LIZUNA Co., LTD (“Lizuna”, “we”, “us”) provides eCommerce merchants an automated fraud prevention and chargeback mitigation service (“Beacon”). This policy explains how we collect, process, and safeguard personal information.
To exercise your privacy rights or request data access/erasure, contact our privacy compliance team in Tokyo.
Contact DPOOnline merchants integrate Beacon into their Shopify checkout and order processing workflows. When consumers place orders on a merchant’s eCommerce store, transaction information is transmitted to Lizuna for fraud screening.
Under European and Japanese data protection frameworks, the merchant acts as the Data Controller (or Business), and Lizuna operates as a Data Processor (or Service Provider) acting pursuant to contractual instructions.
We collect only the categories of data necessary to perform real-time fraud detection and customer identity verification:
Customer name, email address, billing and shipping addresses, items ordered, order value, and masked payment metadata (e.g. card brand and last 4 digits). We never collect or retain complete credit card numbers.
IP address, browser type, operating system, device hardware fingerprints, user-agent strings, and mobile network identifiers.
Approximate city-level geographic location derived from IP address to verify distance consistency with shipping destination.
Phone number line-type classifications (Fixed Mobile, Landline, or Non-Fixed Virtual VOIP) and telecommunication registry validation to identify disposable burner numbers.
Lizuna processes transaction information primarily to evaluate transaction legitimacy and generate automated fraud risk scores (0–100).
Merchants may use Beacon’s recommendations to automatically hold or approve fulfillment. When automated rules trigger a hold, legitimate cardholders may be sent a Two-Way SMS or email verification code to confirm their identity without human intervention.
We share personal data only with trusted infrastructure providers and telecommunication verification registries essential to operating the Service:
We may share data with cloud infrastructure hosts (e.g. AWS), telecommunication carriers for SMS pin delivery, and payment fraud blocklist registries. All sub-processors operate under strict confidentiality and data protection agreements.
Depending on your jurisdiction, you have the right to request access to, correction of, or deletion of your personal data stored in our systems.
You may also request the restriction of processing while data accuracy is contested, or request data portability in a structured, machine-readable format. To exercise these rights, email us at support@lizuna.com.
Information may be processed in Japan, the United States, and other jurisdictions where Lizuna or its cloud service providers maintain operations.
Cross-border transfers comply with recognized legal adequacy mechanisms, including the EU-Japan Mutual Adequacy Agreement and Standard Contractual Clauses (SCCs).
We implement enterprise-grade administrative, technical, and physical safeguards designed to prevent unauthorized access, loss, or disclosure of data.
All transmissions are protected with TLS/HTTPS 256-bit encryption in transit, and data is stored in encrypted databases with strict role-based access controls.
We retain personal data only for as long as necessary to provide the fraud prevention service, resolve potential payment chargeback disputes, and fulfill statutory legal obligations.
Following the retention window, data is either securely erased or permanently anonymized.
Our website (lizuna.com) and our blog (blog.lizuna.com) use Google Analytics 4, a service of Google LLC, to understand how visitors find and use our pages and articles.
When you visit these sites, your browser sends Google the address of the page, the page you came from, details of your browser, device and screen, your approximate location derived from your IP address, and a random identifier stored in first-party cookies (_ga). Google Analytics 4 does not log or store IP addresses. We look at this information only in aggregate, to understand how our sites are used and to improve them.
You can block these cookies in your browser settings, or stop the data being sent with the Google Analytics Opt-out Browser Add-on (tools.google.com/dlpage/gaoptout). Google explains how it uses this data at policies.google.com/technologies/partner-sites.
When you send a message through the contact form, request a demo, or apply through the partner form on lizuna.com or blog.lizuna.com, we collect the details you enter: your name, email address, company or store, website, the type of inquiry or partnership, and your message. We use them only to reply to you and to handle your inquiry, demo request or application.
Your submission is sent through Amazon Web Services (Amazon API Gateway, AWS Lambda and Amazon Simple Email Service, in the United States) and delivered by email to our support inbox, which is hosted by Google Workspace. It is not stored anywhere else. We keep the email for as long as we need it to deal with your inquiry and any follow-up.
To protect the forms from spam, they use Cloudflare Turnstile, a service of Cloudflare, Inc. (United States). Its script loads from Cloudflare when a form is shown, so Cloudflare receives your IP address and browser details. When you submit the form, Turnstile checks signals from your browser and device to confirm that a person is sending it. Cloudflare explains how it handles this data at cloudflare.com/turnstile-privacy-policy.
Beacon is designed exclusively for commercial eCommerce fraud detection and is not directed to individuals under 13 years of age. We do not knowingly collect personal data from children.
If you have questions, comments, or data subject requests regarding this Privacy Policy, please contact our Data Protection Officer by email at support@lizuna.com, or by mail at:
LIZUNA Co., LTD 101-0054, Tokyo, Chiyoda-Ku, Kanda Nishikicho, 3-3-15 Tensho Office Otemachi Takebashi, Room 399 Japan
