Privacy Policy

Information We Collect

Information you provide directly:

• Name, email address, shipping and billing address, and phone number when placing an order or contacting us.
• Email address when signing up for our newsletter.
• Message content submitted through our contact form.

Information collected automatically:

• IP address, browser type, device type, and pages visited, used to secure the Site and understand general usage patterns.
• Session cookies required to maintain your shopping cart and, if applicable, your admin session. We do not use tracking or advertising cookies.

Payment information:

All payments are processed by Stripe. We never see, store, or have access to your full card number, CVV, or expiration date. Stripe's handling of your payment data is governed by Stripe's Privacy Policy.

How We Use Your Information

• To process, fulfill, and ship your orders, including sending order confirmations and tracking updates.
• To respond to customer service inquiries and contact form submissions.
• To send newsletter emails if you have opted in. You may unsubscribe at any time via the link in any email or by contacting us.
• To detect and prevent fraud and maintain the security of the Site.
• To comply with applicable laws and regulations.

Cookies

We use essential cookies only — specifically a session cookie to remember your cart contents and a short-lived cookie to authenticate admin users. These cookies are necessary for the Site to function and cannot be disabled without breaking core features.

We do not use advertising cookies, analytics tracking pixels, or any third-party cookies for behavioral profiling.

Data Sharing

We share your personal information only as necessary to operate our business:

• Stripe — payment processing.
• Shipping carriers (e.g., USPS, UPS, FedEx) — to deliver your order. Your name and shipping address are provided to the carrier selected at checkout.
• Amazon Web Services (AWS) — our website and product images are hosted on AWS infrastructure in the United States.
• Law enforcement or legal process — if required by law, court order, or to protect the rights and safety of our customers or the public.

We do not sell, rent, or trade your personal information.

Data Retention

We retain order records (including name, address, and order details) for a minimum of 7 years to comply with tax and accounting requirements. Newsletter subscriber records are kept until you unsubscribe. You may request earlier deletion of other personal data by contacting us (see “Your Rights” below); we will accommodate such requests where not prohibited by law.

Your Rights

Depending on where you live, you may have the following rights regarding your personal information:

• Access & Portability — request a copy of the personal data we hold about you.
• Correction — request that we correct inaccurate or incomplete information.
• Deletion — request that we delete your personal data, subject to legal retention requirements.
• Opt-out of marketing — unsubscribe from our newsletter at any time via the link in any email or by contacting us.
• California residents (CCPA/CPRA) — you have the right to know what personal information we collect and how it is used, the right to delete your personal information, the right to correct inaccurate personal information, and the right to opt out of the sale or sharing of personal information. We do not sell or share personal information. To submit a CCPA request, email us at hello@joyfulpantry.com.
• European / UK residents (GDPR/UK GDPR) — our legal bases for processing are: (a) contract performance (fulfilling your order), (b) legitimate interests (site security, fraud prevention), and (c) consent (newsletter). You have the right to lodge a complaint with your local supervisory authority.

To exercise any of the above rights, email us at hello@joyfulpantry.com. We will respond within 30 days.

Children's Privacy

Our Site is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.

Security

We implement reasonable technical and organizational measures to protect your personal information, including TLS encryption for data in transit and access controls on our database. No method of transmission over the Internet is 100% secure; we cannot guarantee absolute security.

Third-Party Links

Our Site may contain links to third-party websites (e.g., social media). We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last Updated” date at the top. Material changes will be communicated via a notice on the Site or by email to newsletter subscribers.

Contact Us

Questions or requests regarding this Privacy Policy: