Privacy Policy

How TALES ETCHED BY JOYMADE LLC Protects Your Information

Your privacy is not just a policy – it’s a promise.

---

1. Introduction

1.1 Our Commitment

At TALES ETCHED BY JOYMADE LLC (“JOYMADE,” “we,” “us,” “our”), your privacy is a top priority. We are committed to being transparent about the information we collect, how we use it, and the choices you have to control your data.

This Privacy Policy applies to all personal information collected through:

• Our website joymade.shop (the “Site”)

• Email communications with us

• Phone calls with our customer service team

• Any other interaction where you provide personal information to JOYMADE

1.2 Scope

This policy explains:

• What information we collect

• How we collect it

• How we use it

• Who we share it with

• How we protect it

• Your rights regarding your information

By using our Site or purchasing our products, you consent to the data practices described in this Privacy Policy.

1.3 Updates To This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Post the updated policy on this page

• Update the “Last Updated” date below

• Notify you via email (if we have your address) for significant changes

Continued use of our Site after changes constitutes acceptance of the revised policy.

---

2. Information We Collect

2.1 Information You Provide Directly

When you interact with JOYMADE, you may choose to provide:

Account & Order Information:

• Full name

• Email address

• Billing address

• Shipping address(es)

• Phone number

• Payment information (credit/debit card details – processed by Stripe, not stored by us)

• Order history

Custom Design Information:

• Text you request to be etched (names, quotes, dates)

• Images or artwork you upload

• Design preferences and specifications

Communications:

• Email content when you contact customer service

• Phone call recordings (for quality and training – we will notify you if calls are recorded)

• Survey responses

• Product reviews and testimonials

Marketing Preferences:

• Your subscription status to our newsletter

• Your preferences for product categories

2.2 Information Collected Automatically

When you visit our Site, certain information is automatically collected:

Device & Browser Information:

• IP address

• Browser type and version

• Operating system

• Device type (desktop, tablet, mobile)

• Screen resolution

Usage Information:

• Pages visited

• Time spent on pages

• Products viewed

• Search terms used

• Links clicked

• Referring website (how you found us)

Cookies & Similar Technologies:
We use cookies (small text files stored on your device) to:

• Remember items in your shopping cart

• Keep you logged in (if you have an account)

• Understand how you use our Site

• Personalize your experience

• Serve relevant advertisements (see Section 7)

You can control cookies through your browser settings. However, disabling cookies may affect Site functionality (e.g., your cart may empty if cookies are disabled).

2.3 Information From Third Parties

We may receive information about you from:

• Stripe (payment confirmation – no card details shared with us)

• Shipping carriers (delivery confirmation)

• Social media platforms (if you interact with our posts – only public information)

• Fraud prevention services (to verify transactions)

---

3. How We Use Your Information

3.1 Primary Uses (Order Fulfillment)

We use your information to:

• Process and fulfill your orders

• Process payments through Stripe

• Communicate order status (confirmations, shipping updates)

• Provide customer service and respond to inquiries

• Process returns, refunds, and exchanges

• Detect and prevent fraud

Legal basis: Contract fulfillment (we need your information to sell and ship products to you)

3.2 Secondary Uses (Legitimate Business Interests)

We may use your information to:

• Improve our products and website

• Analyze shopping patterns and preferences

• Send marketing emails only if you have opted in (see Section 4)

• Conduct surveys and collect feedback

• Enforce our Terms and Conditions

• Comply with legal obligations (tax reporting, fraud investigations)

3.3 Custom Order Designs

When you submit a design for a custom product, we:

• Use your design to produce your order

• May photograph the finished product (with personal information removed) for marketing purposes

• Will not sell or share your design with third parties except as needed to produce your order

Your ownership: You retain all rights to your original designs. We claim no ownership over your intellectual property.

3.4 Aggregated & Anonymized Data

We may aggregate and anonymize data (removing all personally identifiable information) for:

• Internal analytics and reporting

• Industry benchmarking

• Public statements about our customer base (e.g., “We have customers in 30 countries”)

Aggregated data is not subject to this Privacy Policy because it cannot be traced back to you.

---

4. Marketing Communications

4.1 Opt-In Required

We only send marketing emails (promotions, new product announcements, seasonal sales) to customers who have explicitly opted in by:

• Checking the box during checkout

• Subscribing through our website footer

• Clicking a signup link in another communication

4.2 What Marketing Emails Include

Marketing emails may contain:

• New product announcements

• Discount codes and promotions

• Seasonal collections

• Customer stories and testimonials

• Surveys and feedback requests

4.3 How To Unsubscribe

You can unsubscribe at any time by:

• Clicking the “unsubscribe” link at the bottom of any marketing email

• Emailing joymade.bachwl@gmail.com with “UNSUBSCRIBE” in the subject line

• Logging into your account and updating preferences

Processing time: Unsubscribe requests are processed within 24 hours.

Transactional emails are unaffected: Even if you unsubscribe from marketing, you will still receive order confirmations, shipping updates, return authorizations, and other necessary communications related to your purchases.

4.4 SMS/Text Message Marketing

We do not currently send marketing messages via SMS/text. If we add this capability in the future, we will update this policy and obtain explicit opt-in consent.

---

5. Information Sharing

5.1 Third Parties We Share With

We never sell your personal information to third parties for their marketing purposes. However, we do share necessary information with:

5.2 Business Transfers

If JOYMADE is acquired by or merged with another company, or if we sell our assets, your personal information may be transferred to the new owner. We will notify you via email and prominent notice on our Site before any such transfer, and your information will remain subject to this Privacy Policy (or an updated version with your consent).

5.3 Legal Disclosures

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., subpoena, court order, government investigation).

5.4 With Your Consent

We may share your information for other purposes with your explicit consent.

---

6. Data Security

6.1 Security Measures

We implement industry-standard security measures to protect your personal information:

Encryption:

• TLS 1.2+ encryption for all data transmitted between your browser and our Site (look for https://)

• AES-256 encryption for stored data where feasible

Access Controls:

• Only authorized JOYMADE employees have access to personal information

• Access is role-based (e.g., customer service can see order details but not full payment info)

• Multi-factor authentication required for administrative access

Payment Security:

• We do NOT store full credit card numbers on our servers

• Stripe handles all payment processing and is PCI Level 1 certified (the highest level)

• Card information is tokenized – even if our database is breached, only useless tokens would be exposed

Regular Audits:

• Quarterly vulnerability scans

• Annual penetration testing

• Review of access logs for suspicious activity

6.2 Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including:

• Order information: 7 years (for tax and accounting purposes)

• Account information: Until you delete your account (plus 30 days for recovery)

• Marketing preferences: Until you unsubscribe

• Customer service communications: 2 years

• Site analytics: 26 months (Google Analytics default)

After retention periods expire, we securely delete or anonymize your information.

6.3 Breach Notification

In the unlikely event of a data breach that compromises your personal information, we will:

1. Investigate and contain the breach

2. Notify affected customers within 72 hours of discovery (as required by law)

3. Provide information about what data was exposed and what we are doing to address it

4. Work with law enforcement as appropriate

We have never experienced a data breach. We take this responsibility seriously.

---

7. Cookies & Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files stored on your device when you visit websites. They help websites remember your actions and preferences over time.

7.2 Types Of Cookies We Use

7.3 Third-Party Cookies

We use:

• Google Analytics – to analyze Site traffic (you can opt out using Google’s opt-out browser add-on)

• Stripe – for payment processing (essential cookies only)

• Social media pixels (Facebook, Instagram, Pinterest) – for advertising measurement (only if you consent to cookie banner)

7.4 Managing Cookies

You can control cookies through your browser settings:

To delete existing cookies: Browser settings → Privacy/Clear browsing data
To block cookies: Browser settings → Privacy → Block third-party cookies
To disable all cookies: Browser settings → Privacy → Block all cookies (not recommended – Site may break)

Cookie banner: When you first visit our Site, you will see a cookie banner allowing you to accept or decline non-essential cookies.

Do Not Track (DNT): Our Site does not currently respond to DNT signals because there is no industry standard for interpreting them.

---

8. Your Privacy Rights

Depending on where you live, you may have certain rights regarding your personal information.

8.1 Rights For All Customers (Global)

Regardless of your location, you can:

• Access your personal information – request a copy of data we hold about you

• Correct inaccurate information – update your account or email us

• Delete your information – request erasure (subject to legal retention requirements)

• Opt out of marketing communications – using unsubscribe link or email request

8.2 California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request details about the categories and specific pieces of personal information we have collected, the sources of that information, our business purpose for collecting it, and the third parties with whom we share it.

• Right to Delete: Request deletion of your personal information (with exceptions for legal compliance).

• Right to Opt-Out of Sale: We do not sell your personal information, so no opt-out needed.

• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To make a CCPA request: Email joymade.bachwl@gmail.com with “CCPA REQUEST” in the subject line. We will verify your identity before processing (may require confirming order details).

Response time: 45 days (extendable by another 45 days with notice).

8.3 European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to Access: Obtain confirmation of whether we process your data and access to that data.

• Right to Rectification: Correct inaccurate data.

• Right to Erasure (“Right to be Forgotten”): Request deletion of your data (where no legal obligation to retain).

• Right to Restrict Processing: Limit how we use your data (e.g., while we verify accuracy).

• Right to Data Portability: Receive your data in a structured, machine-readable format and transmit it to another controller.

• Right to Object: Object to processing based on legitimate interests (including direct marketing).

• Right to Withdraw Consent: Withdraw previously given consent at any time.

To exercise GDPR rights: Email joymade.bachwl@gmail.com with “GDPR REQUEST” in the subject line.

Data Protection Officer (DPO): JOYMADE does not have a formal DPO. Contact our privacy team at the email above.

International transfers: Your data is transferred to and processed in the United States. We rely on Standard Contractual Clauses (SCCs) to ensure adequate protection.

8.4 Other US State Laws

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other states with privacy laws have rights similar to CCPA and GDPR. Please email us to exercise your rights.

---

9. Children’s Privacy

Our Site and products are not intended for children under 13 years of age (or under 16 in some jurisdictions). We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe your child has provided us with personal information: Please contact us immediately at joymade.bachwl@gmail.com. We will delete the information promptly.

Exception: A child may use our Site to purchase products with parental consent and supervision, but we still do not knowingly collect data without parental awareness.

---

10. Third-Party Links

Our Site may contain links to third-party websites (e.g., social media, payment processors, shipping carriers). This Privacy Policy does not apply to those websites. We are not responsible for the privacy practices of third parties. Please read their privacy policies before providing personal information.

---

11. Changes To This Privacy Policy

We may update this Privacy Policy periodically. The “Last Updated” date at the bottom indicates when changes were made.

For material changes (e.g., new data uses, new third-party sharing), we will:

• Post a prominent notice on our homepage for 30 days

• Email active customers who have opted in to marketing (if we have your email)

Your continued use of our Site after changes constitutes acceptance. If you do not agree with the changes, you may delete your account and stop using our Site.

---

12. Contact Us About Privacy

For privacy-related questions or to exercise your rights:

📧 Email: joymade.bachwl@gmail.com
(Use subject line: “PRIVACY REQUEST” for faster routing)

📞 Phone: +84353627282
(Ask for the Privacy Team)

📬 Mail:
TALES ETCHED BY JOYMADE LLC
Attn: Privacy Team
30 N Gould St Ste R Sheridan, WY 82801
USA

Response time: We will respond to privacy requests within 30 days (or 45 days for CCPA requests).

---

13. Complaint Resolution

13.1 Internal Complaint Process

If you believe we have violated this Privacy Policy or your privacy rights:

1. Contact us at joymade.bachwl@gmail.com with details of your complaint

2. We will acknowledge receipt within 7 days

3. We will investigate and respond with findings within 30 days

13.2 External Dispute Resolution

If you are not satisfied with our response:

For California residents: You may file a complaint with the California Attorney General’s