Privacy Policy

This Privacy Policy explains how JoyLamp collects, uses, shares and protects personal data when you visit the site, design a lamp, create an account, place an order or contact us. The company operating JoyLamp, identified in our Legal Notice, is the controller of that data (the "business" under California law). For any question or request about your data, write to contact@joylamp.com.

We use your photos only to design and make your lamp. We never use them to identify you, we never build a face template from them, we never sell them and we never use them to train AI models.

We do not sell your personal data and we do not share it for cross-context behavioural advertising. Optional cookies (chat and audience measurement) are only set with your consent where the law requires it, and you can change your choice at any time from the "Cookie settings" link at the bottom of every page.

What you give us: your email address, your name, your delivery address and, if you give it, your phone number; the photos you upload; the names, notes (such as height, build or age), texts, messages and dates you add to a design; your design choices; your messages to support; and your reviews.

What we collect automatically: your IP address and the country derived from it; your browser, device and operating system; a random identifier stored in a cookie on your device to count your free previews and keep your designs; and, only with your consent where required, the pages you view and the actions you take on the site.

What others give us: our payment provider tells us whether a payment succeeded and gives us fraud signals (we never receive your full card number), and carriers tell us where your parcel is.

Your photos are used to generate the designs you see, to make the lamp you order and to handle any after-sales request. They are processed automatically by AI image-generation tools to draw a stylized picture. We do not use facial recognition, we do not extract face geometry or any biometric identifier, and we do not use photos to identify or verify anyone.

Only upload photos of people who have agreed to it. For a photo of a child, you must be the child's parent or legal guardian or act with their consent. We ask you to confirm this before the photos are sent.

Photos uploaded for a design you do not order are deleted automatically 30 days after upload. The photos and the design of an order are kept for production and after-sales, for up to 24 months after delivery, then deleted. You can ask us at any time to delete them sooner; after that, we can no longer replace the lamp.

To provide the design tools and previews, make and deliver your order, manage your account and answer you: this is necessary to perform our contract with you, or to take steps at your request before it (GDPR Article 6(1)(b)). Your agreement to upload photos of other people is collected before upload.

To keep the site secure, limit free previews per visitor, prevent fraud and abuse, defend our legal rights, and understand in aggregate how the site is used where no consent is required: our legitimate interests (Article 6(1)(f)), which we have balanced against your rights.

To keep accounting and tax records and respond to authorities: our legal obligations (Article 6(1)(c)).

To set optional cookies (chat, audience measurement) and to send you marketing emails when you have not bought from us: your consent (Article 6(1)(a)), which you can withdraw at any time without affecting what was done before.

Our designs are generated automatically, but we make no decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you. The automatic limits on free previews are an anti-abuse measure; if you believe one was applied in error, write to us and a person will review it.

We share personal data only with service providers that process it on our behalf and under our instructions, bound by contract to protect it: website hosting, content delivery, storage and email sending (Cloudflare); our database (Neon); payment processing and fraud prevention (Stripe); AI image generation, which receives your photos and design options to draw the design (OpenRouter and the model providers it routes to, such as OpenAI); our commerce and order-management platform (Klay); customer chat, if you consent to it (Crisp); audience measurement, if you consent to it (DataFast); and the manufacturing partners and carriers that make and deliver your lamp, which receive the design, your name and your delivery address.

We may also disclose data to professional advisers, to authorities when the law requires it, to establish or defend a legal claim, and to a buyer or successor if our business is transferred, under this Policy.

We do not sell personal data, and we do not share it for cross-context behavioural advertising, as those terms are defined under California law. We have not done so in the past 12 months.

Some of our providers and partners process data outside the European Economic Area, the United Kingdom and Switzerland, in particular in the United States, and our manufacturing partners may be located in Asia. When we transfer personal data outside those areas, we rely on an adequacy decision (such as the EU-US Data Privacy Framework for certified providers) or on the European Commission's Standard Contractual Clauses, with the UK addendum where needed, and on additional safeguards where appropriate. You can ask us for a copy of the safeguards at contact@joylamp.com.

Photos and designs: as described in "Your photos" (30 days without an order; up to 24 months after delivery with an order). Orders, invoices and payment records: 10 years, the period accounting law requires. Account data: until you close your account, or after 3 years without any activity. Support conversations: 3 years after the last message. Marketing contacts: 3 years after your last purchase or contact, or until you unsubscribe. Security and anti-abuse records: up to 12 months. Cookie choices: see the Cookie Policy.

When a period ends, we delete or anonymise the data, unless we must keep it longer by law or to establish or defend a legal claim.

Data is encrypted in transit, payment card data is handled only by our payment provider, access to personal data is limited to the people and providers who need it, and photos are kept in private storage that is not publicly reachable. No system is perfectly secure; if a breach affecting your data occurs, we will notify you and the authorities when the law requires it.

You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing (including, at any time, to direct marketing), to receive it in a portable format, and to withdraw your consent at any time. You can also give instructions about what happens to your data after your death (France).

To exercise a right, write to contact@joylamp.com. We answer within one month, which may be extended by two months for complex requests, and we may ask for information to confirm your identity. You also have the right to lodge a complaint with a data protection authority, in particular in the country where you live or work, or where an alleged infringement took place (in France, the CNIL, www.cnil.fr).

This section is our notice at collection and privacy notice under the California Consumer Privacy Act as amended (CCPA) and similar laws of other US states. In the past 12 months, we collected the following categories of personal information, for the purposes described in "Why we use your data": identifiers (name, email, postal address, IP address, online identifiers); customer records (phone number, payment status, not full card numbers); commercial information (orders and designs); internet or other electronic network activity (browsing on our site, with consent where required); approximate geolocation (country derived from IP); and audio, electronic or visual information (the photos you upload). We do not use or disclose sensitive personal information for any purpose that would give a right to limit it, and we do not collect biometric information.

We disclose these categories for business purposes to the service providers listed in "Who we share it with". We do not sell or share personal information, including of consumers under 16, and we do not offer financial incentives in exchange for it.

Depending on your state, you have the right to know what personal information we collect, use and disclose; to access it and receive a portable copy; to correct it; to delete it; to opt out of the sale or sharing of personal information, of targeted advertising and of profiling; and not to be discriminated against for exercising these rights. We honour Global Privacy Control (GPC) browser signals as a request to opt out, and you can also use the "Your Privacy Choices" link at the bottom of every page.

To make a request, write to contact@joylamp.com. We verify your identity by matching information you give us with what we hold, usually by a code sent to your email address. You may use an authorised agent, who must provide your signed permission; we may still ask you to verify your identity directly. We answer within 45 days, which may be extended once by 45 days. If we decline your request, you may appeal by replying to our answer; we answer an appeal within the time your state's law requires, and if you disagree you may contact your state Attorney General.

California "Shine the Light": we do not disclose personal information to third parties for their own direct marketing purposes.

The site is not directed at children and we do not knowingly collect personal data from children under 16 (under 13 in the United States) except photos uploaded by a parent or guardian to design a lamp. If you believe a child has given us personal data, write to contact@joylamp.com and we will delete it.

We send you the emails needed for your account and orders (sign-in codes, order confirmation, shipping updates). We send marketing emails only if you agreed to them or, where the law allows it, about similar products after a purchase; every marketing email has a link to unsubscribe in one click.

What the site stores on your device, why, and how to refuse it is explained in our Cookie Policy. You can change your choice at any time from the "Cookie settings" link at the bottom of every page.

We may update this Policy. The version number and date at the top of this page tell you when it last changed, and we announce material changes on the site or by email.