Privacy Policy
1. Introduction
Canyon Iris (“we”, “us”, or “our”) operates the website canyoniris.com and provides old photo digitization and restoration. We are committed to protecting your personal information in accordance with Japan’s Act on the Protection of Personal Information (APPI / 個人情報保護法) and the EU General Data Protection Regulation (GDPR) where applicable.
This Privacy Policy explains what data we collect when you browse our website, request a quote, place an order, or contact our team, and how that data is stored, used, and shared.
2. Data Controller
The entity responsible for your personal data is:
Canyon Iris
1-22-5 Ebisu, Shibuya-ku, Tokyo 150-0013, Japan
Phone: +81 3-5422-8194
Email: privacy@canyoniris.com
3. Information We Collect
3.1 Information you provide directly
When you enquire about photo album scanning, request a quote for old photo restoration, subscribe to our updates, or contact us through our website forms, we may collect:
- Full name
- Email address
- Phone number
- Postal address (for shipping estimates or on-site consultations)
- Project details and specific requirements related to material radiography of artworks
3.2 Information collected automatically
Our web server and analytics tools may automatically record:
- IP address and general geographic area
- Browser type, operating system, and device category
- Pages visited, time on site, and referral source
- Cookie identifiers (see our Cookie Policy)
4. How We Use Your Information
We process personal data for the following purposes:
- Fulfilling orders and requests: preparing quotations, processing orders for photo album scanning and archival digitization, and arranging delivery or service appointments.
- Communication: responding to enquiries about our old photo digitization and restoration, sending order-status updates, and providing after-service support.
- Website improvement: analysing browsing patterns so we can improve our product listings and the overall user experience.
- Legal compliance: meeting obligations under Japanese commercial law and tax regulations.
5. Legal Basis for Processing
In accordance with APPI, we identify and publish processing purposes before handling data. For EEA visitors, our lawful bases include:
- Consent when you opt in to our mailing list or accept optional cookies.
- Contractual necessity — when you request a quote or place an order.
- Legitimate interest — in understanding how visitors browse our website so we can improve the experience.
California residents may exercise rights under the CCPA, including the right to know what data we hold, request its deletion, and direct us not to sell personal information. We confirm that we do not sell personal data.
6. Data Sharing and Third Parties
We do not sell your personal information. We may share data with:
- Shipping and logistics partners for product delivery within Japan and internationally.
- Payment processors that handle transactions securely under PCI-DSS standards.
- Analytics providers that help us understand site usage (data is anonymised where feasible).
- Legal authorities if required by Japanese law or a valid court order.
7. International Transfers
We store personal data on Japan-based servers. Should a cross-border transfer become necessary, we apply contractual and technical safeguards that satisfy APPI Article 28.
8. Data Retention
We retain personal data only as long as necessary:
- Quote requests and enquiry records: retained for up to two years following your last communication.
- Transaction and shipping records: kept for seven years under Japanese tax law.
- Mailing list members: stored until you opt out of further communications.
- Access logs: deleted automatically after twelve months.
9. Your Rights
Under APPI and, where applicable, GDPR and CCPA, you have the right to:
- Ask us to disclose what personal information we maintain about you.
- Correct inaccurate or outdated information.
- Request deletion of data that is no longer necessary.
- Withdraw consent for marketing communications at any time.
- Object to processing based on legitimate interest.
- Request data portability in a machine-readable format (GDPR).
- Opt out of personal data sale (CCPA) — we do not engage in such sales.
To exercise any of these rights, contact us at privacy@canyoniris.com or call +81 3-5422-8194. We will respond within 30 days.
10. Children’s Privacy
Our website and services related to old photo digitization and restoration are not directed at children under 16. We do not knowingly collect personal data from minors. If you believe a child has submitted information to us, please contact us so we can delete it promptly.
11. Security Measures
All pages are secured with SSL/TLS, and only staff with a legitimate need may access personal records. We audit our data-handling practices on a regular schedule. Although no security framework can eliminate every risk, we apply proportionate technical and procedural safeguards.
12. Changes to This Policy
This Privacy Policy may be revised as our offerings grow, new technologies are introduced, or relevant laws are amended. We will post any significant changes here along with a new effective date.
13. Contact Us
If you have questions about this Privacy Policy or how we handle your personal data, please reach out:
Canyon Iris — Privacy Enquiries
1-22-5 Ebisu, Shibuya-ku, Tokyo 150-0013, Japan
Phone: +81 3-5422-8194
Email: privacy@canyoniris.com