Ambassador Program Privacy Policy
Last updated: 5 Sept 2026.
This Privacy Policy explains how Tokyo Tengu SAS processes the personal data of applicants to and participants in the Tokyo Tengu Ambassador Program (the "Program"). It complements our general website Privacy Policy, which continues to apply to your use of tokyo-tengu.com.
1. Who is responsible for your data
The data controller is:
Tokyo Tengu SAS
47 rue Vivienne, 75002 Paris, France
SIREN 106 818 487
Contact for privacy matters: contact@tokyo-tengu.com
2. What data we collect
When you apply
- Identity and contact details: name, email address, country, phone number (if provided)
- Social media handles and links to your accounts, audience size and content niche
- Any information you choose to include in your application
When you are accepted
- Shipping address and clothing size (to send you your starter pieces)
- Payment details: bank account (IBAN/BIC) or PayPal email, and where required the name of the account holder
- Tax or invoicing information where required by your local law (for example VAT number, business registration number)
- Your unique link, code and ambassador account credentials
During the Program
- Performance data generated by our affiliate platform: clicks on your link, uses of your code, attributed orders (order number, date, amount, product, customer country), commissions earned, validated and paid
- Communications between you and Tokyo Tengu (email, direct messages, dashboard messages)
- Content you publish about Tokyo Tengu and share with us, and any consent you give for its advertising use
- Technical data related to your dashboard sessions (IP address, browser, login dates)
We do not collect personal data from the customers who buy through your link beyond what is necessary to attribute the sale and calculate your commission. You do not have access to their identity.
3. Why we process your data and on what legal basis
| Purpose | Legal basis |
|---|---|
| Reviewing your application and deciding whether to accept it | Pre-contractual measures at your request |
| Running the Program: creating your account, tracking your link and code, calculating and paying commissions, sending starter pieces | Performance of the contract (the Program Terms and Conditions) |
| Communicating with you about the Program, briefs, launches and updates | Performance of the contract and our legitimate interest in running the Program |
| Keeping accounting, tax and payment records | Legal obligation (French commercial and tax law) |
| Preventing fraud and abuse of the Program (self-purchases, fake traffic, breach of the Terms) | Our legitimate interest in protecting the Program and our business |
| Featuring your content on our channels or in advertising | Performance of the contract for organic reposting; your explicit consent for paid advertising use, which you may withdraw at any time |
| Defending our rights in case of dispute | Our legitimate interest |
4. Who receives your data
Your data is shared only with service providers that we need to run the Program, acting on our instructions:
- GoAffPro (affiliate tracking platform hosting your dashboard, link, code and commission records)
- Shopify (our e-commerce platform, where attributed orders are recorded)
- Qonto and PayPal (payment of your commissions)
- Dougs (our accounting firm, for bookkeeping and tax compliance)
- Our logistics partner and carriers (for shipping your starter pieces)
- Email and messaging tools we use to communicate with you
- Advertising platforms (Meta, TikTok) only if you have consented to the advertising use of your content, and only to the extent needed for that use
Some of these providers are located outside the European Economic Area (in particular in the United States). Where that is the case, transfers are protected by the European Commission's Standard Contractual Clauses or by the provider's certification under the EU-US Data Privacy Framework.
We do not sell your personal data. We do not share it with other ambassadors. Other than the providers above, your data may be disclosed only where required by law or to protect our rights.
5. How long we keep your data
- Applications that are refused: twelve (12) months after our decision, then deleted
- Ambassador account and Program data: for the duration of your participation, then three (3) years after your account is closed (limitation period)
- Accounting records, invoices and payment records: ten (10) years, as required by French commercial law
- Payment details: for the duration of your participation and until the last commission has been paid, then deleted, except for the record of the payment itself which is kept with accounting records
- Content licensed to us and the record of your consent to its use: for the duration of the licence, then three (3) years as proof of consent
- Communications: three (3) years after the last exchange
6. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you
- have inaccurate data corrected
- have your data erased, where there is no legal reason for us to keep it
- restrict or object to certain processing, in particular processing based on our legitimate interest
- receive the data you provided to us in a portable format
- withdraw a consent you have given (for example for advertising use of your content) at any time, without affecting the lawfulness of processing carried out before withdrawal
- give instructions about what happens to your data after your death (French law)
To exercise these rights, write to contact@tokyo-tengu.com. We may ask you to confirm your identity. We will respond within one month, extendable by two months for complex requests.
If you believe your rights have not been respected, you may lodge a complaint with the French data protection authority (CNIL, www.cnil.fr) or with the supervisory authority of your country of residence.
7. Security
We take appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure: access to the affiliate platform and payment tools is restricted and password-protected, payment details are stored by our providers and not in plain text in our own files, and we only keep the data we need.
8. Changes to this policy
We may update this policy from time to time. The date at the top indicates the latest version. We will inform you of any material change by email or through your dashboard.
Tokyo Tengu SAS
47 rue Vivienne, 75002 Paris, France
contact@tokyo-tengu.com

