Privacy policy

Last updated: 13 October 2026

This policy explains how Nexus Corp. ("Nexus Cards", "we"), 1-11-20 Okura, Setagaya-ku, Tokyo 157-0074, Japan, handles your personal information when you visit nexuscards.jp, place an order or contact us. We handle personal information in accordance with the Act on the Protection of Personal Information of Japan (APPI) and, for customers in the European Economic Area or the UK, the GDPR where it applies.

1. Information we collect

• Order information: name, email address, phone number, billing and shipping addresses, products ordered and order history.
• Payment information: handled by our payment provider. We receive only limited details such as the card brand, last four digits and payment status — never your full card number.
• Messages: what you send us through our forms or by email, including business details for wholesale inquiries.
• Account information: if you create an account, your login details and saved addresses.
• Technical information: IP address, browser and device type, pages visited and how you arrived at the Shop (order attribution), collected through cookies and server logs.

2. How we use it

• To process, ship and support your orders and pre-orders, and to send order emails (confirmation, shipping, release-date changes, refunds).
• To answer your messages and wholesale inquiries.
• To prevent fraud, abuse of purchase limits and attacks on the Shop.
• To run, secure and improve the Shop.
• To meet our legal, tax and accounting obligations.

We do not sell your personal information. We send marketing emails only if you ask us to. For EU/UK customers, our legal bases are the performance of a contract, our legal obligations, our legitimate interests (security, fraud prevention, improving the Shop) and, where required, your consent.

3. Who we share it with

• Payments: WooPayments by Automattic, with payments processed by Stripe, to take payment, prevent fraud and handle refunds.
• Carriers: Japan Post, Yamato Transport and other carriers receive your name, address, phone number and parcel contents to deliver your order, and customs authorities receive the information required for export and import.
• Service providers: our web host, email and backup providers, which process data only on our instructions.
• Authorities: when the law requires it.

4. Transfers outside Japan

Some providers process data outside Japan. In particular, Stripe and Automattic process payment and transaction data in the United States and other countries. The United States does not have a data protection law equivalent to the APPI; these providers apply their own privacy programmes and contractual safeguards (including standard contractual clauses for EU/UK data). For international orders, your delivery details are necessarily sent to the carrier and customs of your country. By ordering, you acknowledge these transfers, which are needed to complete your purchase.

5. Cookies

We use cookies and similar technologies that are needed for the cart, checkout, login and security, and for payment fraud prevention by Stripe. WooCommerce also records how you arrived at the Shop (order attribution) to help us understand which channels work. You can block or delete cookies in your browser settings, but the cart and checkout will not work without essential cookies.

6. How long we keep it

We keep order and invoice records for as long as Japanese tax and accounting law requires (generally 7 years), messages for as long as needed to handle your request, and account data until you ask us to delete your account.

7. Security

The Shop uses encrypted connections (HTTPS), restricted administrator access and regular backups. No system is perfectly secure, but we take reasonable measures to protect your information and will notify you and the authorities of a serious breach where the law requires.

8. Your rights

You can ask us to disclose, correct, add to, delete or stop using your personal information, and to stop transferring it to third parties, as provided by the APPI. EU/UK customers also have the rights of access, rectification, erasure, restriction, portability and objection, and may lodge a complaint with their data protection authority. Some information must be kept for legal reasons. Write to us and we will reply without undue delay after verifying your identity.

9. Children

The Shop is not intended for children under 16, and we do not knowingly collect their information. Minors should order with the consent of a parent or guardian.

10. Changes and contact

We may update this policy; the latest version is always on this page. Questions or requests: Nexus Corp., person in charge of personal information: Ait Bih Elwalid — contact@nexuscards.jp.