This is a machine translation. This English page is provided for convenience only. The Japanese original is the sole legally binding version and prevails in the event of any discrepancy between the two. View the Japanese original

COCOLA Privacy Policy

This Privacy Policy sets out how ROLLCAKE Inc. ("we", "us" or "our") handles information relating to customers ("you") who use the service we operate (the "Service"). Such information is referred to below as "Customer Information".

1. Information we collect

The principal Customer Information we collect when you use the Service is as follows.

• The email address, password and similar details you register when you create an account
• The address, name, telephone number and similar details of the purchaser and of the delivery recipient, entered when you purchase a product
• Where you contact us about the Service: the content of your enquiry, your name, address and email address, and any other information we require in order to verify your identity or to process a refund
• Your usage history of the Service, IP address and access logs
• Information about your device, operating system and browser; cookie information; and location information (GPS and similar)
• Images and other content you upload in the course of using the Service

2. Purposes of use

We use Customer Information for the following purposes.

• To deliver products, to process payment for products and other amounts, and otherwise to provide the Service
• To send notices and communications regarding the Service
• To respond to enquiries and provide support, and to carry out maintenance and address defects
• To verify identity, to authenticate users, and to maintain security
• To detect, investigate, prevent and respond to improper conduct
• To conduct, operate and administer surveys, prize draws and campaigns
• For marketing research, statistics and analysis
• To inform you about (that is, to advertise) our own or third parties' products and services by email, direct mail or other means
• To deliver advertising and to measure its effectiveness
• To assist in the development, refinement and improvement of our business (which is not limited to the Service)
• To provide features that use location information (displaying your current location, measuring distance, providing location-based services and the like)
• To exercise rights or perform obligations under applicable laws and regulations
• Any other purpose that we separately notify or publish

3. Personal-related information

We may acquire personal-related information received from business partners — such as the date and time of web page clicks, referring media information, cookies and advertising IDs — as personal data, by linking it with personal data that we hold. Such personal-related information is used for the purpose of measuring advertising effectiveness.

4. Provision of information to third parties

Except in the cases set out below, where we have obtained your consent, or where required or permitted by laws and regulations, we do not provide your personal data (meaning "personal data" as defined in Article 16, paragraph 3 of the Act on the Protection of Personal Information of Japan (the "APPI"); the same applies below) to third parties.

• In order to implement measures against the fraudulent use of credit cards, we provide your name together with your email address or telephone number, from within Customer Information, to the issuer of the credit card you use. Where the issuer of the credit card you use is located outside Japan, this information may be transferred to the country in which that issuer is located.
• We may entrust the handling of Customer Information to subcontractors. In that case, we select such subcontractors carefully and supervise them appropriately.
• We may jointly use personal data as follows.
  • Scope of the parties jointly using the data: ROLLCAKE Inc., FLOWER Inc.
  • Purpose of use by those parties: to provide services within the ROLLCAKE Inc. group and to improve those services.
  • Categories of personal data jointly used: the items listed under "1. Information we collect".
  • Name, address and representative of the party responsible for the management of the personal data: ROLLCAKE Inc., Nihon Kaikan 5F, 18-6 Sakuragaoka-cho, Shibuya-ku, Tokyo 150-0031, Japan; Representative Director Tadashi Ishida.

We may use third-party cookies and other tracking technologies for purposes such as analysing how the Service is used, preventing improper conduct and displaying appropriate advertising. Regarding the external transmission of Customer Information, please see here.

5. Protection of information

We take reasonable security control measures to protect Customer Information from loss, theft, misuse, unauthorised access, leakage, alteration and destruction. We will respond without delay to any enquiry regarding the measures we have taken for the secure management of retained personal data (meaning "retained personal data" as defined in Article 16, paragraph 4 of the APPI; the same applies below).

6. Disclosure, correction and similar requests

Where you request the disclosure, correction, addition, deletion, suspension of use or erasure of retained personal data ("Disclosure etc.") in accordance with the APPI, we will carry out such Disclosure etc. without delay, having first confirmed by the method we prescribe that the request has been made by you personally. This does not apply where we bear no obligation to carry out Disclosure etc. under the APPI or other laws and regulations. Please note in advance that a fee, of which we will give separate notice, may be charged for Disclosure etc. of retained personal data.

7. Contact

Requests for Disclosure etc., and complaints regarding the handling of retained personal data, should be sent by email to support_rollcake@rollcake.co. Please note that we may be unable to respond to enquiries made to us by any other means.

8. Handling of information obtained through Google API integration

Our use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

9. Changes

We may change this Privacy Policy from time to time as necessary. The amended Privacy Policy takes effect from the time it is published in an appropriate location within the Service. If you do not agree to the amended Privacy Policy you may not continue to use the Service, and you must therefore stop using it immediately. By actually using the Service after the amended Privacy Policy has taken effect, you are deemed to have agreed to it.

Last updated

25 May 2026