Privacy policy
Privacy Policy
Last updated: November 12, 2025
Bento&co (Bertrand Co.) operates this online store and website (bentoandco.com) to provide you with a personalized and secure shopping experience. This Policy explains how we collect, use, disclose, and protect your personal information when you use our Services, place an order, or otherwise interact with us.
1) Personal information we collect
We collect personal information when you place an order, create an account, subscribe to our newsletter, contact support, or browse our site.
- Contact details: name, billing/shipping address, email address, phone number.
- Order & payment details: items purchased, amounts paid, payment method (payment processors handle card data).
- Account & preferences: login, saved addresses, wishlists, marketing preferences.
- Device & usage: IP address, browser/device info, cookies/analytics data, pages viewed, cart actions.
- Communications: messages you send to us (e.g., support requests, reviews).
2) How we use your information
- Provide and improve the Services: process payments and orders, ship products, manage your account, personalize content and recommendations.
- Communicate with you: order updates, service messages, and—if you opt in—newsletters and promotions.
- Safety, fraud prevention, and legal compliance: secure checkout, protect our users and business, comply with tax and other obligations (including EU VAT reporting).
- Advertising & analytics: measure performance and show relevant content and ads (see Cookies & Ads below).
3) How we disclose information
We do not sell your personal information for money. We share information only as needed to operate our business:
- Shopify – store hosting, checkout, payments, and security.
- EAS Project (easproject.com) – European Union countries orders only: to calculate and report VAT in accordance with applicable EU rules.
- Analytics & marketing – Google Analytics, Meta (Facebook/Instagram), Microsoft Clarity, and similar tools to understand site usage and improve performance.
- Shipping partners – DHL, FedEx, UPS, Japan Post and others to deliver your orders.
- Professional service providers – e.g., cloud hosting, customer support tools, IT/security.
These partners may process your data only to perform services for us and must protect it under applicable data protection laws.
4) EU VAT data (EAS Project)
For EU orders where VAT is applicable, we use EAS Project to calculate and report VAT. Data shared may include transaction details (items, amounts) and your billing/shipping addresses and VAT number (if any). This data is used solely to determine and report VAT due and to ensure compliance. EAS implements strict security measures and does not sell your data.
5) Cookies, analytics & advertising
We use cookies and similar technologies (Shopify, Google Analytics, Microsoft Clarity, Meta Pixel) to operate the site, analyze traffic, save your preferences, and show more relevant content and ads. You can manage cookies in your browser settings and, where offered, via our site’s “Cookie Preferences.”
US residents: certain analytics/advertising tools may be considered a “sale,” “sharing,” or “targeted advertising” under state privacy laws. See “Your rights” for opt-out options, including honoring Global Privacy Control (GPC) where required.
6) Security
We use technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. We do not store full credit card numbers on our systems; secure payment processors (e.g., Shopify Payments and PayPal) handle payment data.
7) Data retention
We retain personal information only as long as necessary to provide the Services, fulfill your orders, meet legal/tax obligations, resolve disputes, and enforce our agreements.
8) Your privacy rights
EEA/UK (GDPR): you may request access, correction, deletion, restriction or objection to processing, and data portability. You may withdraw consent at any time where processing is based on consent.
US state laws (e.g., CA/CPRA, CO, CT, UT, VA): depending on your state, you may have rights to access, delete, correct, or obtain a copy of your data, and to opt out of the sale, sharing, or targeted advertising uses of personal information.
- To exercise rights or make a privacy request, contact us at contact@bentoandco.com.
- To opt out of analytics/advertising “sale/share” or targeted advertising, use the “Cookie Preferences” link (where available) or email us. We also honor supported Global Privacy Control signals as required by law.
We may need to verify your identity before fulfilling requests. You can appoint an authorized agent where permitted by law.
9) Children’s privacy
Our Services are not intended for children. We do not knowingly collect personal information from children under 13 (US) or from children who have not reached the age of digital consent in their jurisdiction (e.g., 16 in the EEA). If you believe a child provided personal information, please contact us to request deletion.
10) International data transfers
We process data primarily in Japan and may transfer it to other countries. Where required (e.g., EEA/UK), we rely on recognized transfer mechanisms such as the EU Standard Contractual Clauses to ensure adequate protection.
11) Changes to this Policy
We may update this Policy to reflect legal, technical, or business changes. We will post any updates here and revise the “Last updated” date above.
12) Contact us
If you have questions about this Policy or our privacy practices—or wish to exercise your rights—please contact us:
Bento&co (Bertrand Co.)Yaoya-cho 117, Nakagyo-ku, Kyoto 604-8072, Japan
Email: contact@bentoandco.com
Base currency for this store: USD
