Privacy Policy

Privacy Policy

How we use your information

When you buy something from the Ocha & Co. website we collect the personal information entered such as name, address, delivery and email addresses entered when placing your order.

We also receive your computer's IP (internet protocol) which provides us with information about your browser and operating system.

We use this information in a number of ways:

to ensure the smooth processing & delivery of your order, or to contact you if there is a problem with your order
  • to allow us to make any subsequent visits you may make to our website, as easy as possible, meaning you don't have to resubmit certain information each time you shop with us
  • with your permission to occasionally contact you, should we have any offers or information related to the goods you have previously purchased with us
  • to profile our customer database to help us improve our service and product range, and to help us attract similar customers; this may involve working with third party analysis companies

How do you get my consent?

When you provide us with personal information to complete a transaction, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only. If we ask for your personal information for another reason such as marketing, we will either ask directly for your expressed consent, or provide you with an opportunity to say no.

How do I withdraw my consent?

If after opting-in, you may withdraw your consent for us to contact you or for the continued collection, use and disclosure of your information by contacting us directly at or mailing us at Ocha & Co. 3-9-6 A Nishimachi, Higashikawa,
Hokkaido, Japan 071-125


We may disclose your personal information if we are required by law to do so or if the our terms of service are violated.

Website Hosting

The Ocha & Co. online platform is hosted by Shopify. Your data is stored on their secure servers and behind a secure firewall on Shopify's database.


If you choose a direct payment gateway to complete your purchase, then Shopify stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase after which it is deleted. All direct payment gateways conform to the PCI-DSS protocol managed by the PCI Security Standards Council. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers. More information about the protocol can be found on Shopify's Terms of Service and Privacy Statements.

Third Party Services

For the most part the third-party providers used by Ocha & Co. will only collect, use and disclose your information to allow them to perform the services they provide to us. Some third-party service providers though, such as payment gateways and other payment transaction processors, have their own privacy policies for the information that we have to provide to them for your transactions. We advise reading their privacy policies to understand how your personal information will be handled in these cases. It is worth noting that these third-party providers may be located in different jurisdictions and may be subject to the laws of a different country. On leaving our Ocha & Co.'s website or on proceeding to a third-party website or application, you are no longer governed by Ocha & Co.'s Privacy Policy or our Terms of Service.


Links on Ocha & Co.'s website may direct you to a different website. We are not responsible for other company's privacy practices and we advise you to read their privacy statements.

Google analytics:

Ocha & Co. uses Google Analytics for information on site visits and what areas of our website is being looked at.


We follow industry best practices to protect your personal information and make sure it is not lost, misused, accessed, disclosed, altered or destroyed. All credit card information is encrypted using secure socket layer technology (SSL) and stored with a AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow the PCI-DSS protocol industrial standard.

Contact Details.

Tel No: +81 (0) 166 82 5501

Address: Ocha & Co. Nishimachi 3-Chome 9-6 A, Higashikawa-Cho, Kamikawa-Gun.
Hokkaido 071-1425 Japan


Sign up for our Newsletter