Privacy Policy

1. Who We Are

Shibuya Press is a publishing label operating from New York, London, and Tokyo. We publish ebooks, audiobooks, and print books in the categories of spirituality, self-optimization, manifestation, and related topics.

Data Controller: Shibuya Press
Contact: [email protected]

2. What Data We Collect

2.1 Data We Collect Directly

We may collect the following when you interact with our Site:

• Email address — if you subscribe to our newsletter or contact us
• Name — if you provide it when contacting us
• Payment information — processed by third-party payment providers (Stripe, Gumroad); we do not store card details

2.2 Data Collected Automatically

• Analytics data — page views, referrers, device type, country (via Cloudflare Analytics or Google Analytics)
• Cookies — see Section 6 below
• Server logs — IP address, browser type, access times (standard web server logs via Cloudflare)

2.3 Data We Do Not Collect

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data.

3. How We Use Your Data

We use collected data for the following purposes:

• Processing purchases and delivering digital content
• Sending newsletters and updates (only with your consent)
• Responding to inquiries and support requests
• Analyzing Site usage to improve our content and services
• Complying with legal obligations

Legal Basis for Processing (UK GDPR)

• Consent — newsletter subscriptions, marketing emails
• Contract — processing purchases and delivering products
• Legitimate interest — analytics, Site improvement, fraud prevention
• Legal obligation — tax records, regulatory compliance

4. Data Sharing

We may share your data with:

• Payment processors — Stripe, Gumroad (to process transactions)
• Email platforms — Beehiiv, ConvertKit (to deliver newsletters)
• Analytics providers — Cloudflare, Google Analytics (to understand Site usage)
• Book platforms — Amazon, Audible (purchases made on those platforms are governed by their privacy policies)

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

5. International Data Transfers

As we are based in Japan and use US-based service providers (Cloudflare, Stripe, Google), your data may be transferred to and processed in countries outside your country of residence.

For UK and EEA residents: transfers are protected by Standard Contractual Clauses (SCCs) or adequacy decisions where applicable. Japan has an adequacy decision from the UK and EU for data protection purposes.

6. Cookies

Our Site uses the following types of cookies:

• Essential cookies — required for the Site to function (e.g., language preference)
• Analytics cookies — to understand how visitors use the Site (Cloudflare, Google Analytics)

We do not use advertising or tracking cookies. You can control cookies through your browser settings. Disabling cookies may affect Site functionality.

7. Your Rights

7.1 UK & EEA Residents (UK GDPR / EU GDPR)

You have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — limit how we process your data
• Portability — receive your data in a structured, machine-readable format
• Object — object to processing based on legitimate interest
• Withdraw consent — at any time, without affecting prior processing

To exercise these rights, contact us at [email protected]. We will respond within one month. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

7.2 US Residents (CCPA / State Privacy Laws)

If you are a California resident or resident of a state with privacy legislation, you have the right to:

• Know — what personal data we collect and how it is used
• Delete — request deletion of your personal data
• Opt-out — of the sale of personal data (we do not sell personal data)
• Non-discrimination — we will not discriminate against you for exercising your rights

To submit a request, email [email protected] with "Privacy Request" in the subject line. We will verify your identity and respond within 45 days.

8. Data Retention

• Purchase records — retained for 7 years (tax compliance)
• Email subscriber data — retained until you unsubscribe
• Analytics data — retained per provider defaults (Cloudflare: 30 days, Google Analytics: 14 months)
• Contact inquiries — retained for 2 years, then deleted

9. Children's Privacy

Our Site and Products are not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us immediately and we will delete it.

10. Security

We implement appropriate technical and organizational measures to protect your personal data, including HTTPS encryption, secure third-party processors, and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. We encourage you to review this page periodically. For material changes affecting UK/EEA residents, we will provide notice via email where possible.

12. Contact

For privacy inquiries, data requests, or complaints:

Shibuya Press
Email: [email protected]

UK residents may also contact the Information Commissioner's Office (ICO):
ico.org.uk