PRIVACY POLICY

Last Updated: July 15, 2026

Your privacy is of utmost importance to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit and purchase from our website, in strict compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679.

1. Data Controller

Under the GDPR, we are the “Data Controller” for the personal data collected through this website.

  • Website: [Your website URL, e.g., joylinest.com]

  • Email: [Your customer support email]

  • Mailing Address: [Your business mailing address]

2. What Personal Data We Collect

We only collect personal data that is necessary to provide you with our services and products. This includes:

  • Identity & Contact Data: First name, last name, email address, shipping address, billing address, and phone number (collected when you place an order, create an account, or contact us).

  • Transaction Data: Details about payments to and from you, and other details of products you have purchased from us. (Note: We do not store your credit card details; all payments are processed securely via PCI-DSS compliant third-party payment gateways).

  • Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, operating system, and platform (collected automatically when you browse our site).

  • Profile & Usage Data: Your username, purchases or orders made by you, and information on how you use our website.

  • Marketing & Communications Data: Your preferences in receiving marketing from us and your communication preferences.

3. How and Why We Use Your Personal Data

According to the GDPR, we must have a “lawful basis” to process your personal data. We use your data under the following legal grounds:

Purpose / Activity Type of Data Lawful Basis for Processing
To register you as a new customer Identity & Contact Performance of a contract with you
To process and deliver your order (including managing payments, fees, and collections) Identity, Contact, Financial, Transaction Performance of a contract with you
To manage our relationship with you (notifying you about changes to our terms or privacy policy) Identity, Contact, Profile, Marketing Performance of a contract / Necessary to comply with a legal obligation
To administer and protect our website (troubleshooting, data analysis, system maintenance) Technical, Identity, Contact Necessary for our legitimate interests (running our business, provision of administration and IT services)
To deliver relevant website content and advertisements Identity, Contact, Profile, Usage, Technical Necessary for our legitimate interests (to study how customers use our products/services, to develop them, and grow our business)
To send you newsletters and promotional materials Identity, Contact, Marketing Your Explicit Consent (You may opt-out at any time)

4. How We Share Your Personal Data

We do not sell your personal data. We only share your data with trusted third parties who assist us in operating our website and conducting our business, including:

  • Delivery & Logistics Partners: To ship and deliver the physical goods you purchase.

  • Payment Gateways: To process your transactions securely.

  • IT & System Administration Services: Providers who host our website and manage our databases.

  • Professional Advisers: Lawyers, auditors, and insurers when legally required.

All third-party service providers are required to respect the security of your personal data and to treat it in accordance with the law. They are only permitted to process your personal data for specified purposes and in accordance with our strict instructions.

5. International Data Transfers

As our services are global, your personal data may be transferred to and stored in countries outside the European Economic Area (EEA). Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

  • We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.

  • We may use specific Standard Contractual Clauses (SCCs) approved by the European Commission which give personal data the same protection it has in Europe.

6. Your Legal Rights Under the GDPR

Under the GDPR, you have the following rights regarding your personal data:

  • The Right to Access: You have the right to request copies of your personal data held by us.

  • The Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.

     

     

  • The Right to Erasure (“Right to be Forgotten”): You have the right to request that we erase your personal data, under certain conditions.

     

     

  • The Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.

     

     

  • The Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, in a structured, commonly used, and machine-readable format.

     

     

  • The Right to Object: You have the right to object to our processing of your personal data, particularly regarding direct marketing.

  • The Right to Withdraw Consent: Where the processing of your personal data is based on your consent, you have the right to withdraw that consent at any time.

If you wish to exercise any of these rights, please contact us at [Your customer support email]. We respond to all legitimate requests within one month.

7. Data Security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.

In the event of a suspected personal data breach, we will notify you and any applicable regulator where we are legally required to do so.

8. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.

9. Cookies Policy

Our website uses cookies to enhance your browsing experience, analyze site traffic, and serve personalized ads. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

10. Contact Us

If you have any questions about this Privacy Policy, or if you would like to exercise any of your data protection rights, please do not hesitate to contact us:

  • By Email: [Your customer support email]

  • By Mail: [Your business mailing address]