Privacy Policy

Who is responsible

The service operator and personal information handling business operator is 株式会社COCO, 〒140-0013 東京都品川区南大井6丁目24-1 セブンスターマンション第5大森206室. The representative director and person responsible for personal information management is NG KAMWAI.

Privacy enquiries and requests may be sent to mingyang851@gmail.com (小嗚) or lucky79@gmail.com (Mia).

Information we collect

• Account identifiers, name, email address and authentication information supplied by the sign-in provider.
• Company or sole-proprietor details, contact details, country, address, website, business description and membership interest.
• Business registration records, identity or address evidence requested during review, and store or product photographs.
• Applications, review decisions, buyer IDs, enquiries and communications.
• Bids, orders, invoices, payments, shipment details, saved items and service activity.
• Device, browser, access, security and error logs reasonably needed to operate and protect the service.

Why we use it

• To identify applicants, assess dealer applications and prevent fraud or prohibited use.
• To create and administer approved dealer access and communicate account decisions.
• To manage bids, orders, payment confirmation, export and delivery support.
• To provide customer support, keep required business records, secure the service and resolve disputes.
• To comply with tax, accounting, sanctions, export-control and other legal obligations.

We will not use application documents for unrelated advertising or sell them as personal data.

Service providers and disclosure

We may use carefully selected providers for authentication, cloud hosting and document storage, payment processing, email, logistics, insurance, professional advice and security. They may process only the information needed to perform their role, under appropriate contractual and security controls.

Supporting business and identity documents are not supplied to the external auction operator under the current approval workflow. If a future process requires a new disclosure, applicants will be informed before disclosure unless law permits otherwise. We may also disclose information when required by law, to protect legal rights, or in a business reorganisation subject to appropriate safeguards.

Material overseas processing locations and the safeguards used for cross-border transfers are documented in our internal provider register and reviewed when a provider or processing route changes. Additional information will be provided where required by applicable law.

Security

Application documents are stored separately from public product photographs. Access is limited to the applicant, NG KAMWAI and authorised review or system administrators who need it for their role. We use account authentication, access controls, private object delivery, file-type and size validation, malware scanning when public intake is enabled, and audit records. An independent document backup is not currently represented as active; this policy will be updated before such a backup is introduced. No internet service can guarantee absolute security; suspected incidents are assessed and notified where required by law.

Retention and deletion

Application and identity documents follow the periods in our Data and Document Retention Policy. In summary, declined or withdrawn application material is scheduled for deletion three months after the review ends. Dealer application and identity material is scheduled for deletion three months after the dealer relationship ends. Contracts, invoices and transaction records are retained separately for the period required by applicable law, generally at least seven years for relevant corporate tax records.

Your choices and rights

Subject to Japanese law and applicable exceptions, you may ask us to disclose the personal data we hold about you, explain its use, correct it, stop certain use or third-party disclosure, or delete it. We may need to verify your identity and may retain information that law or an unresolved transaction requires us to keep. You may also remove eligible draft documents in your dealer workspace.

Cookies and changes

We use cookies and similar storage where needed for authentication, security and basic service operation. Any optional analytics or advertising technology must be separately disclosed before it is introduced. Material policy changes will be posted with a revised date and, where required, notified to account holders before they take effect.