Privacy policy
プライバシーポリシー
What we collect, why, who else handles it, and how long we keep it.
Last updated 7 October 2026
- WHAT WE COLLECT
- When you order: your name, email, a delivery address and phone number for the carrier, the name you have carved and the face you approve, and a record of the payment. Card details go to Stripe; we never see the number.When you write to us: your name, email, the order number or gift code you give, and your message.When you add a design made in the Studio to the cart: the design itself.
- ABOUT OTHER PEOPLE
- For a gift, the giver gives us the recipient's name and their email or postal address, and the message for the card. For a company order, the company gives us its details and each director's name and email, so that we can send each director their approval link. If you give us someone else's details, please make sure they are happy for you to do so.
- THE NAME ON THE SEAL
- It is carved, and kept with your order record so that we can re-carve it under the guarantee. It is never shown publicly.
- WHY WE USE IT
- To make, carve and deliver what you order; to send the emails an order needs (confirmation, approval links, dispatch, gift cards, links and reminders, invoices); to take payment and prevent fraud; to answer your messages and handle cancellations, refunds and guarantee claims; to keep the records the law requires; and to keep the site working and secure. Nothing else: no advertising, no profiling, no sale of data.
- WHO ELSE HANDLES IT
- Each of these handles only what its job needs, on our behalf:Stripe — payments and fraud prevention; processed in the United States and other countries.Vercel — hosting the site; a US company, our servers run in Tokyo.Neon — our database; a US company, the data is stored in Singapore.Resend — sending our emails; United States.Yamato Transport — delivering seals; Japan Post — posting gift cards; both in Japan.Google Fonts — the Studio's font list and the payment form at checkout load typefaces from Google, so your browser sends Google (United States) your IP address.
- OUTSIDE JAPAN
- Stripe, Vercel, Resend and Google handle or hold personal information in the United States, and Neon stores it in Singapore. Each is bound by its contract with us (its terms and data-processing terms) to protect it, and runs its own privacy and security programme. Singapore protects personal data under its Personal Data Protection Act; the United States has no single federal privacy law, and protection there comes from federal rules for particular sectors and from state laws. Ask us and we will tell you more about the measures these providers take.
- HOW WE PROTECT IT
- Only the people at hanko.works who need it can see it, each limited to what their role requires; the back office opens only with a passkey, never a password. Every connection to the site and between the site and our providers is encrypted (HTTPS/TLS). Card numbers never reach our servers. We collect only what an order needs, and we take into account the data-protection rules of the countries above.
- HOW LONG
- Order records for seven years, as tax law requires. The face you approved for ten years, the length of the face guarantee. Everything else only as long as we need it for the reason we collected it, and we aim to delete what we no longer need without delay.
- COOKIES
- Our own cookies do two jobs only: hold your cart (hanko.cart) and remember your language (hanko.lang). No analytics or advertising cookies. On the checkout page, Stripe's payment form sets its own cookies to prevent fraud. The Studio keeps your designs and fonts in your browser's storage, on your device; a design reaches us only if you add it to the cart.
- YOUR RIGHTS
- You can ask us what we hold about you and why, and whom we have given it to; to correct or add to it; to delete it; to stop using it; or to stop giving it to a third party. Write through the contact form or to hello@hanko.works. We confirm it is you by replying to the email address on your order (or by checking your order number), we reply within one business day, and there is no fee. What the law requires us to keep, we keep for that period. Complaints about how we handle your information go to the same place.
- WHO IS RESPONSIBLE
- ［事業者名］, ［住所］; representative: ［氏名］. A business in Japan, responsible for your personal information under the Act on the Protection of Personal Information.
- CHANGES
- When this policy changes, the date at the top changes with it.