Privacy policy
Last updated: July 15, 2026
The TokyoSeat website (the "Site") and the associated store are operated by MANMAFOX, a simplified joint-stock company with a share capital of €500, registered with the Paris Trade and Companies Register under number 977 737 105, whose head office is located at 9 rue des Colonnes, 75002 Paris, France (Intracommunity VAT number: FR03977737105), hereinafter "we" or "us". TokyoSeat is the trade name under which we market our products.
Within the meaning of the General Data Protection Regulation (GDPR) and the French Data Protection Act ("Informatique et Libertés"), MANMAFOX is the data controller for your personal information collected via the Site, including all associated information, content, features, products, and services (the "Services"). Our store is powered by Shopify, which enables us to provide the Services to you.
This Privacy Policy describes how we collect, use, and disclose your personal information when you access or use the Services, make a purchase or any other transaction, or communicate with us. Please read it carefully.
1. Personal Information We Collect
The term "personal information" refers to information that identifies you or can reasonably be linked to you. Depending on how you interact with the Services, we may collect:
- Contact information: first name, last name, postal address, billing address, shipping address, phone number, email address.
- Payment information: payment card details, transaction details, payment method, and payment confirmation. This data is securely processed by our payment service providers; we never have access to your full card number.
- Account information: credentials, preferences, and settings if you create an account.
- Transaction information: items viewed, added to cart, purchased, returned, or exchanged, and order history.
- Your communications with us: information submitted when you contact our customer support (contact form, email, WhatsApp), including as part of our warranty programs and customer benefit schemes.
- Device and usage information: device type, browser, IP address, unique identifiers, pages viewed, and interactions with the Services.
2. Sources of Personal Information
We collect personal information: directly from you (ordering, account creation, forms, communications); automatically via the Services (cookies and similar technologies — see the "Cookies" section below); and from our service providers (payment, shipping, analytics) acting on our behalf.
3. Purposes and Legal Bases for Processing
In accordance with the GDPR, every processing activity relies on a legal basis:
| Purpose | Legal Basis |
|---|---|
| Processing your orders, payments, deliveries, returns, and exchanges; managing your account | Performance of a contract |
| Responding to your inquiries (customer service, contact form, WhatsApp); managing warranties and customer benefits | Performance of a contract / Legitimate interest |
| Preventing fraud and securing the Services | Legitimate interest / Legal obligation |
| Complying with our accounting, tax, and legal obligations | Legal obligation |
| Sending you marketing communications (email, SMS) | Consent (withdrawable at any time) |
| Audience measurement and personalized advertising via non-essential cookies | Consent (withdrawable at any time) |
| Improving the Services and personalizing your shopping experience | Legitimate interest |
4. Cookies and Similar Technologies
The Site uses cookies and similar technologies:
- Essential cookies: necessary for the operation of the Site (shopping cart, checkout, session, security, language preferences). They cannot be disabled and do not require your consent.
- Analytics and marketing cookies: used to analyze Site traffic and present relevant advertisements to you (notably via Google services). They are only placed with your consent, expressed via the cookie banner displayed during your first visit.
You can change your choices at any time via the "Manage cookies" link available on the Site, or through your browser settings. Cookie lifespans do not exceed 13 months, and your consent choice is retained for a maximum of 6 months before being requested again.
5. How We Disclose Personal Information
We may disclose your personal information to the following categories of recipients for legitimate reasons:
- Shopify (store hosting and order processing) as well as its subcontractors. To learn more about how Shopify uses your personal information, please visit the Shopify Consumer Privacy Policy (https://privacy.shopify.com/en).
- Our service providers: payment processing, order fulfillment and transportation (carriers), cloud storage, analytics tools, and customer support (including WhatsApp, operated by Meta, if you choose to contact us via this channel).
- Our marketing and advertising partners (notably Google services), strictly within the bounds of the consents you have granted.
- Competent authorities, where required by law or to enforce our rights in the event of a dispute.
We do not sell your personal information.
6. International Transfers
Your personal information may be transferred to, stored, and processed outside your country of residence, notably in the United States via our service providers. When we transfer personal information outside the European Economic Area or the United Kingdom, we rely on recognized transfer mechanisms such as the European Commission’s Standard Contractual Clauses, unless the transfer is to a country recognized as providing an adequate level of protection.
7. Retention Periods
We retain your personal information only for as long as necessary for the purposes described above:
- Customer data (account, orders): for the duration of the commercial relationship, followed by limited archiving;
- Accounting documents and invoices: 10 years (legal obligation);
- Marketing data (marketing emails): 3 years after your last active contact, unless unsubscribed earlier;
- Cookies: 13 months maximum;
- Warranty data: for the duration of the applicable warranty.
8. Your Rights
In accordance with the GDPR, you have the following rights regarding your personal information: right of access, right to rectification, right to erasure, right to data portability, right to object to processing, right to restriction of processing, and the right to withdraw your consent at any time (without affecting the lawfulness of processing carried out prior to withdrawal). You may also define instructions regarding the disposition of your personal data after your death.
You can exercise these rights by contacting us using the contact details provided below. We may need to verify your identity before processing your request. We will respond within the timeframes stipulated by applicable law, and you will never face retaliation for exercising your rights.
Marketing communications: you can unsubscribe from our promotional emails at any time via the unsubscribe link included in each email. We may continue to send you non-promotional messages (order confirmations, delivery updates, etc.).
9. Complaints
If you believe that the processing of your personal information constitutes a violation of applicable regulations, you can contact us using the details below and/or lodge a complaint with the French Data Protection Authority, the Commission Nationale de l'Informatique et des Libertés (CNIL) — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr. If you reside in another EEA country, you may contact your local supervisory authority.
10. Minors' Data
The Services are not intended for children, and we do not knowingly collect personal information from minors. If you are the parent or guardian of a minor who has provided us with personal information, please contact us to request its deletion.
11. Security
We implement appropriate technical and organizational measures to protect your personal information. As no security measure is completely foolproof, we recommend that you do not use unsecure channels to communicate sensitive information to us.
12. Third-Party Websites
The Services may contain links to websites operated by third parties. We recommend reviewing their privacy policies; we are not responsible for their practices.
13. Changes to This Policy
We may update this Privacy Policy at any time, notably to reflect changes in our practices or for legal reasons. The revised version will be published on the Site with an updated "Last updated" date.
14. Contact
For any questions regarding this Policy or to exercise your rights:
MANMAFOX — 9 rue des Colonnes, 75002 Paris, France Email: support@tokyoseat.fr
For the purposes of applicable data protection legislation, MANMAFOX is the data controller of your personal information.