Privacy

Privacy Policy

We collect only what we need to sell you fonts, deliver them and answer your messages. We do not use analytics, advertising or tracking cookies, and we never sell your data.

1. Who is responsible

YK Type, a sole proprietor based in Japan, is responsible for your personal data (the “controller”). Contact: info@yktype.com. Our full name and postal address are given without delay on request.

2. What we collect, why, and on what basis

  1. Orders. Your name, email, billing address, the licensee name, any tax ID, and what you bought. We use it to take payment, issue the licence in the licensee's name, deliver the files and send order emails. Basis: performing our contract with you.
  2. Tax and accounting records. Order records, billing address and tax ID, kept because tax law requires it. Basis: legal obligation, and our legitimate interest in meeting Japanese tax law.
  3. Licence records. Who holds which licence, so we can confirm it to you or your clients and protect our fonts. Basis: legitimate interests.
  4. Enquiries. Your name, email, company and message, to reply to you. Basis: taking steps at your request, or legitimate interests.
  5. Payment security. Stripe checks payments for fraud, and Cloudflare protects the site from attacks, which involves your IP address and browser details. Basis: legitimate interests.

We need your order details to sell you a licence; without them we cannot complete the order. We do not make decisions about you by automated means, apart from Stripe's fraud screening of payments.

3. Who handles it for us

We use these providers, under contracts that require them to protect your data:

  • Stripe and Link (United States): payments, sales tax and payment support. Link (Sold through Link, LLC) is Stripe's merchant of record for our sales, and Stripe also acts on its own account for fraud prevention and legal compliance; see Stripe's privacy policy.
  • Cloudflare (United States): website hosting, order database and file delivery.
  • Resend (United States): sending order emails and forwarding enquiries.
  • Purelymail (United States, hosted on Amazon Web Services): our email inbox, where your emails to us arrive.

We do not share your data with anyone else, except where the law requires it.

4. Data sent abroad

We are in Japan, which the EU and UK recognise as giving adequate protection. Our providers above store or handle data in the United States. Those transfers rely on each provider's data processing terms, which include the EU standard contractual clauses, and on the EU-US Data Privacy Framework and its UK extension where the provider is certified.

For customers in Japan: the United States has no comprehensive federal data protection law equivalent to Japan's; see the Personal Information Protection Commission's report on the United States. Each provider is bound by contract to measures equivalent to those of the Act on the Protection of Personal Information. We check this periodically, and on request we will tell you more about those measures and how we check them.

5. How long we keep it

  • Order and licence records: 10 years from the end of the year of purchase, the longest period tax law may require.
  • Enquiry emails: 2 years after our last exchange.
  • Download links stop working after 7 days; the record of the order stays as above.

6. How we keep it safe

Data travels over encrypted connections. Our accounts use strong passwords and two-factor authentication, and only the owner of YK Type has access. We do not store card details. We review our providers' security before using them and when things change.

7. Your rights

You may ask to see the data we hold about you, correct it, have it deleted (unless tax law requires us to keep it), restrict or object to how we use it, or receive it in a portable format. Email info@yktype.com; it costs nothing, and we reply within a month. We may ask you to confirm it is you.

If you are unhappy with how we handle your data, please tell us first. You may also complain to a data protection authority: in the EU, the one in your country; in the UK, the Information Commissioner's Office; in Japan, the Personal Information Protection Commission.

8. Storage on your device

The site keeps a few things in your browser's storage: your cart, so it is still there when you come back; your choice of currency and of light or dark theme, once you pick them; and which typeface the home page last opened on, so the next visit starts on another. None of it is sent to us or used to track you; clear your browser's site data to remove it. Stripe's checkout page and Cloudflare may set cookies needed for security.

To show prices in your currency, the site asks which country your connection comes from, as our host Cloudflare sees it. We use that only to pick the currency and do not store it.

9. Changes

We will post any changes on this page. Last updated 6 October 2026.