Privacy Policy

1 Introduction & Overview

This comprehensive Privacy Policy outlines our commitment to protecting your personal information when you use Suki Card’s websites, loyalty program services, and related applications (collectively, our “Services”). This document details how your information is collected, used, disclosed, and safeguarded by Suki Card (“we,” “our,” or “us”). Please review this Privacy Policy carefully to understand our practices regarding your personal data and how we will treat it.

Suki Card is operated by Suki Digital Solution, which acts as the data controller for the information collected through our Services. By accessing and using our Services, you acknowledge that you have read and understood this Privacy Policy. We may update this Privacy Policy periodically, and we will notify you of any significant changes by updating the effective date at the bottom of this policy and, when appropriate, providing additional notice through our website or direct communication.

2 Information Collection

We collect several types of information to provide and improve our Services. The types of personal information we collect depend on how you interact with us.

Information You Provide Directly

When you create an account, participate in our loyalty program, make purchases, or otherwise engage with our Services, we collect information you provide directly to us, including:

• Personal identification information (name, email address, phone number)
• Contact information (billing address, shipping address)
• Payment information (credit card details, payment method preferences)
• Account credentials (username, password)
• Profile information (profile picture, preferences, interests)
• Communication content (when you contact customer support or communicate with us)
• Transaction data (purchase history, order details, shipping information)
• Any other information you choose to provide
• SMS Opt-in Consent: We collect your express consent (opt-in) to receive SMS messages, which may include marketing, promotional, and transactional content, as part of your loyalty program enrollment or account setup.

Payment information is processed by our third-party payment processors (Stripe and PayPal) according to their respective privacy policies, which can be found at stripe.com/privacy and paypal.com/privacy.

3 Information Collected Automatically

When you access or use our Services, we automatically collect certain information about your device and usage, including:

• Device Information: browser type, operating system, device type, IP address, and other technical information
• Log Data: access times, pages viewed, referring websites, and browsing patterns
• Location Information: general location based on IP address
• Cookies and Similar Technologies: data collected through cookies, web beacons, pixels, and similar technologies

Our cookies and tracking technologies collect information about how you navigate and interact with our Services. For more detailed information about our use of cookies and how to manage your preferences, please visit our Cookie Policy.

4 Information From Third Parties

We may receive information about you from third parties, including:

• Social media platforms when you connect your account
• Business partners with whom we offer co-branded services
• Marketing and analytics providers
• Other sources when you give permission for data sharing

5 Use of Information

We use the information we collect for various purposes, including to:

• Create and manage your Suki Card account
• Process your transactions and loyalty program activities
• Provide, maintain, and improve our Services
• Personalize your experience and deliver relevant content
• Send transaction confirmations, program updates, and service-related messages
• Communicate with you about products, services, offers, and promotions
• Send SMS notifications, alerts, and marketing messages, where you have provided consent
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent transactions and other illegal activities
• Protect the rights, property, and safety of Suki Card and others
• Comply with legal obligations and enforce our terms
• Develop new features and services based on user preferences
• Enhance security and risk assessment procedures
• Respond to customer service inquiries and support requests
• Consider you for potential employment if you submit an application

6 Lawful Basis for Processing Your Information

We process your personal information based on one or more of the following legal grounds:

• Contractual fulfillment — when you sign up for our Services or make purchases
• Your consent — which you can withdraw at any time (especially relevant for SMS communications)
• Legal obligations — compliance with laws to which we are subject
• Legitimate interests — in providing and improving our Services, protecting our legal rights, and pursuing business objectives

7 Sharing of Information

We may share your personal information in the following circumstances:

Service Providers

We share information with vendors, consultants, and service providers who need access to such information to provide services on our behalf, such as:

• Payment processors (Stripe, PayPal)
• Cloud hosting providers
• Analytics services (Google Analytics)
• Marketing and advertising partners (Facebook, Google Ads)
• SMS communication providers (Twilio, for sending transactional and marketing SMS messages on our behalf)
• Customer support services
• Fraud prevention and security services

Business Transfers

If Suki Card is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of company assets, your information may be transferred as part of that transaction.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (such as a court or government agency). We may also share information when we believe disclosure is necessary to protect our rights, prevent fraud, enforce our policies, or protect the safety of our users or others.

With Your Consent

We may share your information with third parties when you have given us your consent to do so.

Aggregated or De-identified Data

We may share aggregated or de-identified information, which cannot reasonably be used to identify you, with third parties for research, marketing, analytics, and other purposes.

Mobile Information & SMS Opt-In Data

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with subprocessors for the purpose of delivering messages you have requested (such as Twilio) is permitted. All other use-case categories specifically exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

8 Third-Party Services and Platforms

Our Services may contain links to other websites or services that are not owned or controlled by Suki Card. We use various third-party services to support our operations:

• Tilda — for our online store
• Google Analytics — for usage analytics
• Facebook Pixel — for advertising optimization
• Twilio — for SMS messaging services

We may allow you to sign up and log in using your Google account or other social media accounts. If you choose this option, these platforms will ask your permission to share certain information with us, which may include your name, email address, and profile picture.

We are not responsible for the privacy practices or content of these third-party services. We encourage you to review the privacy policies of any third-party services you access.

9 Behavioral Advertising and Your Choices

We and our advertising partners may use your information to deliver relevant advertisements to you. These partners may collect information about your online activities over time and across different websites when you use our Services.

You can opt out of targeted advertising through the following links:

• Facebook Ads Settings
• Google Ad Settings
• Digital Advertising Alliance

SMS Communications

You can opt out of receiving marketing SMS messages at any time by replying “STOP” to any message you receive from us, or by contacting our support team. Please note that you may still receive essential transactional or service-related messages even if you opt out of marketing SMS.

We do not alter our data collection and use practices when we detect Do Not Track signals from your browser.

10 Data Security

We implement appropriate technical, administrative, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include encryption, access controls, and secure facilities.

However, no security system is impenetrable, and we cannot guarantee the absolute security of our systems. We encourage you to take steps to protect your personal information, such as keeping your account credentials confidential and logging out of your account after use.

11 Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When determining the retention period, we consider:

• The length of time needed to provide our Services
• Legal obligations we must comply with
• Applicable statute of limitations
• Ongoing or potential disputes
• Our legitimate business interests

When you delete your account, we may retain certain information to prevent fraud, assist with investigations, resolve disputes, analyze usage patterns, or comply with legal requirements.

12 International Data Transfers

Suki Card is based in Japan. By using our Services, you acknowledge that your information will be transferred to and processed in countries where data protection laws may differ from those in your country of residence, including the United States and other countries where we or our service providers operate.

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we implement appropriate safeguards for transfers of your personal information, such as standard contractual clauses approved by the relevant authorities.

13 Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information.

For Users Globally

• Access and Update: You can access and update certain information through your account settings or by contacting us
• Communication Preferences: You can opt out of marketing communications by following the unsubscribe instructions in any marketing email we send
• Cookies: You can manage cookies through your browser settings
• Device Permissions: You can control permissions (such as location) through your device settings

For Users in the EEA, United Kingdom, and Other Regions

You may have the right to:

• Access: Request a copy of your personal information
• Rectification: Correct inaccurate or incomplete information
• Erasure: Request deletion of your personal information in certain circumstances
• Restriction: Request that we restrict processing of your information
• Data Portability: Receive your information in a structured, commonly used format
• Objection: Object to processing based on legitimate interests or for direct marketing
• Withdrawal of Consent: Withdraw consent where processing is based on consent
• SMS Opt-out: Opt out of SMS communications at any time by replying “STOP”

To exercise these rights, please contact us at support@suki.cards. We will respond to your request within the timeframe required by applicable law.

14 Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or Services. When we make material changes, we will notify you by updating the effective date and, in some cases, providing additional notice (such as a banner on our website or an email notification).

We encourage you to review this Privacy Policy whenever you access our Services to stay informed about our information practices.

15 Contact Us

If you have questions, concerns, or feedback about this Privacy Policy or our privacy practices, please reach out to us:

Your privacy is important to us. We are committed to being transparent about our data practices and providing you with meaningful control over your information. Thank you for trusting Suki Card with your personal data.