Privacy policy
Privacy Policy
Last updated: 26 October 2026
Koshū ("we", "us") is operated by Koshu Brand LLC and runs koshubrand.com. This policy covers what personal information we collect, why we collect it, who we share it with, and the choices you have.
The short version
- We collect what we need to make and ship your order, run your account, and understand how the site is used.
- Strictly necessary cookies load when you arrive. Analytics and advertising cookies wait until you accept them in our cookie banner.
- We share some browsing and purchase data with Meta and Google for advertising. You can opt out at any time, and we honour Global Privacy Control automatically.
- We never store your full card number.
1. Information we collect
Information you give us: your name, email, postal address and phone number, details of your orders and payments (payments are processed by Shopify, and we never store full card numbers), your account login, your marketing preferences, and anything you send us when you contact us or ask about a return.
Information collected automatically: your IP address, browser and device type, the page that referred you, the pages and products you view, your cart activity, and cookie identifiers.
Information from partners: advertising and analytics partners may tell us how you interacted with our ads on their platforms.
We do not collect precise geolocation or biometric data. We do not knowingly collect information from children under 16.
2. How we use it
We use it to fulfil orders, returns and warranty claims; provide customer support; prevent fraud and keep the site secure; run and improve the site; measure how the site performs; send marketing emails you have signed up for; advertise, including targeted advertising on other platforms; and meet our legal obligations.
We do not use your personal information to train artificial intelligence or machine learning models. We do not make automated decisions that have legal or similarly significant effects on you.
3. Cookies
Strictly necessary cookies, set by Shopify, keep your cart, session, checkout and currency working. They load when you arrive.
Analytics cookies, set by Shopify and Google Analytics, show us how the site is used. They load only after you accept them.
Marketing cookies, set by Shopify, Meta, Google and Klaviyo, measure our ads and emails and let us show you ads on other platforms. They load only after you accept them.
You can change your choice at any time with "Manage preferences" in the cookie banner. Most cookies expire within 2 years, and many expire after a single session.
4. Who we share information with
| Recipient | What they receive | Why |
|---|---|---|
| Shopify (including Shop Pay) | Order, account, browsing and payment data | Runs our store, checkout and payments |
| Klaviyo | Your email address, signup choice, and browsing and purchase events | Sends the marketing emails you signed up for |
| ShipStation | Your name, shipping address, contact details and order contents | Fulfilment and shipping |
| Meta (Facebook, Instagram) | Browsing and purchase events, cookie identifiers, and hashed contact details such as email or phone where available | Advertising and measurement |
| Google (Analytics) | Browsing and purchase events, and cookie identifiers | Analytics and measurement |
We also share information with payment processors and shipping carriers to complete your order, and with authorities where the law requires it. Some partners receive data directly from our servers as well as from your browser.
Shopify, Klaviyo and ShipStation are service providers. They may use your information only to provide services to us.
5. Sale and sharing of personal information
When we give browsing and purchase data to Meta and Google so they can show you ads on other sites and apps, some US state laws treat that as "sharing" for cross-context behavioural advertising, or as a "sale", even though no money changes hands. The categories involved are identifiers, internet activity and commercial information.
We do not sell personal information in any other way. We do not sell or share sensitive personal information, and we do not sell or share the personal information of anyone we know to be under 18.
To opt out: use our Do Not Sell or Share My Personal Information page, linked in the footer of every page. You can also decline marketing cookies in the cookie banner. If your browser sends a Global Privacy Control signal, we treat it as an opt-out for that browser automatically. We do not respond to browser "Do Not Track" signals, which are a different standard from Global Privacy Control.
6. Your privacy rights
Depending on where you live, you may have the right to know what we hold about you, access a copy of it in a portable format, correct it, delete it, opt out of its sale, sharing or use for targeted advertising, and withdraw consent at any time. We will not treat you differently for using any of these rights.
California. We collect identifiers, customer records, commercial information, internet activity, approximate location inferred from your IP address, and inferences used for personalisation. We collect these from you, your device and our advertising partners. We use them for the purposes in section 2 and disclose them to the recipients in section 4. The only sensitive personal information we collect is your account login and payment details. We use it only to provide the services you ask for and to prevent fraud, so we do not offer a "Limit the Use of My Sensitive Personal Information" option.
Other US states. If we decline your request, you can appeal by replying to our decision. We will answer an appeal within 45 days. If we deny it, we will tell you how to contact your state Attorney General.
EEA, UK and Switzerland. You also have the rights to restrict processing and to object to it. Our lawful bases are performance of a contract (your order), consent (marketing, advertising and non-essential cookies), legitimate interests (security, fraud prevention and improving the store), and legal obligation (tax and accounting records). You can complain to your local data protection authority.
How to make a request. Email us at the address below. We will verify your identity before we act, and we will respond within the time your local law requires, which is usually 30 to 45 days. An authorised agent can make a request for you if they show proof of authorisation.
7. How long we keep information
| Information | How long we keep it |
|---|---|
| Orders and transactions | 7 years, for tax, accounting and warranty records |
| Customer accounts | Until you close your account. After that, we delete or anonymise the account within 90 days, except records we must keep for tax purposes |
| Marketing contacts | Until you unsubscribe. After that, we keep only the record needed to make sure we don't email you again |
| Customer service and returns correspondence | 5 years from your last message |
| Cookie data | Until the cookie expires (see section 3) |
8. International transfers
We are based in the United States, and our service providers may process your information in the US and in other countries. When we transfer personal information from the EEA, UK or Switzerland, we use recognised safeguards, such as adequacy decisions and standard contractual clauses. Email us if you would like a copy of these safeguards.
9. Security
Shopify and its payment partners encrypt card data and handle it under the PCI-DSS standard. We use access controls and encryption in transit. No system is completely secure, and we cannot guarantee absolute security.
10. Children
Our site is not directed at children under 16. If you believe a child has given us personal information, contact us and we will delete it.
11. Changes and contact
If we change this policy, we will post the new version here and update the "Last updated" date. If a change is material, we will tell you by email or with a notice on the site before it takes effect.
Koshu Brand LLC is the controller of your personal information.
Koshū 4887 Voltaire St, San Diego, CA 92107 koshu@koshubrand.com