Privacy Policy

1. Introduction

Aspen Mirage ("we", "us", or "our") operates the website aspenmirage.com and provides handmade woven mesh crafts and garden fencing. We are committed to protecting your personal information in accordance with Japan's Act on the Protection of Personal Information (APPI / 個人情報保護法) and the EU General Data Protection Regulation (GDPR) where applicable.

This Privacy Policy explains what data we collect when you browse our website, request a quote, place an order, or contact our team, and how that data is stored, used, and shared.

2. Data Controller

The entity responsible for your personal data is:

3. Information We Collect

3.1 Information You Provide Directly

When you enquire about woven mesh panels, request a quote for decorative garden fencing, subscribe to our updates, or contact us through our website forms, we may collect:

• Full name
• Email address
• Phone number
• Postal address (for shipping estimates or on-site consultations)
• Project details and specific requirements related to wickerwork enclosures

3.2 Information Collected Automatically

Our web server and analytics tools may automatically record:

• IP address and approximate geographic location
• Browser type, operating system, and device category
• Pages visited, time on site, and referral source
• Cookie identifiers (see our Cookie Policy)

4. How We Use Your Information

We process personal data for the following purposes:

• Fulfilling orders and requests: preparing quotations, processing orders for woven mesh panels and custom rattan weaving, and arranging delivery or service appointments.
• Communication: responding to enquiries about our handmade woven mesh crafts and garden fencing, sending order-status updates, and providing after-service support.
• Website improvement: analysing browsing patterns so we can improve our product listings and the overall user experience.
• Legal compliance: meeting our obligations under Japanese commercial law and tax regulations.

5. Legal Basis for Processing

Under APPI, we process personal data with proper purpose specification and notification. For visitors from the European Economic Area, we rely on:

• Consent for newsletter subscriptions and non-essential cookies.
• Contractual necessity when you request a quote or place an order.
• Legitimate interest in understanding how visitors browse our website so we can improve the experience.

For visitors from California, USA, we recognise rights under the California Consumer Privacy Act (CCPA). You may request disclosure of collected data, deletion of personal information, and opt out of any data sale (we do not sell personal data).

6. Data Sharing and Third Parties

We do not sell your personal information. We may share data with:

• Shipping and logistics partners for product delivery within Japan and internationally.
• Payment processors that handle transactions securely under PCI-DSS standards.
• Analytics providers that help us understand site usage (data is anonymised where feasible).
• Legal authorities if required by Japanese law or a valid court order.

7. International Transfers

Your data is primarily stored on servers located in Japan. If data is transferred outside Japan, we ensure adequate protection through contractual safeguards, in line with APPI Article 28 requirements for cross-border transfers.

8. Data Retention

We retain personal data only as long as necessary:

• Enquiry and quote details: up to 24 months after the last interaction.
• Order records and delivery addresses: 7 years to comply with Japanese tax record-keeping rules.
• Newsletter subscribers: until you unsubscribe.
• Server logs: 12 months, then automatically purged.

9. Your Rights

Under APPI and, where applicable, GDPR and CCPA, you have the right to:

• Request disclosure of the personal data we hold about you.
• Correct inaccurate or outdated information.
• Request deletion of data that is no longer necessary.
• Withdraw consent for marketing communications at any time.
• Object to processing based on legitimate interest.
• Request data portability in a machine-readable format (GDPR).
• Opt out of personal data sale (CCPA) — we do not engage in such sales.

To exercise any of these rights, contact us at privacy@aspenmirage.com or call +81 3-6284-7031. We will respond within 30 days.

10. Children's Privacy

Our website and services related to handmade woven mesh crafts and garden fencing are not directed at children under 16. We do not knowingly collect personal data from minors. If you believe a child has submitted information to us, please contact us so we can delete it promptly.

11. Security Measures

We use SSL/TLS encryption on all pages, restrict access to personal data to authorised staff members, and conduct periodic reviews of our data-handling procedures. While no system is completely immune to breach, we take reasonable technical and organisational steps to protect your information.

12. Changes to This Policy

We may update this Privacy Policy when our services expand, when we adopt new tools, or when applicable data-protection regulations change. Material revisions will be posted on this page with an updated date. We encourage you to review this page periodically.

13. Contact Us

If you have questions about this Privacy Policy or how we handle your personal data, please reach out: