Privacy policy

Last updated: September 8, 2025

This Privacy Policy describes how JSCO COMPANY Kft. (trading as Katana Corp) (“Katana Corp,” “we,” “us,” or “our”) collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from katana-corp.com (the “Site”), or otherwise communicate with us regarding the Site (collectively, the “Services”).

For purposes of this Privacy Policy, “you” and “your” means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we collect pursuant to this Privacy Policy.

Please read this Privacy Policy carefully. By using the Services, you acknowledge that you have read and understood this Privacy Policy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes in our practices or for operational, legal, or regulatory reasons. If we make material changes, we will update the “Last Updated” date at the top of this Policy and take additional steps if required by law.

Information We Collect

Information You Provide Directly

Contact details (name, billing/shipping address, phone number, email).
Order details (purchase history, payment confirmation, delivery info).
Account credentials (username, password, security questions).
Customer support messages or inquiries you send us.

Information Collected Automatically

When you use the Services, we automatically collect certain data, known as “Usage Data,” including:

IP address and approximate geolocation.
Browser, device, and operating system information.
Log data about your interaction with the Site (pages visited, time spent, referring site, clicks).
Cookies, pixels, and tracking technologies.

Information from Third Parties

We may obtain information about you from third parties, such as:

Shopify, our e-commerce platform.
Payment processors, who securely handle your payment data.
Marketing and advertising partners, who provide analytics or targeted advertising services.
Social media platforms you interact with via plugins or integrations.

How We Use Personal Information

We may use your personal information to:

Provide Services and Fulfill Orders – process payments, ship products, handle returns/exchanges, send order updates.
Customer Support – respond to inquiries, provide after-sales support.
Marketing & Advertising – send promotional emails or SMS, display relevant ads on our Site and third-party platforms (where legally permitted).
Fraud Prevention & Security – detect, investigate, and prevent fraudulent or illegal activity.
Compliance & Enforcement – comply with laws, respond to legal requests, enforce our Terms of Service.
Service Improvement – improve the performance, design, and functionality of our Site.

If you are an EEA resident, processing is based on Art. 6(1)(b) GDPR (performance of a contract), Art. 6(1)(c) GDPR (compliance with legal obligations), and Art. 6(1)(f) GDPR (legitimate interests such as marketing, fraud prevention, and service improvement).

Data Retention

We retain personal information only for as long as necessary:

Order and payment records: up to 10 years (Hungarian accounting and tax law).
Customer accounts: deleted 24 months after last activity.
Marketing data: up to 3 years or until consent is withdrawn.
Customer support messages: up to 3 years.
Technical logs and cookies: 12–24 months depending on type.
Once retention periods expire, data is securely deleted or anonymized.

Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve our Services. These include:

Essential Cookies – necessary for the Site to function (cart, checkout, security).
Analytics Cookies – help us understand how visitors interact with the Site (e.g., Shopify analytics, Google Analytics).
Advertising Cookies – used by us and our partners to deliver targeted advertising (e.g., Facebook Pixel, Google Ads remarketing).

Most browsers accept cookies automatically, but you can refuse or delete them in your browser settings. Blocking cookies may impact functionality.

Our website recognizes the Global Privacy Control (GPC) signal, which is treated as a valid opt-out request where legally required. We do not currently respond to other “Do Not Track” signals.

How We Disclose Personal Information

We may disclose your personal information in the following cases:

Vendors and Service Providers – e.g., payment processors, shipping carriers, cloud storage, IT support, analytics providers.
Marketing Partners – for advertising purposes (subject to applicable law and opt-out rights).
Affiliates – within our corporate group, for operational purposes.
Legal Compliance – when required by law, subpoena, or court order.
Business Transactions – in the event of a merger, acquisition, or bankruptcy.

We have, in the past 12 months, disclosed the following categories of data for business purposes:

Identifiers (name, email, phone, address).
Commercial information (purchase history, order records).
Internet activity (Usage Data).
Geolocation data (IP-based location).

We have not sold sensitive personal information.

Geolocation Use

We collect approximate geolocation data from your IP address for the following purposes:

Fraud prevention – detect mismatches between payment details and location.
Legal compliance – ensure products are not shipped to restricted jurisdictions.
Logistics – estimate shipping times and delivery options.
We do not use geolocation data for continuous tracking.

Data Security

We implement commercially reasonable measures to protect your data, including:

Transmission of sensitive data via TLS/SSL encryption.
Storage on secure servers (Shopify, AWS) with access controls.
Limiting employee access to authorized personnel only.
Regular monitoring for potential vulnerabilities.

However, no method of transmission or storage is completely secure.

International Transfers

We may transfer personal information outside your country. For EEA/UK residents, we rely on Standard Contractual Clauses or other approved safeguards.

Your Rights

Depending on your jurisdiction, you may have rights including:

Right to Access / Know – request details on data we hold about you.
Right to Delete – request deletion of your data.
Right to Correct – request correction of inaccuracies.
Right to Portability – request a copy of your data in a portable format.
Right to Opt-Out of Sale/Sharing – opt out of targeted advertising or sale of data.
Right to Restrict/Withdraw Consent – limit or revoke data processing consent.
Right to Appeal – if we deny a request, you may appeal within 30 days.

Exercising Your Rights

To exercise any of these rights:

Email us at contact@katana-corp.com with the subject line “Privacy Request”.
Provide sufficient information to verify your identity (name, email, recent order number).
We will respond within 30 days (GDPR) or 45 days (CCPA), with possible extension up to 90 days.
If denied, you may appeal by replying with “Appeal Request”.

Authorized agents may act on your behalf if they provide proof of authorization.

We will not discriminate against you for exercising your rights.

Complaints

If you have concerns about how we handle your personal data, please contact us at contact@katana-corp.com.
If unresolved, you may lodge a complaint with your local supervisory authority (e.g., NAIH in Hungary, your EU Data Protection Authority, or equivalent in your country).

Children’s Data

Our Services are not directed to individuals under 18. We do not knowingly collect data from minors. If we learn that a child has submitted personal information, we will delete it.

Special Notice: Nature of Our Products

Katana Corp sells swords and related products strictly as collectible and display items. These are not toys and must be handled responsibly. By purchasing from us, you confirm that you are at least 18 years old (or the legal age of majority in your jurisdiction).

We retain personal data collected in connection with these sales only for contract performance, legal compliance, fraud prevention, and recordkeeping purposes.

Contact Information

For privacy-related inquiries or to exercise your rights, contact:

JSCO COMPANY Kft. (trading as Katana Corp)
Company Registration Number: 01-09-420171
VAT Number: HU32361957
Registered Address: 1076 Budapest, Garay utca 45. 1. em. 120
Email: contact@katana-corp.com

Katana Corp is the data controller of your personal information unless stated otherwise.