Last updated: October 23, 2026
This policy explains what personal information YOU SHOULD, SHA. Parts ("we", "us") collects when you use parts.youshouldsha.com (the "Site"), how we use it, and your choices. We do not sell products and do not take payments, so we collect very little.
1. Who we are
The Site is operated by YOU SHOULD, SHA., based in Japan. Contact: youshouldsha@gmail.com.
For the purposes of the EU/UK GDPR, we are the "controller" of the personal information described here.
2. Information we collect
a. Information collected automatically
When you visit, our platform provider (Shopify) and our analytics collect device and usage information such as IP address, browser type, pages viewed, referring site, approximate location (country/city) and the date and time of your visit. This is done with cookies and similar technologies (see section 4).
b. Information you give us
- If you use the contact form or email us: your name, email address and message.
- If you sign up for new-listing or price-drop alerts: your email address and the alert preferences you choose.
We do not collect payment card details, shipping addresses or order information, because all purchases happen on eBay.
c. When you click an eBay link
To choose which eBay site to link to, the Site uses your approximate country, worked out from your IP address by Shopify. We do not store your precise location. Clicking a "View on eBay" link takes you to the eBay site for your country (for example, ebay.com.au or ebay.com). The link contains our affiliate tracking codes (our campaign ID and a reference to the product page you clicked). eBay and the eBay Partner Network set their own cookies so that a purchase can be credited to us. eBay may report to us aggregated information such as the number of clicks and purchases, item categories and commission amounts. eBay does not give us your name, address or payment information. What eBay collects is governed by the User Privacy Notice of the eBay site you visit (linked at the bottom of every eBay page).
3. How we use information
- To run, secure and improve the Site (for example, finding broken links or pages people cannot find).
- To send you to the eBay site for your country.
- To understand which products and categories visitors find useful.
- To reply to your messages.
- To send alerts you asked for (you can unsubscribe from any email with one click).
- To comply with law and protect our rights.
Legal bases under GDPR: our legitimate interests in running and improving the Site (security, basic analytics), your consent (non-essential cookies, email alerts), and performance of your request (replying to messages).
We do not use your information for automated decisions that have legal effects on you.
4. Cookies and tracking
| Type | Who sets it | Purpose | Needs consent (EU/UK) |
|---|---|---|---|
| Essential | Shopify | Keep the Site working and secure, remember your cookie choice | No |
| Analytics | Shopify Analytics | Count visits and see which pages are used | Yes |
| Affiliate | eBay / eBay Partner Network (on eBay's site after you click) | Credit a purchase to us | Set by eBay after you leave our Site |
Visitors from the EU, UK and other regions where it is required see a cookie banner, and non-essential cookies are only used after you accept. You can change your choice at any time with the "Cookie preferences" link in the footer, or block cookies in your browser settings.
We honor Global Privacy Control (GPC) signals as a request to opt out of non-essential tracking where the law requires it.
5. Sharing
We share information only with service providers that help us run the Site, and only as needed:
- Shopify (hosting and platform) — Shopify Privacy Policy
- eBay / eBay Partner Network (affiliate tracking, as described in 2-c)
- Shopify Email (only if you sign up for alerts)
We may also disclose information if required by law, or to protect the safety and rights of others.
We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined in California law.
6. International transfers
We are based in Japan, and our service providers may process information in Canada, the United States, Australia and other countries. Where required, transfers are protected by safeguards such as the European Commission's Standard Contractual Clauses used by our providers.
7. How long we keep it
- Contact messages: up to 2 years after our last exchange.
- Alert subscriptions: until you unsubscribe.
- Analytics data: according to the retention settings of the analytics provider (typically 14–26 months).
8. Your rights
Depending on where you live, you may have the right to:
- access the personal information we hold about you, and get a copy;
- correct it;
- delete it;
- object to or restrict certain uses, or withdraw consent at any time;
- data portability;
- opt out of the sale or sharing of personal information (we do neither) and limit use of sensitive information (we collect none);
- not be discriminated against for using these rights;
- complain to your local data protection authority (for example, the Office of the Australian Information Commissioner (OAIC), an EU supervisory authority, the UK ICO, or Japan's Personal Information Protection Commission).
To use any of these rights, email youshouldsha@gmail.com. We will reply within 30 days (45 days for California requests). We may need to confirm your identity. You may use an authorized agent.
This section also serves as our notice under Japan's Act on the Protection of Personal Information (APPI), Australia's Privacy Act 1988 (to the extent it applies), the California Consumer Privacy Act (CCPA/CPRA), and similar US state laws.
8a. Our YouTube channel and the YouTube API
We publish our own videos to our YouTube channel using the YouTube API Services. This tool only uploads and manages videos on our own channel; it does not access, collect or store any YouTube data of visitors or other users. By watching our videos on YouTube you are bound by the YouTube Terms of Service, and Google handles any data under the Google Privacy Policy. Access we granted to our own tool can be revoked at Google security settings.
9. Children
The Site is not directed at children under 16, and we do not knowingly collect their information. If you believe a child has given us information, contact us and we will delete it.
10. Changes
We may update this policy. The "Last updated" date shows the latest version. Significant changes will be shown on the Site.
11. Contact
YOU SHOULD, SHA. / YOU SHOULD, SHA. Parts
Email: youshouldsha@gmail.com
Postal address available on request.