Karito Japan is the trade name under which two independent entities operate. Each one is the controller of the personal data of customers in its own list of countries, and it is the one you should write to in order to exercise your rights:

Both share this same policy and the same standard for handling your data.

Data you give us:

• First and last name.
• Email address.
• Phone or WhatsApp number, if you give it to us.
• Full delivery address and country.
• The content of the messages you send us.
• Proof of payment, for Venezuelan orders with manual verification.

Data generated automatically when you use the site: pages you visit, time on site, device and browser type, approximate country based on your IP address, and where you came from (search engine, social network, direct link).

• Processing and shipping your order. This is the main use: without your address there's no delivery.
• Contacting you about your order: confirmation, tracking number, out-of-stock or delay notices.
• Complying with customs on international shipments (see section 06).
• Answering your questions via the form, email or WhatsApp.
• Sending you news, only if you checked the box. You can unsubscribe at any time with one click at the bottom of any email.
• Understanding how the site is used so we can improve it — which products get viewed most, which pages people leave.

We don't use your data to make automated decisions that affect you, and we don't build profiles beyond the traffic measurement described above.

Only with those who need the data to provide us a service, and only the minimum necessary. We don't sell your data to anyone, and we don't hand it over for third-party advertising.

We may also share data if a competent authority legally requires us to.

It's important you know this before you buy: Karito Japan operates between Venezuela and Japan, and the services we use are hosted outside your country.

This means your data is stored and processed on servers in the United States, Japan and other countries, depending on the provider. If you place an international order, your name and address necessarily travel to Japan, because that's where your package ships from.

By buying on the site you accept this international transfer, which is essential for us to deliver your order.

For every international shipment we are required to declare to the destination country's customs: your name, your full address, the actual contents of the package and its actual value.

We don't declare orders as "gifts" or at values lower than what was paid. It's a legal obligation, both for Japanese customs and for your country's, and it's not negotiable.

The site uses three types of cookies:

• Necessary: they keep your cart and your session. Without them the store doesn't work.
• Measurement: Google Analytics, to see which pages work and which don't.
• Advertising: the Meta and TikTok pixels, when we have active campaigns, to measure whether an ad led to a purchase.

You can block or delete cookies in your browser settings. If you block the necessary ones, the cart will stop working.

• Order data: for as long as the business relationship lasts and for the time required by the accounting and tax obligations that apply to the selling entity — Venezuelan for Venezuelan orders, Japanese for orders shipped from Japan.
• Mailing list: until you unsubscribe.
• Contact messages: as long as needed to resolve your question and a reasonable period afterwards, in case you write again about the same thing.
• Browsing data: according to Google Analytics retention periods.

Wherever you live, with us you can:

• Know what data of yours we have.
• Correct it if it's wrong.
• Ask us to delete it, except what we must keep for legal or accounting reasons.
• Object to its use for marketing purposes, and unsubscribe from the mailing list.
• Request a copy of the data you gave us.

Write to ventas@karitojapan.com if you bought in Venezuela, or to supply@karitojapan.com if your order shipped from Japan. We respond within a maximum of 30 days. We may ask you to confirm your identity before sharing or deleting data — it's to protect you.

These rights exist in your jurisdiction under different names: habeas data under Article 28 of the Venezuelan Constitution, ARCO rights in Mexico, the federal privacy law in Canada, Chile's data protection regulations, Japan's Act on the Protection of Personal Information (個人情報保護法), and US state privacy laws such as California's. Our commitment is the same for everyone.

The store is intended for adults. We don't knowingly collect data from minors. If you're a minor, ask your parent or guardian to make the purchase. If we find that we collected data from a minor without authorization, we delete it.

The site runs on an encrypted connection (HTTPS) and order data is hosted on Shopify's infrastructure. Access to the store admin is limited to the people who operate Karito Japan in each of the two entities.

No system is infallible. If a breach affecting your data ever occurred, we would let you know by email and tell you what happened and what to do.

We may update this policy when our tools, markets or legal requirements change. The version published on the site is always the current one, and the date below tells you when it was last updated.

Last updated: September 2, 2026.