Privacy policy

Last updated: April 10, 2026

Hachiroku Apparel ("we," "us," or "our") operates drivehachiroku.com (the "Site"). This Privacy Policy explains what personal information we collect, how we use and share it, the rights you have over your data, and how to contact us with questions.

By using the Site you agree to the practices described in this policy. If you do not agree, please do not use the Site.

1. Information We Collect

We collect the following categories of personal information:

  • Order and contact information — name, email address, shipping address, billing address, and phone number when you place an order, sign up for our newsletter, or contact us.
  • Payment information — handled by our payment processors (Shopify Payments, Shop Pay, and any other accelerated checkout providers). We do not store full payment card numbers ourselves.
  • Account information — email address and any preferences you provide if you create a customer account.
  • Device and usage data — IP address, browser type, device identifiers, operating system, referring URL, pages visited, time spent on pages, and clicks. Collected automatically via cookies, pixels, and similar technologies.
  • Marketing engagement data — opens, clicks, and conversions tied to emails and ads we send.

2. Cookies and Tracking Technologies

We use first-party and third-party cookies, web beacons, pixels, local storage, and similar technologies to operate the Site, remember your preferences, measure performance, and serve and measure advertising.

The third-party tracking and advertising technologies we currently use include:

  • Meta Pixel (Facebook/Instagram), pixel ID `1261007139331737`. The Pixel collects information about your interactions with the Site (page views, product views, add-to-cart, checkout, purchase) and shares it with Meta to measure and target advertising.
  • Meta Conversions API (server-side). In addition to the client-side Pixel, we transmit a subset of website conversion events directly from our servers to Meta via the Conversions API. The data we send is hashed (one-way encrypted) and may include hashed email address, hashed phone number, hashed name, IP address, browser user-agent, and event details (event name, value, currency, product IDs). Meta uses this data to measure ad performance, attribute conversions, and optimize ad delivery.
  • Shopify analytics (first-party) for site performance and order analytics.
  • Klaviyo for email marketing analytics and segmentation.

You can manage cookies through your browser settings. Disabling cookies may break parts of the Site such as the cart and checkout.

3. How We Use Your Information

We use your information to:

  • Process, fulfill, and ship your orders
  • Provide customer support and respond to inquiries
  • Send transactional emails (order confirmations, shipping updates, refunds)
  • Send marketing emails when you have opted in (you can unsubscribe at any time using the link in any marketing email)
  • Measure, attribute, and optimize our advertising on Meta and other platforms
  • Detect and prevent fraud and abuse
  • Comply with legal obligations and enforce our terms

4. How We Share Your Information

We share personal information only with the following categories of recipients:

  • Service providers necessary to operate the business — Shopify (e-commerce platform and payments), Printify (print-on-demand fulfillment), our shipping carriers, Klaviyo (email marketing), and any future fulfillment partners.
  • Advertising partners — Meta (Facebook/Instagram), via the Meta Pixel and Conversions API as described in Section 2. Future ad platforms (e.g., TikTok, Google) will be added here when activated.
  • Legal and safety — government authorities, courts, and law enforcement when legally required, and to protect our rights, property, or safety.
  • Business transfers — in connection with a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction.

We do not sell your personal information for money. Some of the cookie- and pixel-based data sharing described in Section 2 may, however, qualify as "sharing" or "selling" of personal information under certain U.S. state laws (including the California Consumer Privacy Act, as amended by the CPRA). See Section 7 for your opt-out rights.

5. Opt Out of Targeted Advertising

You can opt out of targeted advertising in any of the following ways:

  • Meta Ad Preferences — manage how Meta uses your activity to show you ads at https://www.facebook.com/adpreferences/
  • Network Advertising Initiative (NAI) — http://optout.networkadvertising.org/
  • Digital Advertising Alliance (DAA) — http://optout.aboutads.info/
  • Your Online Choices (EU/UK) — https://www.youronlinechoices.eu/
  • Browser settings — most browsers let you block third-party cookies and clear stored data
  • Global Privacy Control (GPC) — we honor browser-level GPC signals as a valid opt-out request from California residents

Opting out of targeted advertising will not stop the Site from working — you will simply see less personalized ads.

6. Data Retention

  • Order and customer-account data — retained for as long as your account is active and afterwards as required by tax, accounting, and consumer-protection law (typically 7 years).
  • Marketing data — retained until you unsubscribe, request deletion, or 2 years of inactivity (whichever comes first).
  • Advertising and analytics data — retained per the third-party platform's own retention policies (Meta, Klaviyo, Shopify). We do not control these platforms' retention windows.

7. Your Rights

Depending on where you live, you may have the following rights:

California residents (CCPA / CPRA)

  • Right to know what personal information we collect, use, share, or sell about you
  • Right to delete personal information we hold about you
  • Right to correct inaccurate personal information
  • Right to opt out of "sale" or "sharing" of personal information for cross-context behavioral advertising
  • Right to limit the use of "sensitive personal information"
  • Right to non-discrimination for exercising your rights

To exercise these rights, email us at privacy@drivehachiroku.com or use the opt-out methods in Section 5.

EEA, UK, and Switzerland residents (GDPR / UK GDPR)

  • Right of access to your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restrict or object to processing
  • Right to data portability
  • Right to withdraw consent at any time
  • Right to lodge a complaint with your local Data Protection Authority

The legal basis for our processing is: (a) your consent (for marketing and non-essential cookies), (b) the performance of a contract (to fulfill your orders), (c) compliance with a legal obligation (tax, fraud prevention), and (d) our legitimate interests (running and improving the business, securing the Site).

To exercise these rights, email us at privacy@drivehachiroku.com.

8. Children's Privacy

The Site is not directed to children under 13 (or under 16 in some jurisdictions), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

9. International Transfers

We are based in the United States. If you are visiting from outside the U.S., your information will be transferred to and processed in the U.S., which may not have the same data-protection laws as your country. For EEA/UK residents we rely on appropriate safeguards (such as Standard Contractual Clauses) where required.

10. Security

We use commercially reasonable technical and organizational safeguards to protect your information, including HTTPS encryption in transit, secure payment processing via Shopify Payments, and access controls on our systems. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected in the "Last updated" date at the top, and where required by law we will notify you by email or a prominent notice on the Site.

12. Contact Us

For privacy questions, requests, or to exercise any of the rights described above, email privacy@drivehachiroku.com.

Hachiroku Apparel — United States. We will respond to verifiable requests within 30 days (45 days for CCPA requests, extendable by an additional 45 days where reasonably necessary).