Established: August 14, 2026
Revised: August 17, 2026

MUGOKUKAN, operated by Masaki Wakabayashi (hereinafter referred to as the “Website”), recognizes the importance of handling and protecting personal information appropriately. This Privacy Policy describes how we collect, use, store, and protect personal information in accordance with the Act on the Protection of Personal Information of Japan and other applicable laws and regulations.

1. Information We Collect

When you purchase a product, contact us, register an account, subscribe to a newsletter, or otherwise use our services, we may collect the following information:

• Name
• Billing address and other address information entered during the ordering process
• Telephone number
• Email address
• Order number, purchased products, purchase date and time, purchase amount, currency, purchase history, and other order information
• Payment method, payment status, and information identifying the payment transaction
• Download permissions, permitted number of downloads, expiration date, download date and time, IP address, and other download-history information
• Details of inquiries and communication history with the Website
• Username, account identifier, login history, and other account information when an account is registered
• IP address, browser, device, operating system, referring source, pages viewed, browsing history, Cookies, access date and time, and other technical information
• Information necessary to prevent unauthorized use and maintain security
• Information provided by the customer for identity verification, returns and refunds, download problems, or other support

Passwords are normally converted into a form that cannot be restored before being stored. We do not inspect passwords in plain text or ask customers to send their passwords by email.

Full credit-card details, including the complete card number and security code, are generally managed by the payment service provider and are not retained by the Website. However, we may store limited information provided by the payment service, such as the payment method, payment result, transaction identifier, card type, or last four digits of the card number.

2. Purposes for Which We Use Personal Information

We use collected information for the following purposes:

• Accepting orders, processing payments, and confirming payment status
• Providing purchased digital files, order-completion emails, and download links
• Managing download limits, expiration dates, and download permissions
• Managing purchase records and proof of purchase
• Communicating about orders, payments, downloads, and products
• Responding to inquiries, technical problems, returns, refunds, and other support requests
• Verifying identity and orders and preventing unauthorized downloads or payments
• Responding to disclosed download links, unauthorized access, and other security problems
• Maintaining, protecting, and improving the Website and its services
• Analyzing access and usage
• Investigating failures, testing functionality, and improving service quality
• Complying with legal, tax, accounting, and record-retention obligations
• Responding to disputes, claims, infringement, or fraudulent conduct
• Sending newsletters or other announcements, but only where the person has requested or consented to receive them
• Carrying out activities incidental to the purposes listed above

If it becomes necessary to use personal information for a purpose beyond what is reasonably related to the purposes originally disclosed, we will obtain the person’s prior consent unless otherwise permitted by law.

3. Guest Purchases

The Website may allow customers to purchase products without registering an account. Even when a purchase is made as a guest, we retain the personal information, order information, and download history entered at the time of purchase for order processing, payment, management of download permissions, proof of purchase, customer support, and legally required record retention.

A guest order is not associated with a registered WordPress user account. It is managed using the order information and the download link contained in the order-completion email.

4. Payment Services

The Website uses credit-card processing services, PayPal, Paidy, and other payment services displayed during checkout. To process a payment, information including the customer’s name, email address, billing information, order amount, currency, order number, IP address, device information, and other necessary information may be transmitted to the payment service provider selected by the customer.

A payment service provider may independently process personal information for payment processing, fraud prevention, identity verification, legal compliance, and other purposes established by that provider. The provider’s own privacy policy and terms govern its handling of personal information.

Before selecting a payment method, customers should review the privacy policy and terms of the applicable payment service provider.

5. Disclosure to Third Parties and Service Providers

We do not provide personal data to a third party without the person’s consent, except in the following circumstances:

• When required or permitted by law
• When necessary to protect a person’s life, health, or property and obtaining consent is difficult
• When particularly necessary to improve public health or promote the sound development of children and obtaining consent is difficult
• When cooperation with a national government body, local public authority, or a party acting on its behalf is necessary to perform duties prescribed by law and obtaining consent could interfere with those duties
• When personal data is provided in connection with a business succession, merger, transfer, or similar transaction
• When otherwise permitted by applicable law

We may outsource all or part of our payment processing, website operation, hosting, data storage, email delivery, security, fraud prevention, access analysis, customer support, or other operations to external service providers.

When personal data is provided to a service provider, we limit the information to what is necessary to fulfill the applicable purpose. We exercise necessary and appropriate management and supervision through provider selection, contractual terms, access restrictions, reviews of data-handling practices, and other appropriate measures.

A service provider may not use personal data beyond the scope of the services entrusted to it by the Website.

6. Processing of Personal Data in Foreign Countries

Providers of payment, hosting, data-storage, email-delivery, security, access-analysis, or other services may be located outside Japan or may process personal data using servers located in another country or region.

When personal data is provided to a recipient located outside Japan and the person’s consent is required by applicable law, we will provide the person with the information required by law in a form they can review before obtaining consent. Such information may include the name of the country or region, information about its personal-information protection system, and information about the measures taken by the recipient to protect personal data.

When personal data is provided on the basis that the foreign recipient has established a system for continuously implementing measures equivalent to those required of businesses handling personal information in Japan, we will use contractual or other appropriate and reasonable means to ensure implementation of those measures. We will periodically review the implementation of the measures and the relevant legal systems of the country or region.

If a person requests information as permitted by applicable law, we will provide legally required and reasonably available information concerning the destination country or region, data-protection measures, review procedures, and other relevant matters.

7. Cookies and Access Information

The Website may use Cookies, local storage, and similar technologies to maintain the shopping cart, process orders, manage account logins, remember language and currency settings, maintain security, prevent unauthorized use, improve convenience, and analyze access.

Cookies may include Cookies necessary for essential website functions, Cookies that remember preferences, Cookies used to measure website traffic, and other categories.

Depending on the technology used, Cookies may be rejected or disabled through browser settings or a Cookie-settings interface displayed by the Website. However, disabling necessary Cookies may prevent the shopping cart, checkout, login, language switching, or other website functions from operating properly.

When an access-analysis service is used, its provider may collect Cookies, IP addresses, pages viewed, access dates and times, device information, and other information. Please review the Website’s Cookie notice or consent interface for details of the services and Cookies used.

8. Retention of Personal Information

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, manage orders and download permissions, provide purchaser support, prevent unauthorized use, respond to disputes, and comply with tax, accounting, and other legal obligations.

Specific retention periods are determined by considering the type of information, nature of the transaction, validity period of downloadable products, support requirements, security requirements, and applicable legal record-retention obligations.

When necessary to comply with a legal retention obligation, respond to a dispute, prevent unauthorized use, or protect legal rights, we may retain certain information after an account has been deleted or a particular purpose of use has ended.

When information is no longer required, it will be securely deleted or anonymized unless continued retention is required by law or for technical reasons.

Information contained in backups may remain until the applicable backup cycle and retention period have ended, even after it has been deleted from the active operating environment. Such information will not be used except for restoration, incident response, or another purpose inherent to the backup.

9. Security Measures

To prevent unauthorized access, disclosure, loss, destruction, damage, alteration, or misuse of personal information, we implement security measures appropriate to the nature and scale of the information handled, including:

• Defining responsibility, scope, and procedures for handling personal information
• Maintaining reporting and response procedures for suspected disclosures or other incidents
• Limiting the persons authorized to handle personal information and providing necessary instruction and supervision
• Restricting access to administration screens, servers, devices, and storage locations
• Managing passwords and other authentication information appropriately
• Using encrypted communications and appropriate security functions
• Keeping software, WordPress, themes, and plugins appropriately updated
• Monitoring and protecting against malware, unauthorized logins, and other threats
• Creating and appropriately managing backups
• Appropriately selecting, contracting with, and supervising service providers
• Reviewing applicable legal systems and processing environments when personal data is handled in a foreign country

If a person requests details of our security measures, we will respond in accordance with applicable law to the extent that disclosure will not compromise the effectiveness or security of those measures.

No method of electronic storage or communication over the internet can be guaranteed to be completely secure.

10. Access, Correction, Deletion, and Other Requests

Subject to applicable law, a person may be entitled to request notification of the purposes of use, disclosure, correction, addition, deletion, suspension of use, erasure, or suspension of third-party provision concerning personal information held about that person.

After receiving a request, we will verify the requester’s identity using the email address used for the purchase, order number, name, or other appropriate information and respond in accordance with applicable law.

Information supplied for identity verification will be used only to the extent necessary to process the request and retain a record of the response.

We may be unable to comply with a request for deletion, suspension, or cessation of provision when the information must be retained by law or is necessary to maintain transaction records, prevent fraud, respond to disputes, or protect legal rights. In that case, we will explain the reason to the extent required by law.

A guest purchaser may also submit a request by contacting us from the email address used for the purchase.

11. Deletion of Download History and Permissions

Deletion or anonymization of personal information or deletion of an account may result in cancellation of download permissions for purchased products and deletion of download history.

Before requesting deletion, anonymization, or account erasure, please download any required purchased files and store and back them up in a secure location.

After download permissions or purchase records have been deleted, it may not be possible to provide the purchased file again or restore download access.

12. Email Communications

Newsletters and other promotional emails will be sent only where the person has requested or consented to receive them. A recipient may unsubscribe at any time using the method described in the email or by contacting us.

Emails necessary to complete or support a transaction or provide services—including order confirmations, payment notices, download information, refund notices, security notices, and important changes to usage conditions—may still be sent after the person has unsubscribed from promotional emails.

13. External Links

The Website may contain links to external websites. The privacy policy of the applicable external operator governs the handling of personal information on an external website.

We are not responsible for the handling of personal information by external websites. Please review the external service’s privacy policy before using it.

14. Personal Information of Minors

A minor who purchases a product, registers an account, or otherwise uses our services should obtain the consent of a parent, guardian, or other legal representative where required.

If we discover that legally required consent has not been obtained, we may cancel the order or service use, suspend the account, or take another necessary measure.

15. Changes to This Policy

We may revise this Privacy Policy in response to changes in law, our services, the external services we use, or our methods of handling personal information.

If a material change is made, we will provide notice through the Website, by email, or through another appropriate method.

The revised Privacy Policy will take effect when it is posted on this page or on a separately stated effective date.

16. Contact Information

For inquiries, complaints, or requests concerning the handling of personal information, please contact:

Seller and Business Handling Personal Information: Masaki Wakabayashi, trading as MUGOKUKAN
Person Responsible for Operations: Masaki Wakabayashi
Address: 1-19 Mitakedai, Aoba-ku, Yokohama, Kanagawa 227-0047, Japan
Telephone: +81-50-7116-9354
Email: painter@mukyokukan.com
Website: https://mukyokukan.com/