Privacy Policy

Information we collect

The current request protection design uses a salted hash for rate limiting rather than storing a raw IP address in the request record for long-term use. Technical infrastructure providers may still process network information to deliver and secure the service.

• Email address and destination country
• Product URL, item description, quantity, and optional request details
• Communication history, request ID, request status, quote, payment, and shipping information
• Hashed or pseudonymized identifiers used for spam, abuse, rate-limit, and duplicate prevention
• Cloudflare Turnstile verification result when Turnstile is enabled
• Basic analytics, browser, device, referral, and request metadata needed for operation and security

How we use information

• Receive and manage item requests
• Check products, sellers, availability, and restrictions
• Prepare quotes and communicate next steps
• Support purchase, packing, shipping, tracking, and customer questions
• Prevent spam, abuse, duplicate submissions, and security incidents
• Measure and improve the service
• Meet legal obligations and respond to disputes or lawful requests

Service providers

We use service providers where needed to run the website and request workflow. They process information under their own terms and privacy practices.

• Vercel for website hosting, functions, security, and Web Analytics
• Neon for request and operational database storage
• Resend for customer and owner email notifications
• Cloudflare Turnstile for bot and abuse checks when enabled
• Stripe for payment processing through a payment link after quote approval

Torii Parcel does not ask for card details in the item request form. Stripe handles card information on its payment page.

Sharing and international processing

We may share only the information reasonably needed with sellers, payment providers, carriers, customs-related service providers, technical vendors, or professional advisers to provide the service, protect legal rights, or comply with law.

Because customers, providers, carriers, and infrastructure can be in different countries, information may be processed outside your country. Data protection rules can differ by location.

Retention and security

We keep information for as long as reasonably needed to manage requests, transactions, support, fraud prevention, accounting, disputes, and legal obligations. Different information may have different retention periods.

We use reasonable technical and organizational safeguards, but no online service can promise absolute security. Please do not send unnecessary sensitive information in a request or email.

Analytics, cookies, and Turnstile

Vercel Analytics provides basic traffic and conversion information. The site may also use storage, cookies, or similar technical mechanisms where required by the platform, security features, or payment provider.

When Cloudflare Turnstile is enabled, Cloudflare processes technical signals to determine whether a request is likely to be human. Turnstile is used for security and abuse prevention, not to decide whether an item request is commercially acceptable.

Your choices and privacy requests

You may contact us to ask about your information or request a reasonable correction or deletion. Some information may need to be retained for transaction, security, legal, or dispute purposes.

The site may link to external sellers, marketplaces, carriers, payment pages, or authorities. Their privacy practices are separate from this policy. The service is not directed to children who cannot legally enter the relevant transaction in their location.

We may update this policy as the service or legal requirements change. The latest effective date appears at the top of this page.