Privacy Policy

Last Updated: August 15, 2026

Introduction and Scope

Toyoma Koi International Inc. (“Toyoma Koi,” “we,” “us,” or “our”) sells and ships live koi fish through its online store at toyomakoi.com (the “Website”). This Privacy Policy explains how we collect, use, disclose, store, and protect information when you access or use the Website. Use of the Website is also governed by our Terms of Sale for Live Koi Fish, available at toyomakoi.com.

We collect information in several ways, including:

Information you provide directly to us when creating an account, placing an order, or contacting us;
Information generated through your account activity and orders;
Information collected automatically through cookies, device technologies, and similar tools; and
Information received from service providers that help us operate the Website.

This Privacy Policy applies to information collected from visitors, account holders, and customers, including information submitted through contact forms on the Website and through Toyoma Koi’s social media channels.

This Privacy Policy does not apply to third-party websites, applications, or services that may be linked from or accessed through the Website. If you choose to provide information directly to a third party, that third party’s privacy practices will govern its collection and use of your information.

The Website is intended only for individuals who are at least eighteen (18) years of age. By using the Website, you represent that you are at least 18 years old.

Information We Collect

We collect information that you provide to us, information generated through your account activity and orders, and certain information collected automatically when you access or use the Website.

Information You Provide.

When you create an account, place an order, contact us through the Website, or submit an inquiry through our social media channels, you may provide us with the following information:

Account Information. Information used to create and maintain your customer account, such as your name, email address, password, billing address, shipping address, and telephone number.
Order Information. Information necessary to process and fulfill your order, including the koi varieties selected, quantity, special instructions, and shipping destination.
Shipping Information. Name, address, telephone number, and email address for the recipient of the shipment, which may differ from your billing information given the nature of live air cargo delivery.
Contact Form Submissions. Information you provide when you contact Toyoma Koi through the Website contact form or through social media inquiry forms, including your name, email address, telephone number, and the content of your inquiry. By submitting a contact form and providing your telephone number, you may be consenting to receive communications from Toyoma Koi as described in the Marketing and Communications section of this Privacy Policy.
DOA Claim Documentation. When you submit a Dead on Arrival claim, we collect photographs, videos, written descriptions, water temperature readings, and other documentation you provide in connection with your claim. This information is retained for recordkeeping and dispute resolution purposes.
Communications. Information you provide when you contact us, submit support requests, provide feedback, or otherwise communicate with us by email, telephone, or through the Website.
Payment and Billing Information. Information necessary to process purchases. Payment transactions are processed by Stripe, Inc. Toyoma Koi does not store complete payment card numbers on its servers. We do not collect Social Security numbers, driver’s license numbers, passport numbers, or other government-issued identification numbers as part of the ordinary operation of the Website.

Information Generated Through Your Account and Orders.

When you use the Website, we may generate or maintain the following information:

Order history and purchase records;
Shipping records and air cargo tracking information;
Account activity and login history;
Marketing communication preferences and consent records; and
DOA claim records and resolution history.

Information Collected Automatically.

When you access or use the Website, certain information may be collected automatically, including:

IP address;
Browser type and version;
Device type and operating system;
Language preferences and device settings;
Pages viewed, features used, and session activity; and
Log data, including access times, error reports, and diagnostic information.

Cookies and Similar Technologies.

The Website uses cookies and similar technologies to operate core functions including account login, shopping cart functionality, and session management. Certain cookies are necessary for the Website to function. By using the Website, you consent to the use of these cookies. For a full description of the cookies and similar technologies we use, why we use them, and how you can control them, please review our Cookie Policy at toyomakoi.com/cookies, which is incorporated into this Privacy Policy by reference.

Platform and Service Providers

Toyoma Koi uses third-party service providers to operate the Website, process orders, deliver communications, and provide security and performance services. These providers receive only the information necessary to perform services on Toyoma Koi’s behalf and are not authorized to use your information for their own independent purposes.

Specifically, Toyoma Koi uses service providers in the following categories:

E-commerce Platform. Toyoma Koi uses a third-party e-commerce platform to power the Website’s store functionality, including order processing, customer accounts, and inventory management.
Website Hosting and Security. The Website is served through a third-party content delivery and security provider that independently collects certain technical data, including IP addresses and traffic information, for the purposes of security, performance, and protection against malicious activity. Security is maintained by Cloudflare Turnstile at https://www.cloudflare.com/en-gb/turnstile-privacy-policy/.
Marketing and Communications. Toyoma Koi uses one or more third-party service providers to deliver marketing email and SMS text message communications to customers who have provided consent. These providers receive customer contact information solely for the purpose of delivering communications on Toyoma Koi’s behalf.
Payment Processing. Payment transactions are processed by Stripe, Inc. For information about how Stripe collects, uses, and protects your payment information, please review Stripe’s Privacy Policy and Terms of Service:

Stripe Privacy Policy: stripe.com/privacy

Stripe Terms of Service: stripe.com/legal/ssa

Toyoma Koi does not store complete payment card information on its servers. Stripe maintains PCI-DSS compliance for all payment transactions.

Marketing and Communications

Consent to Receive Marketing Communications.

By creating an account, completing a purchase, or submitting a contact form on the Website or through Toyoma Koi’s social media channels and providing your email address and/or telephone number, you consent to receive marketing communications from Toyoma Koi about new koi arrivals, sales, special offerings, and other updates related to Toyoma Koi’s inventory and services. Marketing communications may be sent by email and/or SMS text message. Toyoma Koi’s marketing communications are sent directly by Toyoma Koi and are not third-party marketing messages.

SMS Text Message Communications — TCPA Disclosure.

By providing your telephone number and affirmatively consenting at account creation, checkout, or through a contact form on the Website or Toyoma Koi’s social media channels, you expressly consent to receive recurring automated marketing text messages from Toyoma Koi International Inc. at the mobile number provided. Message frequency varies based on new inventory and promotional activity. Message and data rates may apply. Toyoma Koi’s SMS communications comply with the Telephone Consumer Protection Act (TCPA), 47 U.S.C. § 227, and applicable FCC regulations governing automated text message communications.

Opt-Out of SMS.

You may opt out of receiving SMS text messages from Toyoma Koi at any time by replying STOP to any marketing text message. After opting out, you will receive a single confirmation text and no further marketing texts will be sent. For assistance, reply HELP to any marketing text or contact Toyoma Koi at [email protected] or (714) 931-0125.

Opt-Out of Email.

You may opt out of receiving marketing emails from Toyoma Koi at any time by contacting us at [email protected] or [email protected]. Opting out of marketing communications will not affect your receipt of transactional communications related to your orders, account, DOA claims, or shipping updates.

Consent Records.

Toyoma Koi maintains records of marketing consent, including the date, time, method of consent, and contact information provided. These records are retained in accordance with the Data Retention section of this Privacy Policy and may be used to demonstrate compliance with applicable law.

How We Use Information

We use the information we collect for legitimate business and operational purposes, including to provide, maintain, improve, secure, and support the Service. Specifically, we may use information to:

Create, maintain, and administer customer accounts;
Process and fulfill koi orders, including arranging air cargo shipment;
Communicate shipping estimates, weather holds, and delivery updates;
Process DOA claims, refunds, store credits, and replacement shipments;
Process payments and related transactions;
Send transactional communications related to orders, accounts, and DOA claims;
Send marketing emails and SMS text messages about new koi arrivals, sales, and special offerings to customers who have provided consent, subject to their opt-out rights;
Respond to inquiries, feedback, and customer support requests submitted through the Website or social media contact forms;
Monitor, analyze, and improve the functionality and performance of the Website;
Detect, prevent, and address fraud, abuse, and security incidents;
Maintain records related to business operations, marketing consent, and legal compliance;
Enforce our agreements and protect the rights, safety, and security of Toyoma Koi, our customers, and others; and
Comply with applicable laws, regulations, legal processes, and governmental requests, including the TCPA and applicable FCC regulations.

We may also use aggregated or de-identified information for analytics, business improvement, and other lawful purposes. Aggregated or de-identified information does not identify you personally.

How We Share Information

Toyoma Koi does not sell your personal information. We may share information in the following circumstances:

Service Providers. We may share information with third-party service providers that help us operate the Website and fulfill orders, including providers of e-commerce platform services, website hosting and security, payment processing, and marketing and communications delivery. These providers are authorized to use your information only as necessary to provide services to Toyoma Koi.
Air Cargo Carriers. We share your name, shipping address, and contact information with air cargo carriers solely for the purpose of arranging and completing delivery of your order.
Payment Processing. Payment transactions are processed by Stripe, Inc. Stripe receives the information necessary to process your transaction and is subject to its own privacy policy and terms of service.
Legal Compliance and Protection. We may disclose information if we believe disclosure is necessary to comply with applicable law, regulation, legal process, court order, or governmental request, including the TCPA and applicable FCC regulations, or to protect the rights, property, safety, and security of Toyoma Koi, our customers, or others.
Business Transactions. If Toyoma Koi is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to applicable legal requirements.
With Your Direction or Consent. We may share information when you direct us to do so or otherwise consent to the sharing.
Aggregated Data. We may disclose aggregated or de-identified information that cannot reasonably be used to identify you.

Toyoma Koi does not sell, rent, or share your personal information with third parties for advertising or marketing purposes.

Privacy Rights and Requests

Depending on where you reside, you may have certain rights regarding your personal information. Privacy rights vary by jurisdiction, and not all rights apply in all locations.

Access, Review, and Correction. You may request access to the personal information associated with your account. You may also request that we review, update, correct, or supplement personal information that you believe is inaccurate, incomplete, or outdated. Certain information may also be reviewed and updated directly through your account settings at toyomakoi.com.
Deletion Requests. You may request deletion of your account and personal information. Upon receipt of a verified request, we will take reasonable steps to delete or de-identify your personal information, subject to applicable legal, accounting, fraud-prevention, recordkeeping, and other lawful obligations that may require us to retain certain information.
Marketing Opt-Out. You may opt out of marketing emails by contacting us at [email protected] or [email protected]. You may opt out of SMS text messages by replying STOP to any marketing text.

To exercise any of the rights described above, contact Toyoma Koi at:

Email: [email protected]

California Privacy Rights

California has enacted the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). To learn more about your privacy rights under California law, please visit the California Attorney General’s website at oag.ca.gov/privacy/ccpa.

Residents of Other States

If you reside in a state with its own consumer privacy law, you may have similar rights regarding your personal information. For more information about privacy rights in your state, please contact your state’s Attorney General’s office or visit its official website.

Data Security

Toyoma Koi maintains reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, disclosure, alteration, or destruction. The Website is protected through a third-party content delivery and security provider that provides SSL encryption, DDoS protection, and additional security measures. Payment transactions are processed by Stripe, which maintains PCI-DSS compliance.

While we take reasonable steps to protect personal information, no method of transmission over the Internet and no method of electronic storage is completely secure. We cannot guarantee the absolute security of information transmitted to or stored through the Website.

You are responsible for maintaining the confidentiality of your account credentials and for notifying us promptly at [email protected] of any unauthorized access to or use of your account.

Data Retention

We retain personal information for as long as reasonably necessary to operate the Website, fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, enforce our agreements, and protect our legitimate business interests. Customer order records, payment records, shipping records, DOA claim records, marketing consent records, and related business information are retained for a period of seven (7) years or for as long as required by applicable law, whichever is longer.

You may request deletion of your account and personal information by contacting us at [email protected]. Upon receipt of a verified request, we will take reasonable steps to delete or de-identify personal information within a reasonable period of time. However, we may retain certain information as required or permitted by law, including information necessary to comply with legal obligations, resolve disputes, enforce agreements, detect fraud, or preserve business and financial records.

Information that has been aggregated or de-identified so that it can no longer reasonably be associated with you may be retained and used for lawful business purposes.

Children’s Privacy

The Website is intended only for individuals who are at least eighteen (18) years of age, consistent with Toyoma Koi’s Terms of Sale for Live Koi Fish. We do not knowingly collect personal information from children under the age of 18. If we become aware that we have collected personal information from a child under 18, we will take reasonable steps to delete the information promptly. If you believe that a child has provided personal information through the Website, please contact us at [email protected].

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make changes, we will post the updated Privacy Policy on the Website and update the “Last Updated” date above. Changes will become effective when the updated Privacy Policy is posted unless otherwise stated. Your continued use of the Website following the posting of changes constitutes your acceptance of those changes.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact Toyoma Koi at:

Toyoma Koi International Inc.

Attn: Customer Service

17721 Anglin Lane, Tustin, CA 92780