We are committed to safeguarding your private information online. We will only collect, store and use your personal information to be able to fulfil your orders, deal with any queries or after care issues, or for marketing. We will at all times seek to comply with the requirements of the GDPR and any applicable laws and regulations to ensure that the personal information you give us is kept appropriately secure and processed fairly and lawfully.
Placing an order and your personal information
When you register to purchase products (the “Products”) through www.joytutus.com, we ask for your name, e-mail address, postal address, and contact details. www.joytutus.com then keeps a record of this information.
If you place an order with us and elect for us to store your credit or debit card details, www.joytutus.com will keep a record of those details.
We keep a record of any e-mail correspondence you send us, so we can track any problems or concerns you've had on our Website.
How we use this personal data
All the information we collect via the Website or through correspondence (including emails) with you is used to deliver the products you have ordered, to personalise your service, and ensure that any issues you have after ordering are taken care of.
Receiving marketing emails
You may choose to sign up to www.joytutus.com and be sent details of new products, discounts, or other news we think might interest you. You can sign up for this service here. In addition to your name and email address, we also collect your date of birth so that we can send you special birthday offers.
If you have bought goods from us before, or your details were on our database before May 2018, we may also use our legitimate interests to market to you by email. We will always take care to make sure that these emails are not too frequent or wordy and that you can unsubscribe to them easily.
Sharing your personal data
We may disclose your information in order to comply with any legal obligation or in order to enforce or apply our Terms and Conditions or to protect the rights, property or security of others. If you have ordered product from us, this includes exchanging information with Shopify as the service provider who runs our Website Stripe/Worldpay in order to process your payment, UPS to deliver your goods, and PCH warehouse where our goods are stored.
We will only provide these companies with the information they need to carry out their services and they will not be permitted to use the information for other purposes. They will only be allowed to use your information in the way in which we instruct them and as permitted by the General Data Protection Regulation and other relevant legislation.
Data over the internet
The internet is a global network, so it is possible for your data to travel internationally, which will include places outside of the European Economic Area. If you visit or shop at www.joytutus.com, your data will be processed in this away.
You acknowledge that the Internet is not a 100% secure medium for communication and, accordingly, we cannot guarantee the security of any information you send to us (or we send to you) via the Internet. We are not responsible for any damages which you, or others, may suffer as a result of the loss of confidentiality of such information.
We take every precaution to protect your information. To this end all personal information stored by us is kept on a server in a secure environment.
Cookies & internet advertising
By visiting www.joytutus.com with your computer set to accept cookies, you are consenting to the way we use our cookies, both on our Website and via other ways we get in touch with you.
Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you.
Your data is stored through Shopify’s data storage, databases, and the general Shopify application. They store your data on a secure server behind a firewall.
If you choose a direct payment gateway to complete your purchase, then Shopify stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.
All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover.
PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.
For more insight, you may also want to read Shopify’s Terms of Service (https://www.shopify.com/legal/terms) or Privacy Statement (https://www.shopify.com/legal/privacy).
In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.
However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.
For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.
In particular, remember that certain providers may be located in or have facilities that are located a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.
As an example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, then your personal information used in completing that transaction may be subject to disclosure under United States legislation, including the Patriot Act.
When you click on links on our store, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.
Deleting your personal data
If you would like us to delete your details from our database, please email us at firstname.lastname@example.org.