Privacy Policy

We collect personal data only when you provide it directly or when it arises as a natural part of your visit. This includes:

• – Contact form data: your name, email address, and any message you choose to send us.
• – Analytics data: page views, session duration, and general browsing patterns, collected only if you've consented to analytics cookies.
• – Cookie consent data: your stated preferences, stored locally in your browser via localStorage.
• – Technical data: your IP address and browser type may be captured at server level for security purposes.

We do not collect payment information, government identifiers, or any sensitive personal data through this website.

Data we receive is used for the specific purpose for which it was shared:

• – Contact form submissions are used solely to respond to your enquiry.
• – Analytics data (where consented) is used to understand which areas of the site are most useful and where improvements might be made.
• – Advertising data (where consented) may be used to show relevant content on other platforms.
• – We do not use your data for automated decision-making or profiling.

We do not send unsolicited marketing emails, and your contact details are not shared with third parties for their own marketing purposes.

Depending on the type of data and how it arises, Scarlet Valley Path relies on the following legal bases for processing:

• – Consent — for analytics cookies, advertising cookies and personalisation. You may withdraw this at any time via the Cookie Policy page.
• – Legitimate interests — for basic site security and fraud prevention.
• – Contract performance — where contact form submissions relate to a product enquiry or order arrangement.

Scarlet Valley Path does not sell personal data. Where third-party services are involved, they operate under their own privacy terms:

• – Google Analytics / Google Ads: if analytics or advertising cookies are enabled, anonymised data may be shared with Google under their data processing agreements.
• – Hosting provider: server-level logs may be retained by our hosting provider for security purposes.

No personal data is transferred outside of Japan or the EEA without appropriate safeguards in place.

We take reasonable technical and organisational measures to protect personal data from unauthorised access, disclosure or loss. These include:

• – Encrypted connections (HTTPS) for all data transmitted through the site.
• – Restricted access to any stored contact data.
• – No permanent storage of contact form submissions beyond the period needed to respond.

If we become aware of a data breach that is likely to affect your rights, we will notify you and the relevant authority within the timeframes required by applicable law.

Under applicable data protection law, you have the right to:

• – Access the personal data we hold about you.
• – Request correction of any inaccurate information.
• – Request deletion of your personal data (the "right to be forgotten").
• – Request a portable copy of your data.
• – Object to or restrict certain types of processing.
• – Withdraw consent for cookie-based processing at any time.

To exercise any of these rights, please contact us via the contact page. We will respond within 30 days.