
12.8 Opt-Out of Marketing
You may opt out of marketing emails and other direct marketing at any time. Transactional or administrative communications necessary for the Services may still be sent.
12.9 Objection to Legitimate Interests
Where processing is based on legitimate interests, you may have the right to object based on your particular situation. We will stop processing unless there are compelling legitimate grounds or the processing is necessary for legal claims.
12.10 Data Portability
Where conditions under applicable law are met, you may have the right to receive personal information you provided to us in a structured, commonly used, machine-readable format and to request transfer to another business where technically feasible.
12.11 Opt-Out of Sale, Sharing, and Targeted Advertising
Depending on applicable law, you may have the right to opt out of the sale of personal information, sharing for advertising purposes, targeted advertising, or cross-context behavioral advertising.
12.12 Automated Decision-Making
We currently do not conduct fully automated decision-making that produces legal or similarly significant effects on customers. If we introduce such processing in the future, we will provide notice in accordance with applicable law.
12.13 Complaints to Supervisory Authorities
You may contact us regarding concerns about our handling of personal information and may also have the right to lodge a complaint with the data protection supervisory authority in your country or region.
12.14 No Discrimination
We do not unfairly refuse products or services, apply different prices or conditions, or otherwise discriminate because you exercised personal information rights.
12.15 Scope and Exceptions
Not all rights apply to all customers or all personal information. We may deny all or part of a request where permitted by law, such as when identity cannot be verified, third-party rights would be infringed, legal retention obligations apply, or the request is manifestly unfounded or excessive.
13. How to Exercise Rights
13.1 How to Submit a Request
To exercise rights described in this Privacy Policy, please contact our personal information contact point by email at order-sp@saisei-pharma.jp or through the contact form at https://saisei-pharma.co.jp/pages/contact. Please include “Personal Information Request” in the email subject or inquiry text and state the request you wish to make.
13.2 Information to Provide
We may ask you to provide information necessary to identify and respond to the request, such as name, email address, address or telephone number, order number, customer number, account information, requested right, target information or period, desired response, and other reasonably necessary information.
13.3 Identity Verification
To prevent unauthorized disclosure, change, or deletion of personal information, we verify that the requester is the individual concerned. Verification is generally conducted by comparing information held by us, such as registered information, email address, order number, and purchase history. Where necessary, we may request a copy of an official identity document.
13.4 Requests by Agents
Where permitted by applicable law, you may exercise rights through a legal representative or authorized agent. We may request information and documents necessary to verify the identity of the individual and agent and the authority of the agent.
13.5 Receipt and Response Period
We respond to rights requests without undue delay and, in principle, within one month after receiving the request. If necessary information for identity verification or request identification is missing, the response period may be counted from the time we receive the necessary information.
13.6 Response Method
We generally respond by email to the registered email address or the email address used for identity verification. When providing a copy of personal information, we use an appropriate format considering the request and information security.
13.7 Fees
We do not charge a fee for responding to rights requests. However, we may refuse all or part of a request where it is manifestly unfounded, excessive, repetitive, or otherwise permitted by applicable law.
13.8 Cases Where We Cannot Respond
We may be unable to respond where identity or authority cannot be verified, the request cannot be reasonably identified, third-party rights or our trade secrets or security would be harmed, retention or use is legally required, the information is necessary for disputes or security, or the request is manifestly unfounded, excessive, or repetitive.
13.9 Appeals and Reconsideration
If you disagree with our decision regarding a rights request, you may request reconsideration through the contact point. You may also have the right to lodge a complaint with a supervisory authority.
13.10 Response Structure
Requests and inquiries are first received by our Personal Information Protection Officer, who confirms the details and cooperates with internal departments, service providers, delivery companies, payment providers, email providers, or external experts where necessary.
13.11 Records of Rights Requests
We may retain records of rights requests, identity verification, response process, response details, and response dates for a reasonably necessary period for legal compliance, confirmation of appropriate response, dispute handling, and other necessary purposes.
14. Children’s Privacy
14.1 Services Intended for Adults
Our websites, online store, products, free guides, email communications, campaigns, and other services are generally intended for adults and are not designed or provided mainly for children.
14.2 Use by Minors
If a minor uses our services, purchases products, registers for free guides or email communications, or provides personal information, the minor should obtain consent from a parent or other legal representative where required by applicable law.
14.3 Information That May Be Collected from Children
Where lawful and necessary, we limit children’s personal information to the minimum necessary for service provision, such as name, age or birthdate where age verification is necessary, email address, delivery address, order or inquiry information, information about parents or legal representatives, and information necessary to verify consent or authority.
14.4 Accidental Collection
If we recognize that we have collected personal information from a child below the age specified by applicable law without required parental consent, we will confirm the facts and promptly take necessary measures such as deletion, suspension of use, or cancellation of registration in accordance with applicable law.
14.5 Requests by Parents or Legal Representatives
Parents or legal representatives may be able to request confirmation, disclosure, correction, deletion, suspension of use or third-party provision, withdrawal of consent, or suspension of email delivery regarding a child’s personal information.
14.6 Advertising and Profiling Directed to Children
We do not intend to deliver behavior-based advertising mainly targeting children or conduct profiling that has significant effects on children.
14.7 Future Child-Directed Services
If we provide services, content, campaigns, or products directed to children in the future, we will separately explain target age, personal information collected, purposes of use, parental consent methods, identity verification methods, and children’s rights in an understandable manner.
14.8 Contact
If you believe we have collected a child’s personal information without required parental consent, please contact the personal information contact point stated in this Privacy Policy.
15. Health Information and Other Sensitive Information
15.1 Basic Policy
We recognize that health status, medical history, diagnosis, treatment, medication, test results, disabilities, and other health-related information require particularly careful handling. We do not request health information unless necessary for ordinary services such as purchases, free guide applications, or email subscriptions.
15.2 Health Information We May Collect
Depending on inquiries, consultations, surveys, or communications, we may collect information such as current or past health condition, medical history, symptoms or diagnosis, treatment, clinic visits, medication, allergies, pregnancy or nursing, test results, and other information indicating physical or mental health status.
15.3 Purposes of Use
If we collect health information, we use it as necessary to respond to inquiries or consultations, provide general product guidance, confirm product precautions, respond to safety reports, complaints, or incidents, improve products and services, comply with laws, protect vital interests, or for other purposes explicitly consented to by the customer.
15.4 Legal Bases
When handling health information or other sensitive information, we do so based on explicit consent or another lawful basis under applicable law. Where health information constitutes sensitive personal information under Japanese law, we obtain prior consent unless an exception applies.
15.5 Third-Party Disclosure
We do not provide health information to third parties without consent except where the individual explicitly consents, disclosure is based on law, necessary to protect life, body, or property and consent is difficult, necessary for product safety, accidents, complaints, or possible health damage and permitted by law, or otherwise permitted by applicable law.
15.6 Security of Health Information
Considering the sensitive nature of health information, we may take additional safeguards such as limiting access, setting purpose-based access rights, properly managing emails and documents, restricting unnecessary copies and sharing, shortening retention periods, supervising contractors, and responding promptly to incidents.
15.7 Separation from Medical Records
Customer information obtained through the online store, free guides, email communications, and general product inquiries is managed separately from medical institution records, patient information, or medical consultation information. Our online store, product pages, free guides, and general contact points are not intended to provide diagnosis, treatment, prescriptions, or other medical acts.
15.8 Not Medical Advice
Our products, websites, free guides, emails, and other content provide general wellness and product information and are not intended for individual diagnosis, treatment, prescription, or medical advice. Please consult a physician, pharmacist, or other appropriate healthcare professional if you have concerns about health, treatment, medication, pregnancy, nursing, allergies, or similar matters.
15.9 Deletion and Rights
Depending on applicable law, customers may exercise rights such as disclosure, correction, deletion, suspension of use, and withdrawal of consent regarding their health information. We may retain some health information where there are legal retention obligations, safety records, legal claims, or other legitimate reasons.
15.10 Accidental Collection
If we recognize that we have obtained health information unnecessary for the purpose of use, we will not use it and will delete or anonymize it within a reasonable period unless retention is required for legal or safety reasons.
16. Links to External Sites and Third-Party Services
16.1 External Links
Our websites, online store, free guides, email communications, and other content may contain links to websites, apps, social networking services, video platforms, payment services, and other external services operated by third parties.
16.2 Third-Party Handling
The collection, use, storage, sharing, and protection of personal information, cookies, and other information on external sites or third-party services are governed by the privacy policies, cookie policies, terms of use, and other conditions of those third parties.
16.3 Entering Information on External Sites
If you enter personal information such as name, email address, payment information, or health information on external sites or third-party services, that information may be collected and processed directly by the third party.
16.4 Embedded Content and Third-Party Functions
Our website may contain embedded content or functions provided by third parties, such as videos, social media posts, maps, inquiry forms, payment functions, and analytics tools. These third parties may use Cookies and similar technologies to collect IP addresses, online identifiers, browser and device information, viewed pages, content interactions, approximate location, and account-related information.
16.5 Content and Security of External Sites
We do not control the content, accuracy, completeness, security, availability, products, services, advertisements, expressions, or privacy practices of external sites or third-party services. Except where required by law, we are not responsible for damages arising from the use of independently provided third-party websites or services.
16.6 Links Are Not Endorsements
The presence of links to external sites or third-party services on our website does not necessarily mean that we recommend, guarantee, or approve those third parties, their products, services, opinions, information, or privacy practices.
16.7 Contact Regarding External Sites
Please contact the relevant third party directly regarding privacy practices, accounts, payments, cookie settings, and other matters on external sites or third-party services. If you find broken or suspicious links on our website, please contact us.
17. Changes to this Privacy Policy
17.1 Review
We periodically review this Privacy Policy and may change it as necessary to maintain appropriate handling of personal information.
17.2 Publication
If we change this Privacy Policy, we will post the revised version on our website. The revised Privacy Policy will show the “Last Updated” date at the beginning or end.
17.3 Important Changes
If we make changes that materially affect customers’ rights or our handling of personal information, we will provide clear notice before the changes take effect where required by applicable law, such as through prominent website notice, email, account notice, cookie banner, privacy settings, or other appropriate methods.
17.4 New Purposes
If we use personal information for a new purpose that is incompatible with the purpose notified at the time of collection, we will inform customers of the purpose, legal basis, recipients, retention period, and other necessary information before starting such use. Where new consent is required by applicable law, we will obtain it in advance.
17.5 Changes Related to Consent
Where we process personal information based on customer consent, we will not unilaterally expand the scope of previously obtained consent merely by changing this Privacy Policy. If important matters such as purposes, categories of information, or recipients change, we will obtain new consent where required by applicable law.
17.6 Effective Date
The revised Privacy Policy applies from the effective date stated on our website. If prior notice is required by law or we establish a notice period, the changes take effect after that period.
17.7 Past Policies
Where necessary, we may retain and publish past privacy policies or major change histories. Please contact us if you wish to confirm a past version.
17.8 Periodic Review by Customers
We recommend that customers periodically review this Privacy Policy for the latest information. For important changes, we will provide necessary notices in accordance with applicable law.
18. Contact Information
18.1 Personal Information Inquiries
For questions, consultations, complaints, or requests regarding this Privacy Policy, our handling of personal information, Cookies, email communications, or exercise of personal information rights, please contact: Saisei Pharma Co., Ltd.; Personal Information Protection Officer; order-sp@saisei-pharma.jp; https://saisei-pharma.co.jp/pages/contact. Please include “Personal Information Inquiry” in the email subject or inquiry text.
18.2 Notes When Contacting Us
Please do not include personal information beyond what is necessary for response in contact forms or emails. In particular, do not send Individual Numbers, complete credit card numbers, security codes, passport numbers, driver’s license numbers, detailed medical histories, diagnosis details, test results, or other highly sensitive information unless we specifically request them.
Regional Additional Provisions
19. Regional Additional Provisions
19.1 Role of These Provisions
These Regional Additional Provisions supplement this Privacy Policy based on personal information protection laws applicable in the customer’s country or region of residence. If the common provisions and regional provisions differ, provisions that provide higher protection to the customer or that apply to the relevant region prevail to the extent permitted by applicable law.
19.2 Customers Residing in Japan
The business operator handling personal information under Japan’s Act on the Protection of Personal Information is Saisei Pharma Co., Ltd.; Representative: Yurika Terashima; Address: 3-34-8 Okubo-cho, Moriguchi City, Osaka; Contact: Personal Information Protection Officer; Email: order-sp@saisei-pharma.jp; Contact form: https://saisei-pharma.co.jp/pages/contact. Customers in Japan may request notification of purpose of use, disclosure of retained personal data, disclosure of third-party provision records, correction, addition, deletion, suspension of use, erasure, and suspension of third-party provision to the extent provided by law. We obtain consent before acquiring sensitive personal information unless a legal exception applies and take appropriate measures for transfers to third parties in foreign countries and leakage incidents as required by law. The supervisory authority in Japan is the Personal Information Protection Commission.
19.3 Customers Residing in the EEA
This section applies where the GDPR applies to personal data of customers residing in the European Economic Area. The controller is Saisei Pharma Co., Ltd., 3-34-8 Okubo-cho, Moriguchi City, Osaka 570-0012, Japan; order-sp@saisei-pharma.jp; https://saisei-pharma.co.jp/pages/contact. We process personal data based on contract, consent, legal obligations, legitimate interests, vital interests, or other grounds permitted by the GDPR. Customers may have rights of access, rectification, erasure, restriction, objection, data portability, withdrawal of consent, opt-out of direct marketing, rights related to automated decision-making, and complaints to supervisory authorities. We respond in principle within one month and use appropriate mechanisms for transfers outside the EEA.
19.4 Customers Residing in the United Kingdom
This section applies where the UK GDPR and UK Data Protection Act apply. The controller is Saisei Pharma Co., Ltd., 3-34-8 Okubo-cho, Moriguchi City, Osaka 570-0012, Japan; order-sp@saisei-pharma.jp; https://saisei-pharma.co.jp/pages/contact. We process personal information based on contract, consent, legal obligations, legitimate interests, vital interests, or other grounds permitted by the UK GDPR. Customers may have rights of access, rectification, erasure, restriction, objection, data portability, withdrawal of consent, opt-out of direct marketing, rights related to automated decision-making, and complaints to the UK Information Commissioner’s Office. We use approved transfer mechanisms for transfers outside the UK.
19.5 Customers Residing in California
This section applies where the California Consumer Privacy Act, as amended (“CCPA”), applies to us. In the past 12 months, we may have collected categories such as identifiers, personal information in customer records, commercial information, internet or electronic network activity information, and approximate geolocation. We do not sell customer lists for monetary consideration, but certain disclosures may constitute “sale” or “sharing” under the CCPA. California customers may have rights to know, access, correct, delete, opt out of sale or sharing, limit certain uses and disclosures of sensitive personal information, be free from discriminatory treatment, use an authorized agent, and exercise other CCPA rights. Requests may be submitted to order-sp@saisei-pharma.jp or https://saisei-pharma.co.jp/pages/contact. Opt-outs may be available through “Your Privacy Choices,” data-sharing opt-out pages, or cookie settings.
19.6 Customers Residing in Other U.S. States
Some U.S. state privacy laws grant additional rights to residents. Where such laws apply to us, customers may have rights to confirm processing, access, correct, delete, obtain data portability, opt out of sale of personal information, opt out of targeted advertising, opt out of certain profiling, consent to or refuse sensitive data processing, be free from discrimination, appeal our decision, and exercise other rights provided by applicable state law. Requests and appeals may be submitted to order-sp@saisei-pharma.jp or https://saisei-pharma.co.jp/pages/contact.
Established: July 7, 2026 / Last Updated: July 7, 2026 / Effective Date: July 7, 2026
Back to top