Privacy Policy

Last updated: August 2026

At Joytot, we are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your information when you visit our website or make a purchase.

By using our website, you agree to the collection and use of information in accordance with this policy.

1. Who We Are

Joytot is the data controller responsible for your personal data. If you have any questions about this policy or how we handle your data, please contact us at support@joytot.com.

2. Information We Collect

We may collect and process the following types of personal data:

Identity & Contact Information: Name, email address, phone number, billing and shipping address.
Payment Information: Payment card details (processed securely by our payment providers — we do not store full card details).
Order Information: Details of products purchased, order history, and transaction records.
Technical Data: IP address, browser type, device information, and pages visited, collected via cookies and analytics tools.
Communications: Any messages or enquiries you send us.

3. How We Use Your Information

We use your personal data for the following purposes:

To process and fulfil your orders
To communicate with you about your order, including shipping and delivery updates
To respond to your enquiries and provide customer support
To send you marketing communications (only with your consent)
To improve our website and customer experience
To comply with legal obligations

4. Legal Basis for Processing (GDPR)

Under UK GDPR, we process your personal data on the following legal bases:

Contract: Processing necessary to fulfil your order
Legitimate Interests: Improving our services and preventing fraud
Consent: For marketing emails and non-essential cookies
Legal Obligation: Where required by law

5. Sharing Your Information

We do not sell your personal data. We may share your information with trusted third parties only where necessary, including:

Shipping carriers to deliver your orders
Payment processors to handle transactions securely
Analytics providers (e.g. Google Analytics) to help us understand website usage
Legal authorities where required by law

All third parties are required to handle your data securely and in accordance with applicable data protection laws.

6. International Transfers

Some of our third-party service providers may be based outside the UK or EEA. Where we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO).

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Order records are typically retained for up to 7 years for legal and accounting purposes.

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right to access: Request a copy of the data we hold about you
Right to rectification: Request correction of inaccurate data
Right to erasure: Request deletion of your data ("right to be forgotten")
Right to restrict processing: Request that we limit how we use your data
Right to data portability: Receive your data in a structured, machine-readable format
Right to object: Object to processing based on legitimate interests or for direct marketing
Right to withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at support@joytot.com. We will respond within 30 days.

9. Cookies

We use cookies and similar tracking technologies on our website. For full details, please refer to our Cookie Policy.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

11. Children's Privacy

Our website is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.

13. Contact & Complaints

If you have any questions or concerns about how we handle your personal data, please contact us at:
support@joytot.com

If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.