Privacy

1. Information We Collect

We collect personal information in three ways:

Information you give us.

• Identity and contact details such as name, email address, phone number, and billing and shipping addresses.
• Order and transaction details, including the products you buy, order history, and payment confirmation status.
• Account information if you create an account, including login credentials and saved preferences.
• Vehicle and fitment information you share to help us recommend parts (year, trim, modifications, intended use).
• Messages, reviews, support requests, and anything else you choose to send us.

Information collected automatically.

• Device and browser data such as IP address, device type, operating system, and browser version.
• Usage data such as pages viewed, links clicked, referring site, and time spent on the site.
• Cookie and pixel data used to keep your cart working, measure performance, and support marketing.

Information from third parties.

• Our e-commerce platform (Shopify), payment processors, shipping carriers, fraud-prevention services, and advertising and analytics partners.

2. How We Use Your Information

We use personal information to:

• Process, fulfill, and ship your orders and provide order updates;
• Provide customer support and answer fitment, availability, and order questions;
• Operate, maintain, secure, and improve the storefront and your experience;
• Detect, prevent, and investigate fraud, abuse, and security incidents;
• Send transactional messages such as receipts, shipping notices, and return updates;
• Send marketing communications when you have opted in, and measure how they perform;
• Comply with legal obligations and enforce our Terms and Conditions.

3. Cookies and Tracking Technologies

We use cookies, pixels, tags, and similar technologies to keep carts and sessions working, remember preferences, understand site performance, and measure advertising. Some are necessary for the site to function; others are analytics or marketing cookies. You can control or block cookies through your browser settings, though blocking some may limit parts of the site. Where required, we honor recognized opt-out preference signals such as Global Privacy Control (GPC).

4. How We Share Your Information

We do not sell your personal information for money. We share information only as needed to run the business:

• Service providers: Shopify (hosting and checkout), payment processors, shipping and freight carriers, distributors and manufacturers fulfilling your order, email and SMS providers, analytics, and fraud-prevention vendors.
• Advertising and analytics partners: to measure and improve marketing. Depending on your jurisdiction, some of this activity may be considered "sharing" or a "sale" under privacy law; see Section 7.
• Legal and safety: to comply with law, respond to lawful requests, enforce our terms, or protect the rights, property, and safety of JoyMachine, our customers, or others.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction.

We do not share mobile phone numbers collected for SMS with third parties or affiliates for their own marketing or promotional purposes.

5. Payment Processing and Security

Payments are processed by PCI-DSS-compliant payment providers through our platform, Shopify. Card data is transmitted using encryption (such as TLS/SSL) and handled by the processor; JoyMachine does not store full payment card numbers. We use reasonable administrative, technical, and physical safeguards to protect personal information, but no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Marketing and Text Messages

If you opt in, we may send marketing emails and, where you provide express consent, SMS/text messages about products, releases, and promotions. Message and data rates may apply, and message frequency varies. You can unsubscribe from emails using the link in any message, and from SMS by replying STOP (reply HELP for help). Opting out of marketing does not stop transactional messages related to your orders.

7. Your Privacy Rights and Choices

Depending on where you live, you may have the right to:

• Access or receive a copy of the personal information we hold about you;
• Correct inaccurate personal information;
• Delete personal information, subject to legal exceptions;
• Opt out of targeted advertising and of the "sale" or "sharing" of personal information;
• Limit the use of sensitive personal information, where applicable;
• Withdraw consent and manage your communication preferences;
• Be free from discrimination for exercising your rights.

To make a request, contact us through our Contact page. We will verify your request and respond within the time required by applicable law. You may use an authorized agent to submit a request on your behalf where the law allows.

8. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, gives you specific rights regarding your personal information. In the past 12 months we may have collected the categories of personal information described in Section 1, including identifiers, customer records, commercial information (purchases), internet/network activity, geolocation inferred from IP, and inferences. We collect this information for the business purposes described in Section 2 and disclose it to the categories of recipients described in Section 4.

California residents have the right to know, access, correct, and delete personal information, and to opt out of the sale or sharing of personal information and of targeted advertising. We do not sell personal information for monetary value; however, certain advertising/analytics cookie activity may qualify as "sharing" or a "sale" under California law. To opt out, adjust your cookie settings, enable a Global Privacy Control signal, or submit a request via our Contact page. We will not discriminate against you for exercising these rights.

9. Data Retention

We keep personal information for as long as needed to provide the services, maintain your account, fulfill the purposes described in this policy, resolve disputes, and meet legal, tax, accounting, and recordkeeping obligations. When information is no longer needed, we delete or de-identify it.

10. Children's Privacy

The site is intended for adults and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

11. Third-Party Links

The site may link to third-party websites, manufacturers, or services that we do not control. Their privacy practices are governed by their own policies, and we are not responsible for their content or practices. Review their policies before providing information.

12. International Visitors

JoyMachine operates in the United States. If you access the site from outside the U.S., your information will be processed in the United States, where data-protection laws may differ from those in your country. By using the site, you consent to that transfer and processing.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes are effective when posted, and the "Last updated" date above reflects the most recent revision. Material changes may be communicated through the site or by email where appropriate.

14. Contact Us

Questions about this policy or your personal information? Reach us through our Contact page and we will follow up.