Privacy Policy
Last updated: 7th November 2023
Welcome to the Privacy Policy for Rakuten Global Express (collectively "we", "us" or "our"). We provide warehouse handling services, which includes item storage, packing and shipping services to countries across the globe.
Rakuten Global Express is a service provided by Rakuten Group, Inc. Rakuten Group, Inc., is based in Tokyo, Japan. More information about Rakuten is available here.
This Privacy Policy explains how we collect, use, share and protect your personal data. We also explain what options and rights you have and how to use them.
Personal Data we collect and how
We collect personal data in different ways when you sign up for or use our service. The following is a list with the categories of personal data we collect, and how we obtain it.
Information that you directly provide to us
You provide personal data to us when you sign up for an account and use our Service. This contains:
- Basic information:
- personal details (name, date of birth);
- contact details (phone number, email address, postal address or mobile number);
- account login details, (username, password, account ID, registered country);
- company and company details, employee granted code, if you are a beneficiary of the Welfare Program for Expatriates.
- Identity verification information:
- personal identification card
- facial identification photo
- Financial information:
- bank and credit card details;
- payment details (payment type, amount paid)
- Rakuten points.
- Account information:
- purchase details (purchase date, order status, item quantity, item value)
- account status (language preference, shipping details, last action date)
Information we collect via cookies and tracking technologies:
When you use our service, we will collect the following data using tracking technologies placed in our website. These data types are:
- Identifiers for devices you have used to access our services:
- IP address (from which your approximate location can be inferred);
- Unique devices identifiers or MAC identifiers
- Advertising related identifiers
- Internet activity information: information about your visits to our website and login sessions, and usage of the Services (include what you track).
Further information about our use of Cookies and Tracking Technologies is available in our Rakuten Global Express Cookies & Tracking Technologies Policy.
Information that will be inferred about you from how you use the Service:
- Interests;
- Age range;
- Gender.
For more details about how we process the inferred information about you, including the purposes and the legal basis for which this data is collected, please see the [How we use your data and the basis on which we use it] Section.
How we use your data and the basis on which we use it
We always need a proper reason to process your data.
The basis shall be the collection of personal data for the purpose of performing our contract with you (create your account); where applicable, fulfilling our legitimate interests, only when we have a valid interest that shall not override yours (the collection of data in order to secure our Services); complying with our legal obligations; as well as processing personal data based on your consent (when you voluntarily request to participate in our marketing activities).
If we ask for your consent to process your personal data, you may withdraw your consent at any time by contacting us here.
You can find the information regarding the purposes for which we process the types of personal data listed above, as well as our basis for such processing operations below.
See more
Purpose of Use |
Type of Data |
Basis for Processing |
---|---|---|
Provide you the Services |
|
Performance of a contract
|
Authentication & Account management |
|
Performance of a contract
|
Purchasing activities |
|
Performance of a contract
|
Improve and customize the Services for you. To provide benefits or operational improvements for smoother user experience. |
|
Legitimate interest
|
Communication, support & customer services |
|
Legitimate interest
|
Safety, security, and fraud prevention |
|
Legitimate interest
Legal obligation
|
Compliance with law requirements |
|
Legal obligation
|
Rakuten Point Program |
|
Performance of a contract
Legitimate interest
|
Marketing and advertising activities |
|
Consent
|
Profiling
We may create a profile about you, based on your usage of the Service, for the purposes explained in the table above.
Your Choices
The rights and choices about your data are different depending on your location. This includes the right to request:
- access to your data; either if you want to know what data we have about you; or
- get a copy of your data in a machine-readable format (right to data portability);
- correct any information that is wrong;
- delete your data;
- restrict usage to the bare minimum (for example, if you ask us to delete, but we still need to keep your order history for legal reasons, like tax audits of our business);
- object to specific uses (you can opt-out of marketing e-mails);
- ask us where we got certain data about you, how we use it and with whom we share it;
- withdraw your consent easily; if you do so, the lawfulness of processing based on your consent before its withdrawal will not be affected;
Please see below the rights available under the applicable law for your region.
See more
Access | Portability | Correction | Deletion | Objection | Consent withdrawal | |
---|---|---|---|---|---|---|
EU* |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
United Kingdom |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
Taiwan |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
Hong Kong |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
Korea |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
China |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
Singapore |
✓ |
✓ |
✓ |
✓ |
✓ |
✓ |
*It also applies to all countries in the European Economic Area (the EEA). The EEA is an area larger than the EU and includes Iceland, Norway, and Liechtenstein.
You can exercise these rights with us, with no fear of discrimination. You can also file a complaint with your data protection authority, where applicable, if you think we mishandled your data. If you want to exercise your rights with us, please get in touch with us by using the Contact section below. We will always try to find a good and easy solution together.
Data sharing
We share your data with:
- Other Rakuten services that use Rakuten ID; in case that you log in to any service with the same Rakuten ID. The Rakuten Group aims to provide you with a unique service experience through the "Rakuten ID". Rakuten ID is a unified program that allows you to easily connect to other Rakuten services by a single log-in function, share your account information or join a loyalty program with the Rakuten group companies jointly participating in the Rakuten ID program.
- Your data will only be shared if you chose to connect to another Rakuten ID service. By connecting to another Rakuten ID service, you direct the Rakuten ID services to share your data for the purposes explained in our joint privacy policy here.
- Rakuten Group, Inc. (Japan), our parent company . when using Rakuten ID to log-in; supports the ID Service as a processor, and for security and compliance purposes, as well as for service improvements and analytics. See further information here.
- Service providers and business partners, who help us make our service possible (our data processors). We ensure they only have access to such information that is strictly necessary for us to provide the Services. These parties are required to secure the data they receive and to use the data for pre-agreed purposes only, while ensuring compliance with all applicable data protection regulations.
- Law enforcement bodies where we are required to share data or with a court if necessary to enforce our claims or other legal rights.
- Asset purchasers. In case our service or our company are fully or partly purchased by another company, data will be shared. The acquiring company will be bound by this privacy policy.
- Advertising partners. We disclose or share your personal data, where you consent if it is required, for advertising purposes. Further information about data sharing using cookies and other device identifying technologies is available in our Rakuten Global Express Cookies & Tracking Technologies Policy.
Find here the list with our services providers, business and advertising partners, the data we share and the countries where they are located.
See more
Categories of recipients |
Recipients name |
Country |
Data Shared |
---|---|---|---|
Delivery Services |
FedEx |
Japan |
|
DHL |
Japan |
||
ECMS |
Japan |
||
JP POST |
Japan |
||
Client Relationship Management We share your personal data with them, to send newsletters, marketing emails, support emails and messaging services to respond to your inquiries. |
LG1 |
Japan |
|
Rakuten Asia |
Singapore |
||
Operations |
One Plus One |
Japan |
|
Shufti Pro |
United Kingdom |
||
Site analysis |
PLAID |
Japan |
|
Advertising partners Disclose or share your personal data, where you consent, for advertising purposes. See more details here. |
Rakuten Advertising |
United States |
|
Other Rakuten services We share your personal data with another Rakuten ID services if you chose to connect with them. |
Please see detailed information about recipients and their countries here. |
|
Because we operate as part of a global business, the recipients referred to above may be located outside the jurisdiction in which you are located (or in which we provide the services). See the section on "International Data Transfers" below for more information.
International Data Transfers
We are a global business. That means your data will be shared to other Rakuten Group companies around the world. Also, we use service providers in different countries. Data are sent to them as well as indicated in the Data Sharing section above. We have taken steps to keep your data safe. We are always watching out to ensure they are trustworthy, and we have strict contracts in place.
Inside the Rakuten Group, we have Binding Corporate Rules ("BCRs"), a set of privacy internal rules that we apply across all the Rakuten Group companies. The BCRs are Rakuten global standard for the protection of privacy and processing of personal data. Rakuten’s BCRs allow secure transfers of data within the Rakuten Group companies and have been approved by the relevant Data Protection Authorities in Luxembourg and the United Kingdom. You can find them here.
Security
We have strict security measures in place in accordance with high security standards to ensure that your account and your data are safe with us. Some of these are technical, like password rules and monitoring of log-in patterns. Others are organizational, like having proper processes and access rules in place. We do so to prevent unauthorized access or unauthorized disclosure of your information, to maintain the accuracy of such information and, when necessary, to ensure its proper destruction.
When collecting or transferring your personal information, we employ data encryption technology, and restrict access only to those persons who require it to fulfil their job responsibilities. We conduct periodic reviews of our practices to ensure that our safeguards are properly implemented and remain state of the art. We make sure to always keep up with the latest developments.
Retention
We will retain your data as long as your account is active. When you delete your account, we will retain data only if we are legally required to do so, or in case for purposes in court proceedings
Contact Us
Rakuten Group, Inc. is responsible for the personal data we collect and process. Our main offices are in Rakuten Crimson House, 1-14-1 Tamagawa Setagaya-ku, Tokyo 158-0094.
For any questions or concerns, or if you want to make use of your rights, feel free to reach out to us anytime here. You may also contact our Data Protection Officer at rakuten-privacy@mail.rakuten.com. Please note that when you contact us, we may require further information to verify your identity and respond to your request appropriately.
Our data protection officer can be contacted this way. If you have any complaint, we hope we can work with you to achieve a good solution. If we are not able to, you can contact your local data protection authority. Additionally, you can contact Rakuten’s data protection authority, based in Luxembourg here.
Changes to this Policy
We may update this privacy policy from time to time. If there is going to be a substantial change, we will notify you in advance.