Last updated: October 4, 2026

At Joy Filled Gifts, a personalized gift can include details that matter deeply to you—a loved one’s name, a special date, a family photo, or a message written just for them. We take the responsibility of handling that information seriously.

This Privacy Policy explains how we collect, use, share, retain, and protect personal information when you visit our website, place an order, request personalization, subscribe to our emails, or contact us.

Joy Filled Gifts is based in Regina, Saskatchewan, Canada. References to “we,” “us,” and “our” mean Joy Filled Gifts.

“Personal information” means information that identifies an individual or can reasonably be connected to an identifiable individual, including a customer or gift recipient.

1. Information We Collect

The information we collect depends on how you interact with us.

Contact and account information. This may include your name, email address, telephone number, billing address, shipping address, and any account information or preferences you provide.

Order and transaction information. This includes the products you order, product options, personalization selections, order amounts, payment status, shipping details, and information relating to cancellations, refunds, replacements, or customer service requests. Payment details are processed through Shopify and/or the payment providers available at checkout.

Personalization information and uploaded content. Depending on your gift, you may provide names, initials, ages, birthdays, anniversaries, other meaningful dates, custom wording, photographs, or design files. These details may relate to you or someone else.

Gift-recipient information. When you send a gift directly to another person, we collect the recipient information needed to prepare and deliver that order, such as their name and delivery address.

Communications and reviews. We collect information you provide through emails, contact forms, customer support conversations, product reviews, and related attachments.

Website and device information. When you browse our website, Shopify and other tools used on our store may collect your IP address, approximate location, browser and device information, referring website, pages and products viewed, searches, shopping-cart activity, and interactions with our website. Website technologies may collect this information automatically.

We receive information directly from you, automatically through your interactions with our website, and from providers involved in payments, store operations, and delivery. We may also receive information about you from someone purchasing a gift for you.

2. How We Use Your Information

We use personal information to operate our store and provide the products and services you request. This includes processing payments, preparing personalized designs, producing and shipping orders, sending order updates, answering questions, and handling order issues.

We also use relevant information to maintain customer accounts, remember preferences, identify website problems, understand which products and pages customers find useful, and improve navigation and the shopping experience.

Where permitted by law and consistent with your choices, we use information for marketing communications, product recommendations, advertising, and measuring the effectiveness of our promotions.

We may also use information to detect fraud, protect our website and customers, maintain necessary business records, resolve disputes, and comply with legal obligations.

We seek consent where required and distinguish information needed to fulfill an order from optional marketing uses. Reading this policy or visiting our website does not replace a separate consent request where one is required.

3. Personalized Gifts, Photos, and Information About Others

Information submitted for personalization is used to prepare, produce, and support your order. This may involve sharing the relevant names, wording, photographs, or design files with the service providers and production partners involved in making your gift.

Please provide only information needed for the requested personalization. Do not include payment credentials, government identification numbers, or other unnecessary sensitive information in personalization fields or uploaded files.

When you provide someone else’s information or photograph, you must have the authority or permission needed to share it for the purpose of creating and delivering the gift. For information about a child, obtain permission from their parent or legal guardian where required.

Submitting a photo, private message, or personalized design for an order does not, by itself, give us permission to publish it in our advertising or on social media. We will request separate permission before using identifiable private order content for those purposes.

Providing a gift recipient’s contact information for delivery does not automatically subscribe that person to our marketing emails.

Public product reviews are handled differently, as explained below.

4. When We Share Personal Information

We share personal information when reasonably necessary for the purposes described in this policy, including with the following categories of recipients.

Store and payment providers. Shopify and payment providers process information needed to operate our website, complete purchases, and support payment security.

Personalization, production, and delivery partners. Relevant information may be shared with providers that prepare designs, manage uploaded files, manufacture or personalize products, fulfill orders, and deliver packages.

Other operational providers. These include providers supporting customer service, email delivery, product reviews, website features, data storage, analytics, and technical maintenance.

Advertising partners. Where advertising features are used, relevant information—such as device identifiers, browsing activity, purchase events, or contact information used for audience matching—may be shared to deliver and measure advertising, subject to applicable law and your privacy choices.

Professional advisers and legal recipients. We may disclose relevant information to advisers, authorities, or other parties when necessary to meet legal obligations, address fraud or security concerns, resolve disputes, or protect legal rights.

Personal information may also be disclosed in connection with a proposed or completed sale, transfer, or reorganization of our business, subject to applicable privacy requirements and appropriate safeguards.

We remain responsible for personal information under our control, including information provided to processors acting on our behalf. Some providers also process information for their own purposes, as explained in their privacy notices and, for Shopify, below.

5. Our Relationship With Shopify

Our store is hosted by Shopify. Shopify processes information about your visits, purchases, and other interactions to provide the shopping platform and associated services.

Shopify offers enhanced services powered by Shopify Network Intelligence. When these services are enabled for our store, Shopify processes information from your interactions with us together with information from your interactions with other merchants and Shopify to provide those services. These services may support personalization, improvements to services, and advertising, subject to applicable privacy requirements and your choices.

Shopify is responsible for responding to privacy requests concerning information it processes for its own purposes. You can learn more through the Shopify Consumer Privacy Policy and exercise applicable rights through the Shopify Privacy Portal.

You may contact us separately about information that Joy Filled Gifts controls.

6. Website Technology, Advertising, and Your Privacy Choices

Our website uses technologies that store or access information on your device to support essential functions such as shopping carts, checkout, security, and remembering privacy preferences.

Depending on the features in use and your choices, these technologies may also support website analytics, additional personalization, advertising, and measurement of advertising results.

Where required by law, we request consent before using non-essential technologies to collect information about your activity. You can manage available choices through the privacy controls displayed on our website. Your browser settings may also allow you to limit tracking or clear stored website data, although restricting essential technologies can affect store functionality.

Advertising-related sharing. Certain privacy laws treat disclosures for advertising based on activity across different websites as a “sale,” “sharing,” or “targeted advertising,” even where information is not exchanged for money. Applicable opt-out rights are not limited to the sale of a customer mailing list.

To exercise available advertising-related opt-out choices, visit Your Privacy Choices or contact support@joyfilledgifts.com. You can also contact us if you have difficulty accessing or using the privacy controls.

Where required by applicable law, we will treat recognized opt-out preference signals, including Global Privacy Control, as requests to opt out of the relevant advertising-related processing. A browser-based choice generally applies to the browser or device sending the signal. Other browser “Do Not Track” signals are not treated as privacy requests unless applicable law requires otherwise.

You may need to renew your choices after clearing stored website data or using a different browser or device. Opting out of targeted advertising does not necessarily prevent you from seeing non-personalized advertisements.

7. Email Marketing and Other Communications

We send promotional emails where we have the consent or other permission required by applicable law. These may include gift ideas, product announcements, offers, and shopping reminders.

You can unsubscribe through the link included in our marketing emails or by contacting us. We process unsubscribe requests promptly and within applicable legal deadlines. Where Canada’s anti-spam legislation applies, requests will be completed no later than 10 business days after receipt.

Unsubscribing from marketing does not stop necessary non-promotional communications about an order, payment, delivery, account issue, or customer service request.

Email tools may record interactions such as message openings and link clicks to help us understand and improve our communications, subject to applicable consent requirements.

Providing a telephone number for an order or delivery does not, by itself, authorize promotional text messages.

8. Reviews, Public Content, and Third-Party Websites

When you submit a review for public display, your chosen display name, rating, review text, and any included photographs may be visible to other people.

Submitting a review for public display does not, by itself, give us permission to use your identifiable review content or photographs in separate advertising or social media promotions. We will request separate permission before doing so.

Please avoid including private contact details, payment information, or personal information about another person that you do not have permission to publish.

Contact us with concerns about a review or other public content that we control. Removing content from our website may not remove copies independently saved or shared by others.

Our website and communications may contain links to external websites, payment services, or social platforms. Those services have their own privacy practices. Review their policies before providing information directly to them. Linking to another service does not remove our responsibility for information that we disclose to it.

9. International Processing and Storage

Joy Filled Gifts is based in Canada, and our providers may operate in Canada, the United States, and other countries.

Your personal information may therefore be transferred to, accessed, processed, or stored outside your province, state, or country. Privacy laws in those locations may differ from the laws where you live, and information may be subject to lawful access by courts, law enforcement, or other authorities.

We are responsible for using contractual or other safeguards required by applicable law to protect personal information transferred to processors acting on our behalf. Transferring information to a provider does not remove our responsibility for its protection. You may contact our Privacy Contact with questions about these arrangements.

10. Retention and Security

How long we keep information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including any applicable legal requirements.

Retention depends on the type of information and the reason it is needed. Order and transaction records may be retained for accounting, tax, dispute-resolution, and related obligations.

For personalization files and uploaded photographs, retention depends on fulfillment, customer support, replacement, and relevant legal needs. These files are not automatically kept for the same period as accounting records. You may contact us to request deletion of an uploaded photograph or personalization file, subject to the conditions and exceptions described in Section 12.

We may retain limited records of marketing preferences so that we can continue to respect an unsubscribe request.

When information is no longer needed, we take steps to delete it securely or make it no longer identifiable, subject to applicable requirements and backup-management processes.

How we protect information

We use reasonable administrative, technical, and physical safeguards appropriate to the nature and sensitivity of the information, including limiting access to people and providers who need it for authorized purposes.

No internet transmission or storage system can be guaranteed completely secure. Please do not send full payment-card details, account passwords, or unnecessary sensitive information through ordinary email or contact forms.

Security incidents

If a breach affects personal information under our control, we will assess the incident, take appropriate steps to address it, and notify affected individuals and the appropriate authorities where required by applicable law. We will also maintain breach records as required by applicable law.

11. Children’s Information

Our store is intended for adult shoppers, not as an online service directed to children. We do not knowingly collect personal information directly from children under 13 through their independent use of our services.

An adult may provide a child’s name, photograph, or other relevant details to create a personalized gift. This is different from collecting information directly from a child, and such submissions are handled under the personalization provisions of this policy.

A parent or legal guardian who believes a child has provided information without appropriate authorization should contact us. We will review the concern and take appropriate steps, including deletion where required.

12. Your Privacy Rights and Requests

Depending on where you live and which laws apply, you may have rights to:

• Access information we hold about you and learn how it has been collected, used, or disclosed.
• Correct inaccurate information or request deletion, subject to legal exceptions.
• Receive a portable copy of certain information.
• Withdraw consent, object to or restrict certain processing, or limit certain uses of sensitive information.
• Opt out of applicable sales, sharing, or processing for targeted advertising.

These rights vary by jurisdiction and are subject to applicable conditions and exceptions. We will not unlawfully discriminate against you for exercising a privacy right.

Privacy contact

Our Privacy Contact is responsible for overseeing how Joy Filled Gifts handles personal information and for receiving privacy questions, requests, and complaints.

To contact our Privacy Contact or make a privacy request, email support@joyfilledgifts.com with the subject “Privacy Request.” Describe your request and provide enough information for us to locate the relevant records. You do not need to create an account to contact us.

For requests involving access to or changes to personal records, we may need to verify your identity or an authorized representative’s authority. We will not require identity verification for an advertising opt-out where the applicable law prohibits doing so.

We respond within the time required by applicable law. Access requests under Canada’s Personal Information Protection and Electronic Documents Act are generally answered within 30 days, subject to permitted extensions. Where an extension applies, we will explain it as required.

Some information may need to be retained despite a deletion request, such as records required by law. Withdrawing permission for information necessary to fulfill an order may affect our ability to provide that service; withdrawing optional marketing consent does not.

Questions, complaints, and appeals

Contact our Privacy Contact with concerns about how your information is handled. Where applicable, you may appeal a decision by replying to our response and requesting a review. You may also complain to the relevant privacy regulator, including the Office of the Privacy Commissioner of Canada where appropriate.

13. Changes to This Policy

We may update this Privacy Policy when our services, information practices, or legal obligations change.

The current version will be posted on this page with an updated date. We will provide additional notice or obtain new consent where required. Posting a revised policy does not replace consent required for a new use of personal information.