Privacy Policy (CCPA)
Last Updated: April 3, 2026
This Privacy Policy describes how tokyocentral.com and smartsavercard.tokyocentral.com (the "Site," "we," "us," or "our") collects, uses, and discloses Personal Information when you visit, interact with, make a purchase from the Site, or participate in the Smart Saver Card loyalty program.
1. Contact
If you have questions, want more information about our privacy practices, or would like to make a complaint, please contact us:
- Email: info@marukai.com
- Mail: Marukai Corporation, 1740 Artesia Boulevard, Gardena, CA 90248, United States
2. What Personal Information We Collect
"Personal Information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with an identifiable individual.
A. Device Information
- Purpose: To load the Site accurately and to perform analytics to optimize Site performance.
- Source: Collected automatically via cookies, log files, web beacons, tags, or pixels.
- Disclosed to: Shopify (our e-commerce processor) and analytics/advertising partners as described below.
- Examples collected: Browser version, IP address, time zone, cookie data, pages/products viewed, search terms, and interactions with the Site.
B. Order Information
- Purpose: To fulfill orders, process payments, arrange shipping, send confirmations/invoices, communicate with you, screen for fraud, and provide information or advertising consistent with your preferences.
- Source: Collected from you.
- Disclosed to: Shopify and payment/shipping providers needed to fulfill your order.
- Examples collected: Name, billing/shipping address, payment information, email address, phone number.
C. Customer Support Information
- Purpose: To provide assistance with inquiries, issues, or complaints related to products or services.
- Source: Collected directly from you (e.g., email, phone, or other communications).
- Disclosed to: Customer support teams and vendors assisting with issue resolution.
- Examples collected: Name, contact information, details of the issue, order history (if applicable), and any information you choose to provide.
D. Smart Saver Card / Loyalty Program Information
- Purpose: To operate the Smart Saver Card loyalty program, provide member benefits, verify member identity, deliver digital membership cards, and send promotional offers and program communications.
- Source: Collected from you during registration at smartsavercard.tokyocentral.com or in-store.
- Disclosed to: Mandrill by Mailchimp/Intuit (transactional and marketing email delivery) and internal program management systems.
- Examples collected: First name, last name, email address, phone number, birth date (month/day/year), zip code, preferred store location, membership card barcode number, account activation status, and registration date.
E. Email Verification / OTP Data
- Purpose: To verify your identity when accessing your Smart Saver Card online.
- Source: Generated automatically when you request access to your card via the card lookup flow.
- Disclosed to: Mandrill by Mailchimp/Intuit (email delivery only).
- Examples collected: One-time verification codes (OTP), email address associated with the request, timestamps, and verification attempt logs.
- Retention: OTP codes expire after 2 minutes and are not stored after successful verification or expiration.
3. How We Use Personal Information
We use Personal Information to:
- Provide and operate the Site and related services;
- Process payments, fulfill orders, ship products, and provide confirmations and customer service;
- Communicate with you, including responding to inquiries;
- Screen orders for potential risk or fraud and protect our Site and users;
- Improve and optimize the Site, including analytics and performance measurement;
- Provide marketing and advertising consistent with your preferences and applicable law;
- Operate the Smart Saver Card loyalty program and deliver member benefits, including exclusive discounts and promotional offers;
- Send transactional emails related to your account, including account activation confirmations, identity verification codes (OTP), and digital card delivery;
- Send promotional emails about exclusive offers, events, and savings opportunities to active Smart Saver Card members;
- Generate and deliver digital membership cards with unique barcodes;
- Verify member identity via email one-time passwords (OTP) when accessing the card lookup service.
4. Sharing Personal Information
We share Personal Information with service providers to help us provide our services and fulfill our contracts with you. For example, we use Shopify to power our online store.
We use Mandrill by Mailchimp (Intuit) to send transactional and marketing emails related to the Smart Saver Card program, including account activation emails, one-time verification codes, card delivery emails, and promotional offers. Mailchimp's privacy information may be found on Mailchimp's website.
Shopify's privacy information may be found on Shopify's website. We may also share Personal Information to comply with laws and regulations, respond to lawful requests, or protect our rights.
5. Cookies and Similar Technologies
We use cookies and similar technologies to operate the Site, remember preferences, provide functionality, analyze performance, and support marketing. Cookies may be "session" cookies (expire when you close your browser) or "persistent" cookies (remain until deleted or expired).
A. Managing Cookies
You can control cookies through your browser settings. Please note that blocking or deleting cookies may impact functionality and parts of the Site may not work properly.
B. Shopify Cookies
Our Site uses Shopify cookies necessary for store functionality and analytics, including cookies for cart, checkout, session security, privacy preferences, and performance measurement.
C. Do Not Track
Because there is no consistent industry standard for responding to "Do Not Track" signals, we do not alter our data collection practices when we detect such a signal.
6. Lawful Bases for Processing (EEA/UK – GDPR)
If you are located in the European Economic Area (EEA) or the United Kingdom, we process Personal Information under the following lawful bases, as applicable:
- Your consent;
- Performance of a contract with you;
- Compliance with legal obligations;
- Legitimate interests (such as improving services, preventing fraud, and securing our systems), where such interests do not override your rights.
7. Data Retention
When you place an order through the Site, we retain your Personal Information for our records unless and until you ask us to delete it, subject to legal, tax, accounting, and operational requirements.
For the Smart Saver Card program, we apply the following retention periods:
- Smart Saver Card membership data (name, email, store, birth date, barcode): Retained while your membership is active, plus 2 years after account deactivation or deletion request, to comply with legal, tax, and operational obligations.
- OTP verification data (one-time codes, attempt logs): Deleted immediately after successful verification or code expiration (2 minutes), whichever occurs first.
- Transactional email logs (delivery records for activation, OTP, and card emails): Retained for up to 1 year for troubleshooting and compliance purposes.
- Marketing email preferences (opt-in/opt-out status): Retained until you change your preference or request deletion.
8. Notice of Financial Incentive (California)
The Smart Saver Card loyalty program may be considered a "financial incentive" under the California Consumer Privacy Act (CCPA/CPRA) because we collect Personal Information from members in exchange for providing discounts and promotional benefits.
- Description: Members receive exclusive discounts, promotional offers (such as the Miracle Splash promotion), and access to member-only pricing at all Tokyo Central and Marukai locations.
- Personal Information collected: As described in Section 2D above.
- How to opt in: By registering for a Smart Saver Card at smartsavercard.tokyocentral.com or at any Tokyo Central or Marukai store.
- How to opt out / withdraw: You may withdraw from the program at any time by contacting us at info@marukai.com to request account deactivation. Withdrawal will not result in any penalty or loss of access to non-program products and services.
- Good-faith estimate of value: The value of the Personal Information we collect through the program is reasonably related to the value of the discounts and benefits provided to members, based on the expense of operating the program and the revenue generated through member engagement.
9. Email Communications
A. Transactional Emails
We send transactional emails that are necessary to operate your account and provide requested services. These include account activation emails, one-time verification codes (OTP), digital card delivery emails, and account status notifications. Transactional emails are service communications and are not subject to marketing opt-out preferences.
B. Marketing Emails
We may send promotional emails about exclusive offers, events, and savings opportunities to active Smart Saver Card members. Marketing emails are sent in compliance with the CAN-SPAM Act and applicable laws.
- You may opt out of marketing emails at any time by clicking the "Unsubscribe" link included in every marketing email, or by contacting us at info@marukai.com.
- We will process opt-out requests within 10 business days.
- Opting out of marketing emails will not affect your receipt of transactional emails or your membership benefits.
10. Your Privacy Rights
A. EEA/UK Rights (GDPR)
If you are a resident of the EEA or UK, you may have the right to access, correct, update, erase, or port your Personal Information, and to object to or restrict certain processing. To exercise these rights, contact us using the information in Section 1.
Your Personal Information may be processed outside of your country, including in the United States and Canada, for storage and processing.
B. California Rights (CCPA/CPRA Notice)
If you are a California resident, you may have the following rights (subject to verification and legal exceptions):
- Right to Know/Access: Request the categories and specific pieces of Personal Information we collected, used, disclosed, and shared.
- Right to Delete: Request deletion of Personal Information we collected from you.
- Right to Correct: Request correction of inaccurate Personal Information.
- Right to Opt Out of Sale/Sharing: Opt out of the "sale" or "sharing" of Personal Information for cross-context behavioral advertising (as those terms are defined by California law), if applicable.
- Right to Limit Use of Sensitive Personal Information: Request that we limit our use of sensitive Personal Information (such as birth date) to purposes necessary to provide the services you request.
- Right to Non-Discrimination: You will not receive discriminatory treatment for exercising your rights.
C. How to Submit a Privacy Request
To submit a request, email us at info@marukai.com. We may need to verify your identity before responding. You may designate an authorized agent to submit a request on your behalf; we may require proof of authorization.
11. Sale/Sharing of Personal Information (California)
We may disclose information to service providers and partners to operate our business and provide the Site. California law defines "sale" broadly, and "sharing" may include disclosures for cross-context behavioral advertising.
If you would like to opt out of the sale or sharing of your personal information, please contact us at info@marukai.com. We do not knowingly sell or share the Personal Information of minors under 16 without affirmative authorization.
12. Children's Privacy
The Site is not intended for children under 13, and we do not knowingly collect Personal Information from children under 13. If you believe a child has provided Personal Information, please contact us so we can delete it.
13. Security
We maintain reasonable administrative, technical, and physical safeguards designed to protect Personal Information. However, no method of transmission or storage is completely secure. For the Smart Saver Card program, we use email-based one-time password (OTP) verification to protect member accounts from unauthorized access.
14. Changes to This Privacy Policy
We may update this Privacy Policy periodically for operational, legal, or regulatory reasons. We will post the updated policy on this page and revise the "Last Updated" date above.
15. Complaints
If you have a complaint, please contact us using the details in Section 1. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.
16. Accessibility
Tokyo Central is committed to providing a website accessible to the widest possible audience. If you experience difficulty accessing any part of the Site, please contact us at info@marukai.com so we can assist you.