Privacy Policy

1. Introduction

GardenHarbor (“we”, “our”, or “us”) is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and the rights you have regarding your personal data when you visit our website or purchase from us.

2. Information We Collect

We may collect the following categories of personal information:

Identity data: name, username, or similar identifiers.
Contact data: email address, postal address, and telephone number.
Transaction data: details of products you have purchased and payments made.
Technical data: IP address, browser type and version, time zone, browser plug-in types, operating system and platform.
Usage data: information about how you use our website, products, and services.
Marketing and communications data: your preferences in receiving marketing from us and your communication preferences.

3. How We Collect Your Data

We collect data through:

Direct interactions — forms, purchases, account creation, and correspondence.
Automated technologies — cookies, server logs, and similar tracking technologies as you interact with our website.
Third parties — analytics providers, payment processors, and delivery partners.

4. How We Use Your Data

We use your personal data to:

Process and fulfil your orders, including managing payments and delivering products.
Manage your relationship with us and respond to your enquiries.
Send you relevant marketing communications where you have consented or we have a legitimate interest.
Improve our website, products, and services through analytics.
Comply with legal obligations.

5. Data Retention

We retain personal data only as long as necessary for the purposes set out in this policy or as required by law. Transaction records are retained for a minimum of seven years in compliance with Japanese accounting regulations.

6. Data Sharing

We do not sell your personal data. We may share it with:

Service providers acting as data processors (payment gateways, delivery partners, email platforms).
Professional advisers including lawyers and accountants under confidentiality obligations.
Regulators and government authorities where required by law.

7. International Transfers

Some of our external service providers are based outside Japan. Where we transfer data internationally, we ensure appropriate safeguards are in place in accordance with applicable data protection laws.

8. Your Legal Rights

Under applicable data protection law you may have the right to:

Request access to your personal data.
Request correction of inaccurate personal data.
Request erasure of your personal data.
Object to processing of your personal data.
Request restriction of processing your personal data.
Request transfer of your personal data.
Withdraw consent at any time where we rely on consent to process your data.

9. Cookies

We use cookies and similar tracking technologies to improve your experience on our website. Please see our Cookie Policy for full details.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting a prominent notice on our website or by contacting you directly.

11. Contact Us

For any questions about this Privacy Policy or to exercise your data rights, please contact us at:
GardenHarbor
3 Chome-6-1 Ginza, Chuo City, Tokyo 104-8130, japan
Phone: +81-3-6824-9157
Email: privacy@harmonyriverpath.com

12. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA). In addition to the rights outlined above, you have the right to know what personal information is being collected and the categories of sources from which the information is obtained. You also have the right to know the specific pieces of personal information we have collected. To exercise any of these rights, please contact us with your request. We will respond within 45 days of receiving your verifiable consumer request.