Privacy disclosures, advertising tags, and consumer data rights.

This privacy policy and data governance disclosure took effect on 2026-11-12. It supersedes any prior data notices published by Monozukuris. The document reflects operational reality across all digital and storefront channels, including active digital advertising campaigns across major technology networks.

The sole data controller for information collected through this website (monozukuris.com) and at our physical storefront is:

We collect only the specific data items generated when visitors interact with our technical services. We do not operate customer account profiles, membership portals, password databases, or payment gateways on this website. Our online catalogue is inquiry-only; no financial card numbers or payment credentials are ever processed or stored on monozukuris.com.

Collected information is processed strictly for the following defined business objectives:

• Responding to Product Inquiries: Calculating accurate craft availability, quoting pricing (ranging between 7.98 and 100 USD for Japanese goods), verifying Albuquerque in-store inventory, and establishing 48-hour holds on fragile ceramics.
• Customer Support: Assisting shoppers via live chat regarding workshop provenance, dimensions, and craft materials.
• Infrastructure Security: Detecting abuse, identifying automated form spam, enforcing rate-limiting, and protecting our server environment.
• Commercial Advertising Attribution: Evaluating the delivery performance of paid campaigns on Google Ads, Microsoft Advertising, and Meta Ads to optimize store discovery in Albuquerque.
• Statutory Recordkeeping: Maintaining tax and business transaction archives required under the laws of New Mexico.

Under international standards including the European General Data Protection Regulation (GDPR) and relevant United States privacy frameworks, our processing relies on the following legal bases:

Monozukuris runs paid commercial advertising campaigns to direct interested visitors to our store and catalogue. We actively receive paid traffic from Google Ads, Microsoft Advertising, and Meta Ads.

When a visitor clicks our advertisement, the referring platform appends an encrypted campaign identifier to the landing URL. We process these parameters in real time:

No platform has reviewed, endorsed, or guaranteed the specific goods offered by Monozukuris. The presence of click identifiers represents advertising technology routing only.

This website strictly integrates Consent Mode v2 for all visitor traffic. By default, prior to any user action on our consent banner, the four foundational advertising and measurement parameters are held in a denied state:

• ad_storage: “denied”
• ad_user_data: “denied”
• ad_personalization: “denied”
• analytics_storage: “denied”

Only when a visitor explicitly chooses “Allow Storage” on our consent prompt are these four parameters updated to “granted”. If the visitor selects “Decline”, or closes the banner without acceptance, all four parameters remain strictly “denied”. If a visitor previously granted storage and later modifies their choice via the “Cookie Settings” control in our footer, the parameters are instantly set back to “denied”.

We do not sell, rent, or lease consumer personal information to data brokers. Data is transmitted solely to the following named technical service providers:

Monozukuris operates primarily in Albuquerque, New Mexico, United States. When visitors access our website from outside the United States, including the European Economic Area or the United Kingdom, their data is transferred to and processed on servers located in the United States.

Where cross-border transfers occur through multinational processors such as Google, Microsoft, or Meta, transfers are governed by the EU-U.S. Data Privacy Framework (DPF) certifications and Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring adequate safeguards for transferred consumer data.

We enforce strict, finite retention schedules rather than keeping records indefinitely:

We implement administrative, technical, and physical safeguards designed to secure personal data against unauthorized access, disclosure, alteration, or destruction:

• Transport Encryption: All HTTP traffic is protected by TLS 1.3 encryption with strict HSTS headers.
• Input Sanitization: Form inputs submitted to bufi746.php and topa58f.php undergo parameterized sanitization, CSRF token validation, and anti-tamper checks.
• Restricted Access: In-store records and inquiry databases are accessible solely by Satoshi Yamada via multi-factor authentication.
• Zero Local Financial Storage: No payment card information is collected or stored on our servers.

For visitors accessing our catalogue from the European Economic Area or United Kingdom, the gdpr provides you with specific enforceable rights regarding your personal information:

Under United States comprehensive state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (ccpa), and statutes in Colorado, Connecticut, Virginia, and Utah, residents possess specific data protections:

• Right to Know: The right to request disclosure of the categories and specific pieces of personal information collected, the sources of collection, and the commercial purposes for collection.
• Right to Delete: The right to request erasure of personal information collected directly from the consumer, subject to statutory business exceptions.
• Right to Correct: The right to correct inaccurate personal data maintained by our shop.
• Notice of Non-Sale and Non-Sharing: Monozukuris does not sell personal information for monetary consideration. We do not share personal information for cross-context behavioral advertising without explicit user consent via Consent Mode v2.
• Non-Discrimination: We will never deny goods, charge higher prices, or alter service quality because you exercised statutory privacy rights.

We recognize and honor the global privacy control (GPC) browser signal. If your browser or browser extension transmits the Sec-GPC header, our application interprets this automatically as a valid request to opt out of advertising cookies and measurement tags.

When a GPC signal is detected, Consent Mode v2 parameters remain strictly denied, and no advertising trackers are initialized. We do not require visitors with active GPC signals to complete additional opt-out forms or questionnaires.

Our website and artisanal goods catalogue are intended for general adult audiences, craft collectors, and retail patrons. We do not knowingly market to, solicit, or collect personal information from individuals under the age of sixteen (16).

If a parent or legal guardian discovers that a minor has submitted personal contact details via our inquiry form or chat widget, please notify us immediately at [email protected]. We will delete the associated records within 48 hours of notification.

If you believe our data practices violate applicable privacy legislation, you have the right to lodge a formal complaint with relevant regulatory supervisory authorities:

• State of New Mexico: Consumer Protection Division of the New Mexico Office of the Attorney General, 408 Galisteo Street, Santa Fe, NM 87501.
• State of California: California Privacy Protection Agency (CPPA), 915 Capitol Mall, Suite 350A, Sacramento, CA 95814.
• European Visitors: The national Data Protection Authority (DPA) in the EU Member State of your habitual residence, place of work, or location of alleged infringement.

To exercise your rights of access, correction, deletion, or portability, submit a formal Data Subject Access Request using our dedicated procedure:

Monozukuris is dedicated to ensuring digital accessibility for people with disabilities, following the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA standards and the Americans with Disabilities Act (ADA).

Our website implements standard keyboard navigation loops, high text contrast (exceeding 6.9:1 for metadata and 11.9:1 for body copy against our #E4EAE3 botanical ground), explicit ARIA form relationships, and responsive font clamping without content truncation. If you encounter an accessibility barrier or require an alternate file format, please contact Satoshi Yamada at 505-730-4007 or [email protected].

We periodically review our technical disclosures to ensure ongoing compliance with updated advertising platform rules and federal or state legislation. When material changes occur:

• The effective date at the top of this document will be updated immediately.
• A summary of material revisions will be logged in our footer governance registry.
• If revisions impact how previously collected inquiry data is handled, we will contact affected individuals at their registered email prior to implementation.

For privacy inquiries, technical questions regarding advertising signals, or to speak directly with the merchant: