At Sakura Merch, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what personal data we collect, how we use it, how we protect it, and what rights you have.

This policy applies when you visit our website, place an order, contact us, subscribe to our marketing, or interact with our ads.

1. Who we are

Sakura Merch operates the online store sakuramerch.com

For privacy law purposes, we are the data controller for the personal data we collect through our website and store.

Contact us about privacy matters at:

Email: sakuramerchofficial@gmail.com

2. Personal data we collect

We may collect the following types of personal data:

Order and account information

When you place an order or create an account, we may collect:

• Full name
• Email address
• Phone number
• Billing address
• Shipping address
• Order details
• Payment status
• Customer account details, if you create an account

Payment information

Payments are processed by third-party payment providers such as [Shopify Payments / Stripe / PayPal / Klarna / Mollie / other provider].

We do not store your full card details on our own servers. Payment providers may process payment data according to their own privacy and security policies.

Communication data

When you contact us, we may collect:

• Your name
• Email address
• Message content
• Any files, screenshots, or information you send to us

Website and device data

When you visit our website, we may collect:

• IP address
• Browser type
• Device type
• Operating system
• Pages visited
• Time spent on pages
• Clicks and browsing behaviour
• Referring website or ad
• Approximate location based on IP address
• Cookie and tracking identifiers, where allowed

Marketing and advertising data

If you accept marketing cookies or interact with our ads, we may collect or receive information about:

• Products viewed
• Items added to cart
• Purchases
• Ad clicks
• Website behaviour
• Audience and remarketing data
• Campaign performance

This may involve tools such as Google Analytics, Google Ads, Meta Pixel, TikTok Pixel, Pinterest Tag, or other advertising technologies.

3. How we use your personal data

We use your personal data for the following purposes:

To process and deliver orders

We use your data to:

• Confirm your order
• Process payment
• Ship your products
• Send order updates
• Handle returns, refunds, and customer support

Legal basis: performance of a contract.

To provide customer support

We use your data to reply to questions, solve problems, and help with orders.

Legal basis: legitimate interest and/or performance of a contract.

To improve our website and store

We may use analytics data to understand how visitors use our website, improve product pages, improve loading speed, fix errors, and improve the shopping experience.

Legal basis: consent where required, or legitimate interest for strictly necessary/basic functionality.

To send marketing emails

If you subscribe to our newsletter or agree to receive marketing, we may send you emails about products, offers, bundles, discounts, and store updates.

You can unsubscribe at any time by clicking the unsubscribe link in our emails or contacting us.

Legal basis: consent.

To run ads and remarketing

If you accept marketing cookies, we may use tools like Google Ads, Meta Pixel, TikTok Pixel, or similar platforms to:

• Show relevant ads
• Measure ad performance
• Build advertising audiences
• Retarget visitors who viewed products or added items to cart
• Track conversions and purchases

Legal basis: consent.

Meta says businesses using Meta Pixel are responsible for their own GDPR compliance, and Dutch/EU rules generally require consent before tracking cookies or similar tracking technologies are used.

To prevent fraud and protect our business

We may use personal data to detect fraud, abuse, security threats, chargebacks, or suspicious activity.

Legal basis: legitimate interest and legal obligation.

To comply with legal obligations

We may keep certain order, invoice, tax, and business records because we are legally required to do so.

Legal basis: legal obligation.

4. Cookies and tracking technologies

Our website uses cookies and similar technologies.

Cookies are small files stored on your device. They help the website work, remember your preferences, measure performance, and, where you consent, support advertising and remarketing.

The Dutch Data Protection Authority explains that tracking cookies can follow visitors across websites and require consent because they affect privacy.

We may use the following types of cookies:

Strictly necessary cookies

These are needed for the website to work. For example:

• Shopping cart
• Checkout
• Login
• Security
• Payment process
• Language or basic store settings

These cookies do not require consent.

Analytics cookies

These help us understand how visitors use the website.

Examples:

• Google Analytics
• Shopify analytics
• Website performance tools

These may collect information such as pages visited, traffic source, device type, and website interactions.

Marketing and advertising cookies

These are used for advertising, remarketing, and measuring ad performance.

Examples:

• Google Ads
• Meta Pixel / Facebook Pixel
• TikTok Pixel
• Pinterest Tag
• Other advertising platforms

These cookies may track your browsing behaviour across websites and help us show relevant ads.

Preference cookies

These remember choices such as language, region, or display preferences.

5. Cookie consent

When you first visit our website, you may see a cookie banner asking for your consent.

You can accept, reject, or manage non-essential cookies. Non-essential cookies, including analytics and marketing cookies where required, should only be activated after you give consent.

Google Consent Mode allows websites to communicate users’ cookie or app identifier consent choices to Google, but Google states that Consent Mode does not replace a consent banner.

You can change or withdraw your cookie consent at any time by [ADD METHOD: clicking “Cookie Settings” in footer / clearing browser cookies / using your consent tool link].

6. Google Analytics and Google Ads

We may use Google Analytics and Google Ads to understand website traffic, measure conversions, and improve advertising.

Google may process information such as:

• Pages visited
• Device and browser information
• Approximate location
• Referring source
• Interactions with our website
• Purchase or conversion events, where applicable

Google’s EU user consent policy requires clear information about how personal data is used and which parties receive it when Google products are used.

We use Google tools only according to your consent settings where required.

7. Meta Pixel / Facebook and Instagram advertising

We may use Meta Pixel and Meta advertising tools to measure ad performance and show relevant ads on Facebook, Instagram, Messenger, and other Meta services.

Meta may receive information such as:

• Page views
• Product views
• Add-to-cart events
• Purchase events
• Browser and device information
• Cookie or tracking identifiers
• Approximate location

Meta explains in its privacy policy how it collects, uses, shares, retains, and transfers information.

We do not intentionally send sensitive personal data to Meta or other advertising platforms.

8. Email marketing

If you subscribe to our newsletter or marketing messages, we may use your email address to send you:

• Product updates
• Discounts
• Bundle offers
• Restock alerts
• Promotional campaigns

You can unsubscribe at any time through the unsubscribe link in the email or by contacting us.

We may use email marketing providers such as [Klaviyo / Mailchimp / Shopify Email / Omnisend / other].

9. Who we share your data with

We only share your personal data when necessary to run our store, deliver orders, process payments, improve our website, or comply with the law.

We may share data with:

• Website platform providers, such as Shopify or WooCommerce
• Payment providers, such as Stripe, PayPal, Klarna, Mollie, Shopify Payments
• Shipping providers, such as PostNL, DHL, UPS, FedEx, DPD, or local couriers
• Email marketing providers
• Analytics providers, such as Google Analytics
• Advertising platforms, such as Google, Meta, TikTok, Pinterest
• Customer support tools
• Accounting and tax software
• Fraud prevention and security services
• Legal, tax, or government authorities when required

We do not sell your personal data directly to third parties.

10. International data transfers

Some of our service providers may process personal data outside the European Economic Area, for example in the United States.

When this happens, we rely on appropriate safeguards where required, such as:

• Standard Contractual Clauses
• Data Processing Agreements
• Adequacy decisions
• Other legally approved transfer mechanisms

11. How long we keep your data

We keep personal data only as long as necessary for the purposes described in this policy.

Typical retention periods:

• Order and invoice records: as required by tax and accounting laws
• Customer support messages: as long as needed to handle the request and maintain business records
• Marketing email data: until you unsubscribe or request deletion
• Analytics data: according to our analytics tool settings
• Cookie consent records: according to our consent management tool settings
• Fraud/security records: as long as needed to protect our business

12. Your privacy rights

Depending on where you live, especially if you are in the EU/EEA, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your personal data
• Restrict how we process your data
• Object to certain processing
• Withdraw consent at any time
• Request data portability
• Lodge a complaint with a data protection authority

To use your rights, contact us at:

sakuramerchofficial@gmail.com

We may need to verify your identity before processing your request.

If you are in the Netherlands, you can also contact the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

13. Security

We take reasonable technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction.

However, no website, payment system, or online transmission is 100% secure.

14. Children’s privacy

Our website is not intended for children under the age of 16.

We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact us and we will delete it where required.

15. Third-party links

Our website may contain links to third-party websites, apps, or services.

We are not responsible for the privacy practices, content, or security of third-party websites. You should read their privacy policies before providing personal data.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

When we make changes, we will update the “Last updated” date at the top of this page. If the changes are important, we may notify you by email or through a notice on our website.

17. Contact us

For questions about this Privacy Policy or your personal data, contact us at:

Business name: Sakura Merch
Website: sakuramerch.com
Email: sakuramerchofficial@gmail.com

Important: add this too — Cookie Policy section/page

For extra protection, create a separate Cookie Policy page or add this under your privacy policy:

Cookie Policy

We use cookies and similar technologies on our website.

Some cookies are necessary for the website to function. Other cookies, such as analytics and marketing cookies, are only used with your consent where required.

You can manage your cookie preferences through our cookie banner or cookie settings link.

Cookies we may use include:

You can also block or delete cookies through your browser settings. Some parts of the website may not work properly if necessary cookies are blocked.