Privacy policy

Privacy Policy

At JoyLab Toys, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, share, and safeguard your information when you visit our website, make purchases, or interact with our services.

By using our website and services, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Personal Information You Provide

Contact Information: Name, email address, phone number, billing address, and shipping address
Account Information: Username, password, preferences, and account settings
Payment Information: Credit card details, payment card information, and transaction history
Purchase Information: Items viewed, added to cart, purchased, or returned
Communications: Messages, reviews, customer support inquiries, and feedback

Information Collected Automatically

Device Information: IP address, browser type, device identifiers, and operating system
Usage Information: Pages visited, time spent on pages, links clicked, and navigation patterns
Location Information: General geographic location based on IP address
Cookies and Similar Technologies: Information collected through cookies, web beacons, and similar tracking technologies

2. How We Use Your Information

Service Delivery

Process and fulfill your orders
Manage your account and preferences
Process payments and prevent fraud
Arrange shipping and handle returns or exchanges
Provide customer support and respond to inquiries

Personalization and Improvement

Personalize your shopping experience
Recommend products based on your interests
Analyze usage patterns to improve our website and services
Remember your preferences and cart items

Marketing and Communications

Send promotional emails about new products, special offers, and updates
Display targeted advertisements on our website and other platforms
Conduct market research and gather feedback

Security and Legal Compliance

Detect and prevent fraud, abuse, and security incidents
Comply with legal obligations and respond to legal requests
Enforce our terms of service and policies
Protect the rights, property, and safety of JoyLab Toys and our users

3. How We Share Your Information

Service Providers

We share information with trusted third-party service providers who help us operate our business:

Shopify: Our e-commerce platform provider that hosts our store and processes transactions
Payment Processors: To securely process your payments
Shipping Partners: To deliver your orders
Analytics Services: To understand how visitors use our website
Marketing Partners: To deliver targeted advertising and promotional content

Important Note About Shopify: Our store is powered by Shopify, which collects and processes information about your interactions with our store. Shopify acts as a data processor and controller for certain activities. To learn more, visit the Shopify Privacy Policy.

Business Transfers

If JoyLab Toys is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

Legal Requirements

We may disclose your information when required by law, such as to comply with a subpoena, court order, or legal process, or to protect our rights and safety.

With Your Consent

We may share your information with third parties when you direct us to do so or provide your consent.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our website:

Types of Cookies We Use

Essential Cookies: Necessary for the website to function properly
Performance Cookies: Help us understand how visitors interact with our website
Functionality Cookies: Remember your preferences and settings
Advertising Cookies: Deliver relevant advertisements based on your interests

You can control cookies through your browser settings. However, disabling certain cookies may affect website functionality.

5. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

Access and Portability

You can request a copy of the personal information we hold about you and request that we transfer it to another service provider.

Correction

You can request that we correct any inaccurate or incomplete personal information.

Deletion

You can request that we delete your personal information, subject to certain legal exceptions.

Opt-Out Rights

Marketing Communications: Unsubscribe from promotional emails using the link in any marketing email
Targeted Advertising: Opt out of personalized advertising through your browser settings or by contacting us
Sale or Sharing: Opt out of the sale or sharing of your personal information for targeted advertising

Global Privacy Control

We honor Global Privacy Control (GPC) signals. If you visit our website with GPC enabled, we will automatically treat this as an opt-out request for that device and browser.

EU & UK Residents

You have additional rights under GDPR, including the right to object to processing, restrict processing, and withdraw consent. You may also lodge a complaint with your local data protection authority.

6. Data Security

We implement reasonable technical, administrative, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. This includes:

Encryption of sensitive data during transmission (SSL/TLS)
Secure storage of payment information through PCI-DSS compliant payment processors
Regular security assessments and updates
Access controls and authentication requirements

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to:

Provide our services and maintain your account
Comply with legal obligations (typically 7 years for financial records)
Resolve disputes and enforce our agreements
Meet tax and accounting requirements

Once your information is no longer needed, we will securely delete or anonymize it.

8. Children's Privacy

Our services are not intended for children under the age of 13 (or the age of majority in their jurisdiction). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete it.

We do not knowingly sell or share personal information of individuals under 16 years of age.

9. International Data Transfers

Your personal information may be transferred to and processed in countries other than your country of residence, including the United States and Canada. These countries may have different data protection laws than your country.

When we transfer personal information from the European Economic Area (EEA) or United Kingdom, we use appropriate safeguards such as Standard Contractual Clauses approved by the European Commission or other legally approved mechanisms.

10. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing them with any personal information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make changes, we will update the "Last Updated" date at the top of this policy and, where required by law, notify you via email or through a notice on our website.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Region-Specific Privacy Rights

California Residents (CCPA/CPRA)

California residents have specific rights under the California Consumer Privacy Act, including:

Right to know what personal information we collect, use, disclose, and sell
Right to delete personal information
Right to opt out of the sale or sharing of personal information
Right to correct inaccurate personal information
Right to limit use of sensitive personal information
Right to non-discrimination for exercising your rights

European Economic Area & UK Residents (GDPR)

EEA and UK residents have rights under the General Data Protection Regulation, including:

Right to access your personal data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing
Right to withdraw consent
Right to lodge a complaint with a supervisory authority

Legal Basis for Processing (EEA/UK): We process your personal data based on:

Contract performance (to fulfill your orders)
Legitimate interests (to improve our services and prevent fraud)
Legal obligations (to comply with tax and accounting laws)
Your consent (for marketing communications)

Canadian Residents (PIPEDA)

Canadian residents have rights under the Personal Information Protection and Electronic Documents Act, including the right to access and correct personal information.

Other Jurisdictions

If you are located in another jurisdiction with applicable privacy laws, you may have additional rights. Please contact us to learn more.

Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or need to contact our Data Protection Officer, please reach out:

Email: contact@joylabtoys.com
Phone: +1 (801) 801-0111
Mailing Address: JoyLab Toys, [Your Physical Address]

We typically respond to privacy requests within 30 days (45 days for CCPA requests).

Complaints: If you're not satisfied with our response, you have the right to lodge a complaint with your local data protection authority. For EEA residents, you can find your authority at https://edpb.europa.eu/about-edpb/board/members_en

You May Like...

Country/region