Privacy Policy – Carbarn Cyprus

1. Introduction

This Privacy Policy ("Policy") outlines how Carbarn LLC, Japan ("Carbarn", "we", "us" or "our") collects, uses and protects your personal information when you use our website or our services to import vehicles from Japan to Cyprus.

By using our website or placing an order, you agree to the practices described in this Policy. Carbarn operates from Japan and does not maintain a local business entity in Cyprus. Because we offer goods and services to people located in Cyprus, this Policy is written to meet European Union data protection law.

2. What Information We Collect

2.1 Personal Information

To process your vehicle order and provide export services, we may collect:

• Full name
• Contact details (email address, telephone number, delivery address)
• Identity document details, where export or customs documentation requires them
• Purchase history and vehicle preferences
• Browsing behaviour on our platform
• Payment confirmation, processed by a secure third party

2.2 Financial Information

We support payment by international bank transfer and by credit or debit card. We do not store card numbers or bank credentials on our systems.

3. How We Use Your Information and Why We Are Allowed To

We use your personal data to:

• Process your purchase, export documentation and shipping — necessary to perform our contract with you
• Meet our obligations under Japanese export law and destination customs requirements — necessary for compliance with legal obligations
• Operate, secure and improve our website — necessary for our legitimate interest in running the service
• Send service notices and, where you have opted in, promotional updates — on the basis of your consent, which you may withdraw at any time

We do not sell your personal information.

4. Who We Share Your Information With

• Shipping lines and logistics partners — to book and move the vehicle
• Customs agents acting for you in Cyprus — where you ask us to pass documentation to them
• IT and payment service providers — to operate the platform and process payment
• Japanese authorities — to comply with vehicle export regulations
• Courts and public authorities — where disclosure is required by law

5. International Transfers

Our systems and records are held in Japan. Where personal data of people in the European Union is transferred to Japan, that transfer relies on the European Commission's finding that Japan provides an adequate level of protection for personal data. Where a recipient falls outside that finding, we put an appropriate safeguard in place before transferring.

6. How Long We Keep It

Order, export and customs records are kept for as long as tax, customs and commercial record-keeping rules require. Marketing contact details are kept until you withdraw consent. Data no longer needed for either purpose is deleted.

7. Data Security

• Encryption in transit across the platform
• Restricted internal access to customer records
• Hosting on controlled servers
• No storage of sensitive payment credentials

We maintain these controls on an ongoing basis, though transmission over the internet always carries some residual risk.

8. Cookies and Tracking Technologies

We use cookies to keep the site working, remember your preferences and understand how the site is used. Non-essential cookies are set only where you allow them, and you can change your choice at any time in your browser or through the site's cookie controls.

9. Your Rights Under EU Data Protection Law

If you are in Cyprus or elsewhere in the European Union, you have the right to:

• Ask for a copy of the personal data we hold about you
• Have inaccurate data corrected
• Ask us to erase data we no longer have a basis to keep
• Ask us to restrict how we use your data while a question about it is resolved
• Receive data you gave us in a portable, machine-readable form
• Object to processing we carry out on the basis of our legitimate interests
• Withdraw consent at any time, without affecting processing carried out before you withdrew it
• Lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus, or with the supervisory authority where you live

To exercise any of these rights, contact us at {supportEmail}. We respond within the period required by law.

10. Automated Decision-Making

We do not make decisions about you by automated means that produce legal or similarly significant effects.

11. External Links

Our website may link to third-party platforms. Carbarn is not responsible for the privacy practices of those sites.

12. Children's Privacy

We do not knowingly collect data from individuals under the age of 18. If we become aware of such data, we delete it.

13. Updates to This Policy

We may revise this Policy following legal or regulatory change, platform changes, or customer feedback. The current version is the one published on this site.

14. Governing Law

This Policy is governed by the laws of Japan. This does not remove any protection available to you under the data protection law of Cyprus or of the European Union, or your right to bring a matter before your local supervisory authority.

15. Contact Us

Email: {supportEmail}

Operated by: Carbarn LLC, Japan