Privacy and Cookie Policy
Last updated: July 5, 2026
Onaholestore.com is operated by Samurai Express Co., Ltd. ("we", "us"), a company registered in Tokyo, Japan. We know that when you shop with us, discretion is not a nice-to-have — it is the whole point. This policy explains what information we collect, why we collect it, and how we protect it. We may update this page from time to time; the date above reflects the latest revision.
This store is for adults only
Our products and website are intended solely for adults aged 18 or over (or the age of majority in your jurisdiction, if higher). We do not knowingly collect information from anyone under 18.
What we collect
- Name, email address, phone number, and shipping/billing address when you place an order or create an account
- Order history and items you view or add to your cart
- Email address if you subscribe to our newsletter or request a back-in-stock alert
- Technical data such as browser type, device, approximate location (country/region), and how you navigate our pages
What we use it for
- Fulfilling and shipping your orders, including customs clearance for international delivery
- Customer support and order-related notifications (confirmation, shipment, delivery)
- Marketing emails, only if you have subscribed — every email includes an unsubscribe link
- Improving our website, product range, and service based on aggregated usage data
- Fraud prevention and site security
Payments
Card payments are processed by our external payment processor over an encrypted connection. Your full card number is never stored on our servers. Your card statement will show a discreet billing descriptor that does not reveal the nature of your purchase.
Shipping and discretion
To deliver your order we share the necessary shipping details (name, address, phone, customs-required product information) with our delivery carriers (e.g. DHL Express) and, where applicable, customs authorities. All parcels are shipped in plain packaging with no reference to the store name or contents beyond what customs regulations require. With our DDP (Delivered Duty Paid) service, duties are prepaid so no surprise charges or awkward doorstep payments occur.
Analytics and website improvement tools
We use the following tools to understand how visitors use our site so we can fix problems and improve the shopping experience:
- Google Analytics 4 / Google Tag Manager — aggregated traffic and usage statistics (pages visited, referral source, country, device type).
- Microsoft Clarity — we partner with Microsoft Clarity to capture how visitors use and interact with our website through behavioral metrics, heatmaps, and session replay, in order to improve usability and detect technical problems (for example, broken checkout steps). Clarity is configured in strict masking mode: text you type and on-screen text are masked before any data leaves your browser, so your personal details are not visible in recordings. Website usage data is collected using first- and third-party cookies and shared with Microsoft. For more information, see the Microsoft Privacy Statement.
- Klaviyo — powers our email newsletter and transactional marketing (e.g. back-in-stock alerts, abandoned cart reminders for subscribers).
- Cloudflare — site security, bot protection, and content delivery.
What we do NOT do
- We do not sell, rent, or trade your personal information to third parties.
- We do not send marketing email without your consent.
- We do not store your full payment card details.
- We do not print the store name or product nature on the outside of parcels.
Data retention
We keep order records for as long as required for accounting, tax, and warranty purposes under Japanese law. Analytics data is retained according to each provider's standard retention period. You may request deletion of your account data at any time (see below).
Your rights
You may request access to, correction of, or deletion of the personal information we hold about you, and you may withdraw marketing consent at any time. We handle personal information in accordance with the Act on the Protection of Personal Information (Japan) and, for visitors from the EEA/UK, we honor the applicable rights under GDPR/UK GDPR. To exercise any of these rights, contact us via the Contact Us page and we will respond promptly.
How we use cookies
Cookies are small files stored by your browser. We use them to keep your cart and session working, remember your preferences, and (as described above) for analytics. You can decline cookies in your browser settings, though parts of the site such as the cart may stop working properly.
Store cookies (required for the site to function)
| Cookie | Purpose |
|---|---|
| FORM_KEY | Prevents forged requests (security). |
| PHPSESSID | Your session ID on the server. |
| GUEST-VIEW | Allows guests to view and edit their orders. |
| PERSISTENT_SHOPPING_CART | Keeps your cart and viewing history, if requested. |
| STORE | The store view or language you selected. |
| USER_ALLOWED_SAVE_COOKIE | Whether you allowed cookies. |
| MAGE-CACHE-*, SECTION-DATA-IDS, PRIVATE_CONTENT_VERSION, X-MAGENTO-VARY | Speed up page loading via caching. |
| MAGE-TRANSLATION-* | Support translated content. |
Analytics cookies (third party)
| Cookie | Provider | Purpose |
|---|---|---|
| _ga, _ga_* | Google Analytics | Distinguishes visitors for aggregated traffic statistics. |
| _clck, _clsk | Microsoft Clarity | Links usage data to a pseudonymous visitor ID for heatmaps and session replay (text masked). |
| CLID, ANONCHK, MR, MUID, SM | Microsoft | Clarity support cookies (bot detection, session integrity). |
| __kla_id | Klaviyo | Recognizes newsletter subscribers on-site (e.g. so forms are not shown twice). |
| __cf_bm, cf_clearance | Cloudflare | Bot protection and site security. |
Questions
If anything here is unclear, or you want to exercise your data rights, reach us any time via the Contact Us page. Privacy questions get answered by a human, discreetly, usually within one business day.