Privacy Policy

Last Updated: May 2026

1. INTRODUCTION
SHOWA Group (‘SHOWA’, ‘we’, ‘us’, or ‘our’) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information across our global operations, specifically for residents in the EMEA (Europe, Middle East, and Africa) and Americas regions (Canada, USA & Latin America).
This policy is designed to comply with the General Data Protection Regulation (GDPR), the UK Data Protection Act (as amended by the Data (Use and Access) Act 2025), and U.S. comprehensive state privacy laws (including CCPA/CPRA, VCDPA, CPA, and others taking effect in 2026).

2. INFORMATION WE COLLECT
We collect information that identifies, relates to, or could reasonably be linked to you (‘Personal Data’).

• Identifiers: Name, alias, postal address, unique personal identifier, IP address, email address, or account name.
• Commercial Information: Records of products purchased, obtained, or considered.
• Internet/Network Activity: Browsing history, search history, and information regarding your interaction with our website or advertisements.
• Professional/Employment Data: Job title and employer (for B2B interactions).
• Sensitive Data: In 2026, we specifically identify and process sensitive categories (like precise geolocation or login credentials) only with explicit consent where required by law.

3. HOW WE USE YOUR INFORMATION
We process your data based on several legal grounds:

• Contractual Necessity: To fulfill orders and provide services.
• Legitimate interest: To improve our products, maintain website security, and conduct B2B marketing. Where we rely on our legitimate interests, we conduct a balancing test to ensure our interests do not override your fundamental privacy rights and freedoms.
• Legal Obligation: To comply with tax, safety, and regulatory requirements.
• Consent: For specific marketing activities or the processing of sensitive data.

4. REGIONAL DISCLOSURES & COMPLIANCE

A. EMEA Region (GDPR / UK GDPR / DUAA 2025)

• • Data Controller: SHOWA International (Europe), Strawinskylaan 1817, WTC – Tower 2, 1077 XX Amsterdam, The Netherlands.
  • Data Subject Rights: You have the right to access, rectify, erase (‘right to be forgotten’), restrict processing, and data portability.
  • Automated Decision-Making: Per the 2025 UK Data Act, if we use automated systems for significant decisions, you have the right to request human intervention and contest the decision.
• International Transfers: Data transferred outside the EEA/UK is protected by Standard Contractual Clauses (SCCs) or International Data Transfer Agreements (IDTA).

B. Americas Region (CCPA / CPRA & State Laws)

• Right to Opt-Out: You have the right to opt-out of the ‘sale’ or ‘sharing’ of your personal information for cross-context behavioral advertising.
• Global Privacy Control (GPC): Our website recognizes and honors GPC signals sent by your browser as a valid request to opt-out of tracking.
• No Discrimination: We will not discriminate against you for exercising your privacy rights.
• Sensitive Data: We do not ‘sell’ sensitive personal information. Residents of states like Oregon and New Jersey have specific rights regarding the processing of precise geolocation.

5. DATA RETENTION & SECURITY
We retain personal data only as long as necessary for the purposes described in this Policy or as required by law:

• Financial and tax records: up to 7 years
• Customer and commercial data: duration of relationship + 3 years
• Website analytics data: up to 12 months
• Marketing data: until consent is withdrawn or inactivity threshold is reached

We apply appropriate technical and organizational security measures, including encryption, access controls, and monitoring systems.

6. SHARING YOUR INFORMATION
We do not sell your personal data. We may share information with:

• Service Providers: Who perform tasks on our behalf (e.g., shipping, payment processing).
• Legal Authorities: When required by law or to protect SHOWA’s legal rights.
• Business Transfers: In the event of a merger, sale, or asset transfer.

7. CONTACT, EMEA & Americas
If you wish to exercise your rights, such as a Data Subject Access Request (DSAR), or have questions regarding our privacy practices, please contact us:

• Email: info@showagroup.eu
• Phone: +31 (0) 88 00 421 00
• Address: Strawinskylaan 1817, 2 Tower, (1077 XX) Amsterdam, the Netherlands

While we encourage you to contact us directly to resolve any issues, you maintain the right to lodge a complaint with a data protection authority. Our lead supervisory authority is determined by the location of our primary operations; however, you may also contact the regulatory body in your own jurisdiction regarding the exercise of your specific privacy rights.

Updates to this Policy: We may update this policy periodically. The ‘Last Updated’ date at the top indicates the latest revision.