Privacy Policy

Last updated: April 2025

HANA CHA 花茶 (“we”, “us”, or “our”) is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you visit hanacha.store or make a purchase.

Information We Collect

We collect the following types of information:

• Order information: Name, shipping address, phone number, email address, and payment confirmation (payment details are processed by Stripe or PayPal — we never store card numbers)
• Contact information: Name, email address, and message content when you use our contact form
• Technical data: IP address, browser type, pages visited, and referring URLs — collected automatically via Google Analytics
• Cookies: Session cookies for shopping cart functionality and analytics cookies (see below)

Why We Use Your Information

• To process and fulfill your orders, and communicate shipping updates
• To respond to your inquiries and provide customer support
• To improve our website and user experience
• To send important notices (policy changes, security updates)
• To send newsletters or promotional emails — only with your explicit consent

We do not sell, rent, or trade your personal information to any third party.

Sharing & Disclosure

We share your information only in the following circumstances:

• Shipping carriers: Your name and address are shared with our shipping partners (Japan Post / EMS) to fulfill your order
• Payment processors: Stripe and PayPal process payment data under their own privacy policies
• Analytics: Google Analytics receives anonymized usage data (see below)
• Legal requirements: When required by law or to protect our rights

Cookies & Analytics

We use cookies to maintain your shopping cart session and to understand how visitors use our site. We use Google Analytics (Google LLC), which collects anonymized data including page views and user interactions.

You may opt out of Google Analytics tracking via the Google Analytics Opt-out Browser Add-on. You can also control cookies via your browser settings.

Data Retention

We retain order and transaction data for 7 years to comply with Japanese tax and accounting regulations. Contact form submissions are retained for up to 2 years. You may request earlier deletion (see Your Rights below).

International Transfers

HANA CHA is based in Japan and Thailand. Your data may be processed in these countries. We ensure adequate safeguards are in place for any cross-border data transfers. EU/UK residents: transfers to Japan are covered under the EU-Japan adequacy decision.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — Request a copy of the data we hold about you
• Rectification — Correct inaccurate or incomplete data
• Erasure — Request deletion of your data (“right to be forgotten”)
• Restriction — Limit how we process your data
• Portability — Receive your data in a portable format
• Opt-out (CCPA) — California residents may opt out of any sale of personal information (we do not sell personal information)

To exercise any of these rights, contact us at hello@hanacha.store. We will respond within 30 days.

Data Security

We implement SSL encryption on all pages. Payment processing is handled by PCI-DSS compliant providers (Stripe, PayPal). While we take all reasonable precautions, no internet transmission is 100% secure.

Third-Party Services

Policy Updates

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. We encourage you to review this policy periodically.

Contact Us

For any privacy-related questions or to exercise your rights: