Privacy Policy
Last updated: November 2025
1. Introduction
Spreading Sweet Joy ("we", "us", "our", or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and otherwise handle your information when you visit our website and use our services.
2. Information We Collect
Contact Information:
When you place an order or subscribe to notifications, we collect:
- Name
- Email address
- Phone number
- Mailing address (for orders)
Order Information:
When you place an order, we collect details about what you're ordering, when, and how much you're paying.
Device Information:
We automatically collect certain information about your device, including IP address, browser type, and pages visited (via standard website analytics).
3. How We Use Your Information
We use the information we collect to:
- Process and fulfill your orders
- Send order confirmations and updates
- Notify you about product drops (if you've opted in to SMS)
- Respond to your inquiries and provide customer support
- Improve our website and services
- Comply with legal obligations
- Send transactional and account-related communications
4. SMS Communications & Consent
Opt-In for SMS: When you provide your phone number for drop notifications, we collect your explicit consent to send SMS messages. This is your affirmative consent.
Message Frequency: You can expect to receive approximately 2-4 SMS messages per month about available product drops and limited releases.
Opting Out: You can text STOP to any message to unsubscribe immediately. Text HELP for assistance. Standard message and data rates may apply.
Service Provider: SMS notifications are sent through Twilio, Inc. Their privacy practices are governed by their privacy policy.
5. Data Retention
We retain your personal information for different periods depending on how it's used:
- Order Information: Retained for 90 days after order fulfillment to resolve any issues
- Customer Contact Information: Retained for 1 year to provide customer support
- SMS Subscription Data: Retained for 1 year for marketing purposes, or until you unsubscribe
You may request deletion of your personal data at any time by contacting us at hello@sweetjoy.cafe, subject to legal obligations to retain certain information.
6. Third-Party Service Providers
We may share your information with third-party service providers who perform services on our behalf, including:
- Hosting & Database: Supabase (data storage and authentication)
- SMS Communications: Twilio (SMS delivery)
- Website Hosting: Vercel (website hosting)
These service providers are contractually obligated to use your information only as necessary to provide services to us.
7. Your Rights & Choices
You have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your information (subject to legal obligations)
- Opt out of SMS communications by texting STOP
- Opt out of marketing emails by unsubscribing from the email
8. Security
We take security seriously and use industry-standard security measures to protect your personal information. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.
9. Children's Privacy
Our website is not intended for children under 13 years of age, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will delete such information promptly.
10. Changes to This Privacy Policy
We may update this Privacy Policy periodically. We will notify you of material changes by updating the "Last Updated" date and posting the new version on our website. Your continued use of the website following the posting of revised Privacy Policy means that you accept and agree to the changes.
11. Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us at:
Email: hello@sweetjoy.cafe
12. Your California Privacy Rights (CCPA)
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected, used, shared, or sold
- Right to delete personal information collected from you
- Right to opt-out of the sale or sharing of your personal information
- Right to non-discrimination for exercising your CCPA rights
To exercise these rights, please contact us using the information above.