PRIVACY POLICY

Oasis Trading, Fukuoka, Japan (contact: info@eeyan.jp) is the controller of the personal data processed through Oasis Drops.

• Account and business details you provide when applying: company name, contact name, email, WhatsApp and phone numbers, country, shipping address, preferred language, tax or importer identification numbers (such as VAT, EORI or GST numbers) and whether you hold a Wise account.
• Order and payment data: claims, invoices, transfer references and payment proof images you upload, and payment status.
• Technical data needed to run the Service: sign-in sessions, timestamps of actions and basic server logs.

We do not collect card numbers or bank credentials; payments are made by you through Wise or your own bank.

• Performance of a contract: to review your application, run Drops, allocate claims, invoice, receive payment and ship orders.
• Legal obligations: Japanese secondhand dealer, export, customs, invoicing and tax rules require us to keep transaction records (including buyer name, address, item and date) for the statutory period.
• Legitimate interests: preventing fraud and unpaid claims, securing the Service, and sending transactional emails about your orders.

We do not send marketing emails without your consent, and we do not sell personal data.

Service providers who process data on our behalf under contract: hosting and database (Vercel, Supabase), email delivery (Resend), carriers for shipping (DHL, EMS/Japan Post) and customs authorities as required for export. We share the minimum needed for each purpose. Some providers are located outside the EEA; transfers rely on their standard contractual clauses or equivalent safeguards.

Your personal data is stored in a Supabase database and file storage hosted in a data centre in Singapore (Amazon Web Services, ap-southeast-1), and processed by Vercel servers in Singapore. It is accessed from Japan by Oasis Trading. Supabase and Vercel act as our processors under data processing agreements and do not use the data for their own purposes.

If you are in the EEA or UK, this means your data is transferred outside the EEA/UK. Those transfers are covered by the providers' standard contractual clauses (or UK equivalents) and by the security measures described below.

Under Japan's Act on the Protection of Personal Information, we treat the storage in Singapore as handling of personal data in a foreign country. We apply security control measures that are consistent with Japanese requirements, we have confirmed the providers' safeguards, and we will provide information on Singapore's data protection regime (Personal Data Protection Act) and on these safeguards on request.

Transaction records are retained for at least 7 years as required by Japanese tax and secondhand dealer law. Account data is kept while your account is active and deleted or anonymised within 12 months after closure, except where retention is legally required. Payment proof images are kept with the related transaction record.

If you are in the EEA or UK, you have the right to access, correct, delete or restrict the processing of your personal data, to data portability, and to object to processing based on legitimate interests. You may also lodge a complaint with your local supervisory authority. To exercise your rights, email info@eeyan.jp. We will respond within one month.

Data is stored in access-controlled databases with row-level permissions so that each Buyer can see only their own data. Cost and supplier information is never exposed to Buyers. Access by our staff and tools is logged.

We use only strictly necessary cookies to keep you signed in. No advertising or tracking cookies are used.

We may update this policy. The current version is always available on this page, with the date of the last update shown above.