Privacy Policy

Last Updated: September 1, 2025

We, 2ND STREET CORPORATION (“2ND STREET”), have established the following Privacy Policy for the treatment of personal information on the 2nd Street online store("Website”) operated by us (“Privacy Policy”).

1.Person in Charge

We are in charge of the processing of your personal information on this Website.

2.Categories of Personal Information We Collect

We collect the following categories of your personal information

• (1)

  Login ID, login password, nickname, secret question and its answer;

• (2)

  Name, address, zip code, phone number, email address;

• (3)

  Information obtained by using cookies (e.g., browser identification information, browsing history on the Website); and

• (4)

  Your history of using the Website (e.g., history of purchases, searches, browsing, inquiries).

3.How We Collect Personal Information

We collect your personal information in the following ways.

4.Purposes of Processing Personal Information

We process your personal information for the following purposes.

5.How Long We Retain Personal Information

We retain your personal information for as long as it is necessary for the purposes described in section 4. above or consistent with applicable laws. We will delete or anonymize your personal information when we no longer need it in accordance with applicable laws and our established procedures.

6.Disclosure of Personal Information to Third Parties

As shown below, we may disclose certain categories of your personal information to third parties. In such cases, we will take appropriate measures, including obtaining your consent, in accordance with applicable laws.

We may also disclose your personal information to government authorities and other agencies to comply with legal obligations and demands.

7.Entrustment of Processing Personal Information

We may entrust the processing of your personal data to our group companies and other external vendors to the extent necessary to achieve the purposes as described in section 4 of this Privacy Policy. In such cases, we take appropriate measures to ensure that such entrusted vendors processing your personal information with reasonable and appropriate safeguard, including selection of proper vendors who satisfy our security standard and conclusion of agreement on the processing of personal information and we supervise the vendors.

8.Cross Border Transfer of Personal Information

We may transfer your personal information from a country where we collect your personal information to another country in the disclosure of personal information to third parties described in section 6 in this Privacy Policy. In such cases, we take appropriate measures such as obtaining consent from the relevant individual and concluding a data protection contract in accordance with applicable laws.

9.Security Measures for Personal Information

In accordance with our Personal Information Management Policy, Information Security Policy and other relevant policies, we take reasonable security measures including organizational measures and technical measures.

10.Your Rights

You have certain rights with your personal information in accordance with applicable laws such as revocation of consent, access, correction, restriction of processing, deletion, prohibition of disclosure to third parties and objection to processing. If you make such request, we will take steps to verify the request and respond to the request in reasonable time period as set out in applicable laws. If you would like to exercise any of these rights, or if you have any inquiries about your rights, please contact us as described in section 12. below.

11.Complaint

You can lodge complaints about our way of processing your personal information with data protection supervisory authorities in accordance with applicable data protection laws.

12.Inquiry

In the case of any inquiry regarding this Privacy Policy, please contact us by the following methods.

Email: [email protected]

13.Amendment to this Privacy Policy

We may modify this Privacy Policy as necessary, and any such modification will be posted on this website.

14.For Residents in Europe Economic Area Countries and United Kingdom

For residents in the European Economic Area (EEA) and the United Kingdom (UK), we provide additional information in this section in accordance with the General Data Protection Regulation (GDPR). If there is any conflict between this section and sections 1. to 12., this section prevails for residents in the EEA and the UK.

14.1.Controller

We, along with GEO HOLDINGS CORPORATION, jointly determine the purposes and means of handling personal data of customers of 2ND STREET. Regarding the handling of personal data of customers of 2ND STREET, GEO HOLDINGS CORPORATION and we (hereinafter referred to as “Our Group”) are joint controllers within the meaning of the GDPR.

14.2.Lawful Bases for Processing Personal Data

Our Group processes your personal data for the following purposes on the following lawful bases.

Where Our Group collects, uses or discloses your personal data based on your consent, you can revoke at any time your consent.

14.3.Cross-Border Transfer of Personal Data

Our Group’s disclosure of your personal data to third parties described in sections 6 of this Privacy Policy may constitute cross-border transfer of personal data to a country or region other than the EEA member countries, the UK or Japan. In such cases, Our Group relies on one of the following appropriate safeguards:

• adequate decisions made by the European Commission or the UK government;
• Standard Contractual Clauses (SCCs) adopted by the European Commission; or
• International Data Transfer Agreement (IDTA) or the International Data Transfer Addendum to the European Commission's SCCs approved by the UK Parliament.

14.4.Children’s Privacy

Our Group usually does not collect and store personal data about children who it knows reside in EEA or UK and are under 16 years of age. If Our Group discovers that it has unintentionally collected data from a child who reside in EEA or UK in a way that does not meet the requirements under the GDPR and other applicable laws, it will delete the data immediately.

14.5.Your Rights

You have the following legal rights set out in the GDPR with the processing of your personal data by Our Group.

• Revocation of consent – As described in section 14.2. above, you can revoke at any time previously given consent to Our Group’s processing of your personal data.
• Right to access - You have the rights to make an inquiry, to review and to request Our Group for copies of your personal data it holds.
• Right to rectification - You have the right to request us to correct any of your personal data Our Group holds which you believe is inaccurate. You also have the right to request Our Group to complete your personal data it holds which you believe is incomplete.
• Right to erasure - You have the right to request that Our Group erases your personal data, under certain conditions.
• Right to restrict processing - You have the right to request that Our Group restricts the processing of your personal data, under certain conditions.
• Right to object to processing - You have the right to object to Our Group’s processing of your personal data, under certain conditions.

If you would like to exercise any of these rights, or if you have any inquiries about your rights, please contact Our Group by using the following methods.

Email: [email protected]
Web form: https://www.datarep.com/data-request

14.6.Lodging Complaint with Data Protection Authority

You can lodge complaints about Our Group’s way of processing your personal data with a data protection supervisory authority that has a jurisdiction over the region where you reside. Contact information of data protection supervisory authorities is available at the following URL.

• For EEA residents: https://edpb.europa.eu/about-edpb/about-edpb/members_en
• For UK residents: https://ico.org.uk/

15.For Residents in California

We provide additional information in this section in accordance with the California Consumer Privacy Act, as amended (CCPA) and other applicable laws. We, along with GEO HOLDINGS CORPORATION, whose privacy policy is listed below, jointly determine the purposes and means of handling personal information of customers of 2ND STREET. Regarding the handling of personal information of customers of 2ND STREET, GEO HOLDINGS CORPORATION and we (hereinafter referred to as “Our Group”) are businesses within the meaning of the CCPA. The content set forth in section 15.1. through 15.5. constitutes a notice at the collection provided by Our Group pursuant to CCPA §1798.100(a), and the content set forth in section 15.6. through 15.12. below sets forth the contents of the privacy policy published by us in accordance with CCPA §1798.130(a)(5). If there is any conflict between this section and sections 1. to 13., this section prevails for residents in California.

For the privacy policy published by GEO HOLDINGS CORPORATION, please refer to the table below:

15.1.Categories of Personal Information We Collect

Our Group collects the following categories of your personal information.

15.2.Purposes of Processing Personal Information

Our Group uses the categories of personal information described in section 4. above.

15.3.Your Right to Opt-out of Sale or Sharing of Personal Information

When a business “sells” or “shares,” as defined in the CCPA, personal information of a consumer to or with a third party, the consumer has a right to opt-out of the sale or sharing. To exercise this right, please access our “Do Not Sell or Share” request page by clicking the “Do Not Sell or Share My Personal Information” link at the footer of our website.

15.4.How Long We Retain Personal Information

Our Group retains your personal information for as long as it is necessary for the purposes described in section 4. above or consistent with applicable laws. Our Group will delete or anonymize your personal information when it no longer needs it in accordance with applicable laws and our established procedures.

15.5.Sale or Sharing of Personal Information to Third Parties

As described in sections 6, Our Group discloses certain categories of your personal information to third parties to the extent necessary to achieve the purposes described in section 4. above. Such disclosure may constitute a sale or sharing with a third party within the meaning of the CCPA.

15.6.Categories of Personal Information Collected and Their Sources in the Past 12 Months

The following is the categories of the personal information we have collected in the preceding 12 months and its sources.

15.7.The Purpose of Use of the Personal Information

The purposes for which we use personal information are as described in section 4. above.

15.8.The Categories of Personal Information Sold or Shared in the Past 12 Months

The following are the details of the personal information we have sold or shared in the previous 12 months.

15.9.Children’s Privacy

We usually do not collect and store personal information about children who we know reside in California and are under 13 years of age. If we discover that we have unintentionally collected information from a child who reside in California in a way that does not meet the requirements under the CCPA and other applicable laws, we will delete the information immediately.

15.10.The Categories of Personal Information Disclosed in the Past 12 Months

The following are the list of the categories of personal information we have disclosed in the previous 12 months, the parties to whom it was disclosed, and the purposes of disclosure.

15.11.Your Rights

You have the following legal rights set out in the CCPA with the processing of your personal information by us.

• Right to know what personal information about you we collect, use, disclose, sell or share
• Right to request us to delete your personal information collected by us, with certain exceptions
• Right to request us to correct inaccurate personal information we hold about you
• Right to opt-out of the sale or sharing of your personal information by us
• Right to limit use and disclosure of sensitive personal information to the extent necessary to achieve certain purposes such as to maintain your account
• Right not to receive discriminatory treatment by us for the exercise of the privacy rights conferred by the CCPA

If you would like to exercise any of these rights, or if you have any inquiries about your rights, please contact us by using the following methods.

Email: [email protected]

If you wish to exercise your right to opt out, please click the "Do Not Sell or Share My Personal Information" link available on this website.

15.12.AUTHORIZED AGENT

When you use an authorized agent to submit a request to know, a request to delete, or a request to correct inaccurate personal information, we may require that you:

• Provide the authorized agent with written permission to do so and verify your own identity directly with us.
• Directly confirm with us that you provided the authorized agent with permission to submit the request.

We may deny a request from an agent that does not submit a proof that they have been authorized by you to act on your own behalf.