Privacy Policy
UPDATED: July 22, 2026
This Privacy Policy explains how JOYxTOO (“we”, “us”, “our”) collects, uses, shares and protects information about you when you visit joyxtoo.com (“site”), or contact us. It also sets out the rights you have over your personal data and how to exercise them.
Your continued use of the site will be regarded as acceptance of our practices around privacy and personal information. If you do not agree with the terms of this Privacy Policy, do not access or use the site.
Https://www.joyxtoo.com is operated by JOYxTOO, based in the state of Tennesee, USA. JOYxTOO is the data controller. We can be reached at:
General contact: extra [at] joyxtoo.com
Privacy inquiries: privacy [at] joyxtoo.com
Cookies
A cookie is a very small text file stored on your device via your web browser. Cookies and related web technologies collect information to support certain features on web sites, such as retaining user preferences, and maintaining shopping carts.
We do not use any tracking, advertising, or behavioral cookies. We do not fingerprint your browser. The site sets no first-party cookies of its own.
What This Site Sets
| Technology | Set by | Purpose |
|---|---|---|
| none | JOYxTOO | We do not set any first-party cookies, localStorage, sessionStorage or fingerprinting at this time. |
Cloudflare security cookies (e.g. __cf_bm) | Cloudflare (our Content Delivery Network) | Set transiently by Cloudflare to distinguish humans from bots and to mitigate denial-of-service attacks. Strictly necessary for the site to operate securely. |
Because the only cookies set are essential to the operation of the site, we are not required to, and therefore have not implemented a consent banner. This choice was made primarily to spare visitors from banner fatigue.
If we ever introduce a non-essential cookie, tracking pixel, or similar technology, we will:
- Update this page with details.
- Show a clear consent banner before the technology is set.
- Default any optional categories to off until you actively accept.
The most effective way to disable cookies on any site, is to disable cookies in your Internet browser. We suggest consulting the Help section of your browser for further information.
Also, you can reject web beacons by e-mail if you disable HTML images or refuse HTML e-mail messages in the settings of your e-mail application. We suggest consulting the help section of your e-mail app for more information.
Third Party Embeds and Links
We do not embed third-party widgets. (No YouTube, no Twitter timelines, no Instagram feeds, no maps, no fonts from Google—none.)
External resources and links open in a new tab and only set cookies after you visit them. Their cookie behavior is governed by their own policies.
Personal Data
We collect only the information that we genuinely need in order to respond to you and run the site securely. The categories below cover everything.
| Contact Form (/contact) | your name, email address, and the contents of your message |
| E-mail Correspondence | anything that you choose to send via our provided e-mail addresses |
| Web Server Access Logs | IP address, user-agent string, referring page, requested URL, and timestamp. These are used to keep the site secure and reachable. (We do not retain raw access logs ourselves.) |
Why We Use Your Data
| Purpose | Data |
|---|---|
| Replying to your contact-form message or e-mail | your name, email address, and the contents of your message |
| Operating and securing the website (server logs, abuse prevention) | IP address, user-agent, timestamps |
Who We Share Your Data With
We share personal data only with the small number of service providers we need to run the site, and only to the extent necessary for them to do their job. Each of them is contractually bound by a Data Processing Agreement (or equivalent) and may not use your data for their own purposes.
| Provider | Role | Link to Policy |
|---|---|---|
| ScalaHosting | hosting provider, site file and data storage | https://www.scalahosting.com/privacy-policy.html |
| Cloudflare, Inc. | content delivery, DDoS protection, server-log processing | https://www.cloudflare.com/privacypolicy/ |
| Cloudflare Turnstile | protect the site from malicious activity by bots and bad actors | https://www.cloudflare.com/turnstile-privacy-policy/ |
| SMTP2GO (Sand Dune Mail Ltd) | transactional email delivery for contact-form messages | https://www.smtp2go.com/privacy/ |
| Mailchimp (Intuit) | newsletter subscription management (only applies to users requesting and consenting to subscribe) | https://mailchimp.com/about/security/ |
We may also disclose personal data where required by law, to protect our rights, or to investigate or address a suspected breach of our Terms.
We never sell your personal data, and we do not use it for automated decision-making or profiling that produces legal or similarly significant effects concerning you.
How Long We Keep Your Data
We keep personal data only for as long as we need it for the purpose we collected it.
Data Retention period
| Contact-form messages | held in our inbox up to 24 months from your last contact, then deleted |
| Web-server access logs (Cloudflare) | up to 30 days, then automatically purged |
What Rights You Have Over Your Data
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure— ask us to delete your personal data where we no longer have a lawful basis to hold it.
- Restriction — ask us to pause processing while we resolve an issue you’ve raised.
- Data portability — receive a structured, machine-readable copy of data you provided to us, where processing is by automated means and based on consent or contract.
- Object — object at any time to processing based on our legitimate interests, including for direct marketing.
- Not be subject to solely automated decisions — we do not make any such decisions about you.
- Opt-Out — right to opt-out of having your personal information sold, or shared with non-affiliated websites or applications — we never sell your personal data.
- Withdraw consent — where we rely on your consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
- Complain — right to lodge a complaint with a supervisory authority if you are not satisfied with the way we have handled your personal data, or any privacy request, or other request that you have raised with us.
To exercise any of these rights or others that may apply in your specific region, e-mail privacy [at] joyxtoo.com. Please include enough information to allow us to identify you and the data you’re asking about. We may need to verify your identity before completing your request. We will acknowledge your request within ten days and respond within thirty days.
There is normally no charge for exercising these rights. We may charge a reasonable fee, or refuse to act, where a request is manifestly unfounded or excessive. Further, we may not accommodate a request to alter information if we believe that the change would violate any law or legal requirement, or cause the information to be incorrect, or where we are obliged to maintain information for legal, or security purposes.
Children
JOYxTOO.com is not directed at nor targeted to children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please e-mail us and we will delete it promptly.
By using the site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use this site.
Security
We use appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, and loss, including:
- HTTPS everywhere on this site.
- Encryption at rest with our sub-processors.
- Spam protection on the contact form.
- Routine review of sub-processor security and DPA terms.
No system is perfectly secure, and we cannot guarantee the absolute security of information transmitted over the internet.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “UPDATED” date at the top of this page. Your continued use of the site after the Privacy Policy has been modified is deemed to be an acceptance of the modifications.
Contact
If you have questions about the Privacy Policy and how we handle user data, contact us at privacy [at] joyxtoo.com.