This Privacy Policy explains what personal information joyfulsupplyz collects, why we collect it, who we share it with, and the choices you have. The site is operated by AMORIA BEAUTY LABS LLC, a Colorado limited liability company with a registered office at 1500 N Grant St, Ste N, Denver, CO 80203, United States. Questions go to support@joyfulsupplyz.com.
1. Notice at Collection
This table is our notice at collection under the California Consumer Privacy Act, as amended by the California Privacy Rights Act.
| Category | Examples | Why we collect it | Source | Who we disclose it to | How long we keep it |
|---|---|---|---|---|---|
| Identifiers | Name, shipping and billing address, email address, phone number, IP address, order number | To take and fulfill your order, to contact you about it, and to prevent fraud | You, at checkout | Shopify, our fulfillment partner, carriers (USPS, FedEx), Stripe | 7 years from the order date, to meet tax and accounting requirements |
| Commercial information | Items viewed and purchased, order value, returns and refunds | To fulfill and support your order, handle returns, and keep our records | You, and our systems | Shopify, our fulfillment partner | 7 years from the order date |
| Financial information | Payment method type, the last four digits of your card, authorization result | To take payment and issue refunds | Stripe, at checkout | Stripe. We never receive or store your full card number | 7 years from the order date |
| Internet and device activity | Pages visited, referring URL, browser and device type, approximate location from IP, cookie identifiers | To run the site, measure how it is used, and measure advertising | Automatically, through cookies and similar technologies | Shopify, Google (Google Analytics 4 and Google Ads) | Up to 14 months for analytics data |
| Marketing preferences | Email address, subscription status, opens and clicks | To send marketing email you asked for | You, when you sign up | Shopify | Until you unsubscribe, then a suppression record so we do not email you again |
| Customer service records | Your emails to us and our replies, photos you send with a return | To answer you and to handle returns and claims | You | Our email provider | 3 years from the last message |
We do not collect Social Security numbers, driver's license numbers, passport numbers, precise geolocation, biometric data, health data, or information about racial or ethnic origin, religion, union membership, sexual orientation or political views. We do not knowingly collect sensitive personal information as that term is defined under California law.
2. We Do Not Sell Your Personal Information for Money
We do not sell personal information in exchange for money, and we have not done so in the preceding 12 months.
However, we use Google advertising and analytics tools that set cookies and share online identifiers and browsing activity with Google. Under California, Colorado, Connecticut, Virginia and several other state privacy laws, that activity can count as "sharing" personal information for cross-context behavioral advertising, or as targeted advertising. You can opt out at any time — see Do Not Sell or Share My Personal Information.
We do not have actual knowledge that we sell or share the personal information of anyone under 16 years of age.
3. Cookies and Tracking Technologies
We use these categories of cookie:
- Strictly necessary. Set by Shopify to keep your cart, your session and checkout working. These cannot be switched off.
- Analytics. Google Analytics 4, used to understand which pages people visit and where they leave.
- Advertising. The Google Ads tag, used to measure whether an ad led to a purchase and to build advertising audiences.
You can refuse analytics and advertising cookies at any time: browse with Global Privacy Control enabled, block or clear cookies for this site in your browser settings, or email us and we will apply the opt-out to your record. Full instructions are on our Do Not Sell or Share My Personal Information page.
We do not run a Meta (Facebook) pixel on this site.
Global Privacy Control
We honor the Global Privacy Control signal automatically. If you visit with GPC enabled in your browser or extension, we treat it as an opt-out of sale and sharing for that browser and device, without you needing to do anything else. You can learn more at globalprivacycontrol.org. We do not respond to other "Do Not Track" browser signals, because there is no common standard for them.
4. How We Use Personal Information
- To process, fulfill and deliver your order, and to send order and shipping notifications
- To handle returns, exchanges, refunds and support requests
- To detect and prevent fraud and abuse of our returns process
- To operate, secure and improve the site
- To measure marketing performance and, where you have opted in, to send marketing email
- To meet our legal, tax and accounting obligations
We do not use your personal information for automated decision-making that produces legal or similarly significant effects, and we do not profile you for that purpose.
5. Who We Disclose Personal Information To
| Recipient | Purpose | What they receive |
|---|---|---|
| Shopify Inc. | Ecommerce platform and hosting | Order, account and site usage data |
| Stripe, Inc. | Payment processing | Payment and billing data |
| Our fulfillment partner (China) | Picking, packing and dispatch | Name, shipping address, phone number, order contents |
| USPS and FedEx | Final-mile delivery | Name, shipping address, phone number |
| Our US returns facility (Miami, FL) | Receiving and inspecting returns | Name, order number, return authorization |
| Google LLC | Analytics and advertising measurement | Online identifiers, site activity, conversion events |
We may also disclose personal information where we are legally required to, to respond to lawful requests from public authorities, to enforce our Terms and Conditions, or in connection with a merger, acquisition or sale of assets. We do not disclose personal information to data brokers.
6. International Data Transfers
To get your order to you, we transfer your name, shipping address, phone number and order contents to our fulfillment partner in China. Other service providers process data in the United States. Privacy laws in those countries differ from the laws of your state, and in some cases offer less protection.
By placing an order you understand that your delivery details must be transferred abroad for your order to be fulfilled. We share the minimum needed to ship the parcel: we do not send payment data, browsing history or marketing data to our fulfillment partner.
7. Data Security and Retention
Our site runs over HTTPS with TLS encryption on every page. Payments are handled by third-party payment providers that maintain PCI DSS compliance, and we never receive or store full card numbers. Access to order data is limited to people who need it.
No system is perfectly secure, and we cannot guarantee absolute security. Please do not send card details, passwords or other sensitive information to us by email.
Retention periods are in the table in section 1. When a retention period ends, we delete the data or irreversibly de-identify it.
8. Your Privacy Rights
Depending on where you live, you may have the following rights:
- Know and access. Ask what personal information we hold about you and get a copy.
- Delete. Ask us to delete personal information we hold about you, subject to exceptions such as completing a transaction or meeting a legal obligation.
- Correct. Ask us to fix inaccurate personal information.
- Portability. Receive your data in a portable, machine-readable format.
- Opt out of sale, sharing and targeted advertising. See Do Not Sell or Share My Personal Information.
- Limit use of sensitive personal information. We do not collect sensitive personal information, so there is nothing to limit.
- Non-discrimination. We will not deny you goods, charge a different price, or give you a lower quality of service because you exercised a privacy right.
These rights apply to residents of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky and Rhode Island under their respective state privacy laws, and we extend them to every US customer regardless of state.
How to Exercise a Right
Email support@joyfulsupplyz.com with the subject line "Privacy Request" and tell us which right you want to exercise. We verify your identity by matching the details you give us against our order records — usually the email address used at checkout plus an order number. We do not ask you to send identity documents.
We respond within 45 days. If we need more time we will tell you within that period and may extend by a further 45 days.
Authorized Agents
You may use an authorized agent. We will ask for written proof that you authorized them, and we may ask you to confirm the request directly.
Right to Appeal
If we decline your request, you may appeal by replying to our decision email with the subject line "Privacy Appeal". We will review the appeal and respond in writing within 45 days, explaining our reasoning. If we deny the appeal, you may contact your state Attorney General to lodge a complaint. In California you may also contact the California Privacy Protection Agency.
9. Marketing Email
We send marketing email only to people who signed up, through the subscription form on our site. Every marketing email has an unsubscribe link in the footer, and unsubscribing takes effect immediately. We keep a suppression record afterwards so that you are not re-added.
We do not send SMS or text-message marketing. Transactional messages such as order confirmations and shipping notices are not marketing and are sent by email regardless of your marketing preference.
10. Children's Privacy
This site is for adults. We do not direct it at children and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, email support@joyfulsupplyz.com and we will delete it.
11. Third-Party Links
Our site may link to sites we do not operate. This policy does not cover them. Please read their own privacy policies.
12. Changes to This Policy
We may update this policy to reflect changes in our practices or the law. We will post the updated version here and change the date below. Where a change materially affects your rights, we will make that clear.
13. Contact
AMORIA BEAUTY LABS LLC, trading as joyfulsupplyz
1500 N Grant St, Ste N, Denver, CO 80203, United States (registered office)
Privacy and support email: support@joyfulsupplyz.com
Phone: +1 646-688-2828
Effective September 15, 2026. Last updated: September 15, 2026.