Privacy policy

Joypots Privacy & Cookie Policy

Last updated: 2 November 2026

Welcome to Joypots! We love sharing a little joy, and looking after your personal information is something we take seriously.

Whether you're browsing our website, treating yourself, sending a gift or signing up to hear from us, we want you to understand what information we collect, why we need it and how we look after it.

This Privacy & Cookie Policy explains how Joypots Limited collects, uses, shares, stores and protects your personal information, including how we use cookies and similar technologies.

Our online store is powered by Shopify, which provides the ecommerce technology behind your shopping experience.

If you have any questions, you can contact us at joy@joypots.com.

1. Who We Are

This website is operated by Joypots Limited, a company registered in England and Wales under company number 10166594.

Registered office:

Unit A Grangewood House
Oakwood Hill Industrial Estate
Oakwood Hill
Loughton
Essex
IG10 3TZ

Telephone: 0203 935 7350
Email: joy@joypots.com

For the purposes of UK data protection law, Joypots Limited is the data controller for the personal information we collect and use in connection with our business, except where another organisation acts as an independent controller for its own processing activities.

2. The Personal Information We Collect

The information we collect depends on how you interact with Joypots.

When you browse our website

We may collect:

  • Your IP address and approximate location derived from it.

  • Your browser, device and operating system.

  • Pages and products you view.

  • How you navigate and interact with our website.

  • Products added to your shopping basket.

  • Information collected through cookies, pixels and similar technologies, subject to applicable consent requirements.

When you place an order

We collect the information needed to process and fulfil your purchase, including:

  • Your name, email address and telephone number.

  • Billing and delivery addresses.

  • Products purchased and order details.

  • Payment method, transaction status and payment confirmation.

  • Any gift message you choose to include.

Payments are processed securely through the payment providers available at checkout. Those providers may process your payment details in accordance with their own privacy notices.

Joypots does not need access to your full payment card details to fulfil your order.

When you create a customer account

We may collect:

  • Your name and contact details.

  • Account login and authentication information.

  • Saved delivery addresses.

  • Order history.

  • Account preferences and settings.

When you contact us

We may retain your enquiry and our correspondence to provide customer support and resolve any issues.

When you sign up for marketing

We may collect:

  • Your name and email address.

  • Subscription preferences.

  • Records of marketing consent or other applicable permissions.

  • Information about interactions with our emails, where permitted.

  • Relevant shopping and browsing activity used for marketing personalisation, where permitted.

3. Gift Orders and Recipient Information

Sending a little joy to someone else? We love that.

When you purchase a Joypots gift for another person, you may provide their name, delivery address, telephone number and a personal gift message.

We use this information to prepare and deliver your gift and resolve delivery queries.

We may share the necessary delivery details with our courier or delivery provider.

We don't use gift recipients' contact details for direct marketing simply because they've received a Joypots gift, unless we have a separate lawful basis to do so.

Gift recipient information and gift messages may form part of our order records. We retain this information only for as long as necessary for fulfilment, customer service, legal obligations and other legitimate purposes, taking account of the capabilities of the systems we use.

If you're providing someone else's personal information, please make sure you have a reasonable basis for sharing it with us.

4. Where We Get Personal Information

We may collect personal information:

  • Directly from you, when you place an order, create an account, subscribe to marketing or contact us.

  • Automatically, when you browse our website or interact with cookies and tracking technologies.

  • From Shopify and our service providers, when they support transactions, website functionality or other services.

  • From advertising and analytics partners, where relevant and permitted by law.

  • From another customer, where someone purchases a gift for you.

5. How We Use Your Personal Information

We use personal information to:

  • Process and deliver orders: Take payment, prepare purchases, arrange delivery and manage cancellations, returns and refunds.

  • Manage customer accounts: Provide account access, order history and saved preferences.

  • Provide customer service: Respond to enquiries, complaints and delivery issues.

  • Improve our website: Understand website performance, identify technical issues and improve the shopping experience, subject to applicable consent requirements.

  • Market Joypots: Send relevant communications, measure campaigns and personalise advertising where permitted.

  • Protect our business: Prevent fraud, maintain security and investigate misuse.

  • Meet legal obligations: Maintain required records and comply with applicable laws.

6. Our Legal Bases for Using Your Information

Under UK data protection law, we must have a lawful reason for using your personal information.

Depending on the activity, we may rely on:

Contract

Where processing is necessary to fulfil an order or provide a service you've requested.

Legal obligation

Where we're required to process or retain information to comply with the law.

Legitimate interests

Where necessary to operate, protect and improve our business, respond to enquiries or prevent fraud, provided those interests aren't overridden by your rights and freedoms.

Consent

Where required for marketing communications, non-essential cookies and certain advertising or tracking technologies.

Where we rely on consent, you can withdraw it at any time.

Our use of cookies and electronic marketing also follows the applicable UK Privacy and Electronic Communications Regulations.

7. Email Marketing and Communications

From time to time, we'd love to share a little Joypots news with you, including new products, seasonal favourites, gift ideas and special offers.

We use Shopify's marketing functionality and may use connected email marketing services to manage these communications.

We'll send marketing emails only where we're permitted to do so under applicable law. This may include where you've given consent or where an existing-customer marketing exception applies.

Where we rely on the existing-customer exception, we'll provide an appropriate opportunity to opt out when collecting your details and in subsequent marketing messages.

You can unsubscribe at any time using the link in our marketing emails or by contacting joy@joypots.com.

Unsubscribing won't prevent us from sending essential service-related communications about your orders or account.

We may send abandoned checkout reminders where permitted by law and in accordance with applicable marketing permissions and preferences.

We may retain limited records of consent, subscriptions and unsubscribes where necessary to demonstrate compliance and respect your choices.

8. Cookies, Analytics and Advertising

We love cookies at Joypots. Although the ones we're talking about here are a little less delicious!

Our website uses cookies and similar technologies to make shopping easier, keep things running smoothly and, with your permission, help us understand how people use our website and show more relevant advertising.

8.1 What are cookies?

Cookies are small text files placed on your device when you visit a website.

They help websites remember information, such as what's in your shopping basket, whether you're signed in and certain preferences you've selected.

We also use similar technologies, including tracking pixels and tags, which can help us understand website activity and measure advertising effectiveness.

Cookies may be placed by Joypots or by third-party services used on our website.

Some are temporary and are removed when your browsing session ends. Others remain for a defined period or until you delete them.

8.2 Essential cookies

These cookies are necessary for our website to function properly and provide services you've requested.

They may help us:

  • Keep products in your shopping basket.

  • Process orders and support secure checkout.

  • Allow you to sign in to your customer account.

  • Protect our website and prevent fraudulent activity.

  • Remember your cookie preferences.

Essential cookies don't require consent where they're strictly necessary for the relevant purpose or service.

8.3 Analytics cookies

Where required, we ask for your consent before using analytics cookies and similar technologies.

We use or may use analytics services, including Google Analytics and Shopify's analytics functionality, to understand how visitors use our website.

This can help us see which pages and products are popular, understand how customers navigate our shop and identify where we can improve the shopping experience.

8.4 Advertising and marketing cookies

With your consent, where required, we use or may use advertising and marketing technologies, including Meta Pixel and Google advertising services.

These can help us:

  • Understand how customers interact with our advertising.

  • Measure the effectiveness of marketing campaigns.

  • Understand whether an advertisement leads to a website visit or purchase.

  • Show more relevant Joypots advertising on other websites and platforms.

  • Create advertising audiences, where permitted.

These technologies may collect information about your device, browsing activity and interactions with our website.

The technologies used may change as we develop our marketing activities.

8.5 Preference and personalisation cookies

Some cookies help remember your preferences and tailor your shopping experience.

Where these cookies aren't strictly necessary, we'll obtain the consent required by law before using them.

8.6 Cookies used by our partners

Our website is powered by Shopify.

We also use or may use services provided by Google and Meta to understand website performance and manage our advertising.

Depending on the services enabled and your cookie preferences, these providers may collect and process information about your interactions with our website.

Some providers may process information for their own purposes in accordance with their privacy policies.

You can learn more about their use of cookies here:

8.7 Managing your cookie preferences

You're in control of your cookie choices.

When you visit our website, our cookie banner allows you to accept or reject non-essential cookies.

Where additional preference controls are available, you can use them to manage your choices.

We only use non-essential cookies and similar tracking technologies where we've obtained the consent required by UK law.

You can withdraw or change your consent using the cookie preferences controls made available on our website.

You can also manage or delete cookies through your browser settings.

Please bear in mind that disabling essential cookies may affect how certain parts of our website work, including shopping baskets, customer accounts and checkout.

Changing your preferences won't affect the lawfulness of processing carried out before you withdrew consent.

8.8 How long cookies last

Different cookies remain on your device for different lengths of time.

Session cookies are temporary and are generally removed when you close your browser.

Persistent cookies remain on your device for a defined period or until you delete them.

The duration depends on the cookie, its purpose and the technology provider.

The cookies and tracking technologies used by our website may change when we update Shopify, install or remove integrations, or adjust our analytics and advertising settings.

For information about particular third-party cookies, including their purposes and typical durations, please refer to the provider information linked in Section 8.6.

We review our use of cookies and tracking technologies as part of maintaining our website and privacy practices.

9. Who We Share Personal Information With

We don't sell customer contact lists to third parties for their own unrelated marketing purposes.

However, we may share personal information with trusted organisations where necessary to operate our website and provide our services.

These may include:

Shopify

Our ecommerce platform provider, which supports our online store, customer accounts, checkout and transactions.

Payment providers

To process payments, manage refunds and help prevent fraud.

Delivery providers

To deliver your orders and provide tracking or delivery updates.

Technology and service providers

To provide technical support, email communications, analytics, security and other business systems.

Advertising and analytics partners

Including Google and Meta, where permitted by law and your applicable privacy choices.

Professional advisers and authorities

Where necessary to comply with legal obligations, obtain advice or protect our rights.

We may also share information in connection with a business sale or restructuring, where permitted by law.

Where third parties process information on our behalf, we take appropriate steps to ensure suitable contractual and data protection safeguards are in place.

Some third parties may act as independent data controllers for particular activities.

10. Our Relationship with Shopify

Our online store is powered by Shopify.

Shopify provides the technology that enables customers to browse our website, create accounts, place orders and make payments.

As part of providing these services, Shopify collects and processes personal information about interactions with our store.

This may include device information, browsing activity, transactions and use of Shopify-powered features.

Shopify may also process certain information for its own purposes, including security, fraud prevention and improving its services.

Depending on the Shopify features enabled, certain services may use information about interactions with our store and other Shopify-powered stores to provide enhanced functionality and personalised experiences.

Where Shopify acts as an independent controller for these activities, it is responsible for that processing and for responding to applicable privacy rights requests relating to it.

You can learn more through:

Your purchases are made directly with Joypots Limited, and we're responsible for fulfilling your orders and handling customer service.

11. Customer Accounts and Security

If you create a Joypots customer account, we use your information to provide account functionality, including access to your order history and saved details.

Please keep your account login information secure and contact us if you believe someone has accessed your account without permission.

We take reasonable technical and organisational measures to protect the personal information we process.

However, no website or electronic communication system can be guaranteed to be completely secure.

Please avoid sending sensitive payment information through ordinary email.

12. How Long We Keep Your Information

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing our services, meeting legal obligations, resolving disputes and protecting our legitimate business interests.

The length of time depends on the type of information, why it was collected and any applicable legal or operational requirements.

Orders and financial records

We retain transaction, payment and accounting information for the periods required by applicable tax, accounting and other laws.

In many cases, relevant business financial records are retained for at least six years, although the precise period depends on the record and applicable requirements.

Customer accounts

We retain account information while your account remains active and for as long as necessary to provide account services or meet other legitimate and legal requirements.

We may review, delete or anonymise inactive account information where appropriate and technically possible, subject to any information we need to retain.

Customer enquiries and complaints

We retain customer correspondence for as long as reasonably necessary to resolve enquiries, manage complaints, maintain appropriate records and respond to potential disputes.

Gift orders and messages

Gift recipient details and personal messages may be stored as part of the relevant order record.

We retain this information only for as long as necessary for delivery, customer service, record-keeping and other legitimate purposes.

Where information forms part of records that must be retained, we may limit its use rather than delete it separately.

Marketing information

We retain marketing contact details while you remain subscribed or while we have another lawful reason to retain them.

If you unsubscribe, we may retain limited information to record your preference and prevent further unwanted marketing.

We review marketing information periodically and remove or anonymise information that's no longer needed.

Website analytics and advertising

Analytics and advertising information is retained according to the settings, purposes and retention arrangements of the platforms we use, subject to applicable legal requirements.

We review these settings and aim to avoid retaining identifiable information longer than necessary.

Cookies and consent records

Cookie lifetimes vary depending on their purpose and provider, as explained in Section 8.

We may retain records of cookie preferences and consent where necessary to respect your choices and demonstrate compliance.

Deleting or anonymising information

When personal information is no longer needed, we take appropriate steps to delete it, anonymise it or restrict its use.

Some information may remain in backups or integrated systems for a limited period in accordance with their normal retention and deletion processes.

We consider the capabilities and limitations of the systems we use when managing data retention, but these don't remove our legal responsibilities to handle personal information appropriately.

13. International Transfers of Personal Information

Some technology and service providers we use, including Shopify and certain analytics or advertising providers, may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, we take steps to ensure appropriate protections are in place, as required by applicable data protection law.

These may include transfers to countries recognised as providing adequate protection or the use of appropriate contractual safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, where applicable.

You can contact us if you'd like further information about the safeguards relevant to your personal information.

14. Your Privacy Rights

Under UK data protection law, you have rights relating to your personal information.

Depending on the circumstances, these may include:

  • Access: Request a copy of the personal information we hold about you.

  • Correction: Ask us to correct information that's inaccurate or incomplete.

  • Erasure: Ask us to delete your personal information where the law gives you that right.

  • Restriction: Ask us to restrict certain uses of your information.

  • Objection: Object to certain processing activities, including direct marketing.

  • Data portability: Request certain information in a portable format or ask for it to be transferred to another provider, where applicable.

  • Withdrawal of consent: Withdraw consent where we rely on it.

  • Rights relating to automated decisions: Exercise any applicable rights concerning qualifying solely automated decisions.

These rights aren't absolute, and some information may need to be retained for legal or other permitted reasons.

To exercise your rights, please email joy@joypots.com.

We may need to verify your identity before responding.

We'll respond within the time required by applicable data protection law, normally within one month, subject to any permitted extensions.

You can also use Shopify's Privacy Portal for relevant information processed by Shopify in its own capacity:

https://privacy.shopify.com/en

15. Children's Privacy

Our website is intended for customers purchasing Joypots products, rather than for children to use independently.

We don't knowingly collect personal information from children for the purpose of marketing directly to them.

If you believe a child has provided personal information to us inappropriately, please contact joy@joypots.com so we can review the situation.

We will handle any such information in accordance with applicable data protection law.

16. Third-Party Websites

Our website may contain links to other websites or services, including social media platforms.

These websites operate independently and may have their own privacy policies and terms.

We recommend reviewing their policies before providing personal information.

We're not responsible for how independent third-party websites collect and use personal information.

17. Complaints About Your Personal Information

We take your privacy seriously and want to resolve any concerns you may have.

If you have a question or complaint about how we use your personal information, please contact us at joy@joypots.com.

If you're unhappy with our response, you have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

You can find more information at:

https://ico.org.uk

You're welcome to contact us first, but you don't have to do so before approaching the ICO.

18. Changes to This Policy

We may update this Privacy & Cookie Policy from time to time to reflect changes to our website, the technologies we use, business operations or legal requirements.

The latest version will be available on our website, together with the date it was last updated.

Where required by law, we'll provide additional notice of significant changes.

19. Contact Us

If you have questions about this policy, your personal information or your privacy rights, we're happy to help.

Joypots Limited
Company number: 10166594

Registered office:
Unit A Grangewood House
Oakwood Hill Industrial Estate
Oakwood Hill
Loughton
Essex
IG10 3TZ

Telephone: 0203 935 7350
Email: joy@joypots.com

Thank you for trusting Joypots with your information.