Privacy Policy

1. Introduction

Welcome to mysunjoe.com (the “Website”). We understand that your privacy is important, and we are committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, store, disclose, and protect your information when you visit our Website, create an account, make a purchase, subscribe to our communications, or interact with our services (collectively, the “Services”).

By accessing or using the Website or Services, you agree to the terms of this Privacy Policy. If you do not agree with any part of this policy, please do not use our Website or Services. We may update this Privacy Policy from time to time, and we will notify you of material changes as described in Section 16. We encourage you to review this policy regularly to stay informed about how we handle your information.

This policy applies to all users of the Website, including visitors, account holders, customers, and those who interact with our customer support, marketing materials, or social media channels associated with the Website. It does not apply to third-party websites, services, or applications that may be linked to our Website (we’ll cover third-party interactions in Section 8).

1.1 Key Definitions

To help you understand this policy, we’ve defined some common terms:

• Personal Information: Any information that can be used to identify, contact, or locate an individual. Examples include your name, email address, phone number, shipping address, payment details, and account credentials.
• Non-Personal Information: Data that cannot be linked to a specific individual. Examples include browser type, device model, anonymized usage data, and aggregate statistics about our user base.
• Cookies and Tracking Technologies: Small text files or tools used to collect information about your browsing behavior (explained in detail in Section 6).
• Service Providers: Third-party companies or individuals we hire to help operate our Website or provide services (e.g., payment processors, shipping carriers, email marketing platforms).
• Legal Basis: The reason we are allowed to process your Personal Information under applicable law (e.g., your consent, fulfilling an order, complying with legal obligations).

2. Information We Collect

We collect two types of information from users: Personal Information and Non-Personal Information. We only collect information that is necessary to provide, improve, or protect our Services—we never collect more data than we need.

2.1 Personal Information

We collect Personal Information when you voluntarily provide it to us, such as when you:

• Create an account on the Website
• Make a purchase or request a quote
• Subscribe to our newsletter, blog, or promotional communications
• Fill out a contact form, survey, or contest entry
• Contact our customer support team
• Register a product or request warranty service
• Participate in our forums, reviews, or social media interactions (if applicable)

The specific Personal Information we may collect includes:

• Contact Information: Full name, email address, phone number, shipping address, billing address, and country of residence.
• Account Information: Username, password (encrypted), account preferences, and purchase history.
• Payment Information: Credit/debit card details, bank account information (if using direct payment), or payment method identifiers (e.g., PayPal account email). Note: We do not store full credit card details on our servers—this information is processed and stored by our third-party payment processors (see Section 8.1).
• Product-Related Information: Product registration details (e.g., serial number, purchase date, retailer name), warranty claims, and service requests.
• Communications Information: The content of your messages to customer support, feedback, survey responses, or comments you post on our Website (if applicable).
• Marketing Preferences: Your choices regarding receiving promotional emails, text messages, or other marketing materials.
• Social Media Information: If you link your social media account (e.g., Facebook, Instagram) to your Website account, we may collect limited information from that account (e.g., name, profile picture) with your permission.

2.2 Non-Personal Information

We automatically collect Non-Personal Information when you visit or use our Website. This data helps us understand how users interact with our site, improve performance, and tailor content to user preferences. The Non-Personal Information we may collect includes:

• Device and Technical Information: Browser type and version (e.g., Chrome 112, Safari 16), operating system (e.g., Windows 11, iOS 16), device model (e.g., iPhone 14, Samsung Galaxy S23), screen resolution, internet service provider (ISP), and IP address (anonymized where possible).
• Usage Data: Pages you visit on the Website, the order of pages visited, time spent on each page, links clicked, search queries entered on the Website, and how you arrived at the Website (e.g., via a search engine, social media, or direct navigation).
• Anonymized Aggregate Data: Combined data from multiple users that cannot be linked to any individual. For example, “50% of users visited the ‘Lawn Mowers’ category page” or “Average time on site is 3 minutes.”
• Cookies and Tracking Data: Information collected via cookies, web beacons, and other tracking technologies (see Section 6 for details).

2.3 Information from Third Parties

In some cases, we may collect Personal Information about you from third parties, but only with your consent or as permitted by law. Examples include:

• Retail Partners: If you purchase our products from a third-party retailer (online or in-store), the retailer may share your purchase details (e.g., product type, purchase date) with us to process warranties or send product updates.
• Social Media Platforms: If you interact with our social media pages (e.g., liking a post, leaving a comment), the platform may share limited information with us (in accordance with their privacy policies) to help us engage with users.
• Service Providers: Third-party tools (e.g., analytics platforms, fraud detection services) may provide us with anonymized or aggregated data to improve our Services, but this data is not linked to your Personal Information unless you have given permission.
• Referral Programs: If someone refers you to our Website via a referral link, we may collect your name and email address (provided by the referrer) to credit the referrer and send you a welcome message (you can opt out of further communications at any time).

3. How We Collect Information

We collect information through two primary methods: (1) information you voluntarily provide (“active collection”) and (2) information we collect automatically (“passive collection”).

3.1 Active Collection

Active collection occurs when you intentionally share information with us. Examples include:

• Filling out an account registration form (providing name, email, password, etc.).
• Completing a purchase (entering shipping address, payment details, etc.).
• Subscribing to our newsletter (entering your email address and selecting preferences).
• Sending an email to customer support (including your contact details and message content).
• Participating in a survey or contest (providing answers to questions, contact information for prize fulfillment).
• Registering a product (entering serial number, purchase date, and contact details).

When you provide information actively, we may ask you to confirm certain details (e.g., verifying your email address by clicking a link sent to your inbox) to ensure the accuracy of the data and protect your account.

3.2 Passive Collection

Passive collection occurs automatically when you use our Website, without you needing to take any additional action. We use the following tools to collect this information:

• Cookies: Small text files stored on your device by your browser. Cookies help us remember your preferences (e.g., language, login status) and track usage patterns (see Section 6 for more details).
• Web Beacons: Tiny, invisible images embedded in web pages or emails. Web beacons track whether you have opened an email, clicked a link, or visited a specific page.
• Server Logs: Our servers automatically record information about your visit, such as your IP address, browser type, pages requested, and timestamps.
• Analytics Tools: Third-party tools (e.g., Google Analytics) that collect data about how users interact with the Website. These tools use cookies and other tracking technologies to gather information like page views, bounce rates, and user journeys.
• Device Fingerprinting: A technique that collects unique characteristics of your device (e.g., operating system, browser plugins, screen resolution) to identify your device for security purposes (e.g., preventing fraud) or to personalize your experience.

We only use passive collection tools for legitimate purposes (e.g., improving the Website, preventing fraud) and never to track users across unrelated websites without consent.

4. How We Use Your Information

We use your Personal Information and Non-Personal Information for specific, legitimate purposes that align with providing and improving our Services. Below is a detailed breakdown of how we use each type of information:

4.1 Using Personal Information

We use your Personal Information to:

• Fulfill Orders and Provide Services: Process your purchases, arrange shipping, deliver products to your address, and provide warranty or post-purchase support. For example, we use your shipping address to send your order, and your email address to confirm your purchase and provide tracking information.
• Manage Your Account: Create and maintain your Website account, allow you to log in securely, update your preferences, and access your purchase history. We use your password (encrypted) to verify your identity when you log in.
• Provide Customer Support: Respond to your questions, resolve issues, and assist with requests (e.g., returns, exchanges, warranty claims). We use your contact information to communicate with you and your purchase history to provide personalized support.
• Send Communications:
• Transactional Communications: Emails or text messages related to your account or purchases (e.g., order confirmations, shipping updates, password reset links). These communications are necessary to provide the Services and you cannot opt out of them (though you can update your contact details).
• Marketing Communications: Emails, text messages, or postal mail about new products, promotions, discounts, or other offers we think you may be interested in. We only send these if you have given your consent (e.g., by checking a box to subscribe to newsletters) and you can opt out at any time (see Section 10.3).
• Improve Our Services: Analyze how you use the Website to identify areas for improvement (e.g., simplifying the checkout process, adding popular product categories). We may use your feedback (provided via surveys or customer support) to make changes to our products or services.
• Personalize Your Experience: Tailor the Website content, product recommendations, and marketing messages to your preferences. For example, if you frequently browse lawn care products, we may show you related products or promotions on the homepage.
• Prevent Fraud and Ensure Security: Detect and prevent fraudulent activities (e.g., unauthorized purchases, account takeovers) by verifying your identity, monitoring unusual activity (e.g., multiple failed login attempts), and using your device information to identify suspicious behavior.
• Comply with Legal Obligations: Respond to legal requests (e.g., subpoenas, court orders), report illegal activities, and comply with tax, customs, or other regulatory requirements. We may also use your information to defend against legal claims.
• Facilitate Social Interactions: If you choose to share reviews, comments, or other content on our Website, we may display your name (or username) and content publicly (with your consent).

4.2 Using Non-Personal Information

Non-Personal Information is primarily used to improve the Website and Services, as it cannot identify you individually. We use it to:

• Analyze Usage Trends: Understand how users navigate the Website, which pages are most popular, and where users may encounter issues (e.g., high bounce rates on a specific page).
• Optimize Performance: Identify technical problems (e.g., slow-loading pages) and improve the Website’s speed, functionality, and compatibility with different devices and browsers.
• Develop New Products and Services: Use aggregate data to identify user needs (e.g., demand for a specific type of product) and inform the development of new offerings.
• Create Anonymized Reports: Generate reports for internal use or sharing with partners (e.g., retailers) that contain aggregate data (e.g., “10,000 users purchased lawn mowers in Q3”) but no Personal Information.
• Target Advertising: Use non-personalized data to display relevant ads (e.g., showing lawn care ads to users who visited the lawn care category page) without identifying individual users.

4.3 Legal Bases for Using Personal Information (For EEA and UK Users)

If you are located in the European Economic Area (EEA) or the United Kingdom (UK), we process your Personal Information based on one or more of the following legal bases (as required by the GDPR):

• Consent: When you explicitly agree to our use of your information (e.g., subscribing to marketing emails). You can withdraw your consent at any time (see Section 10.3).
• Performance of a Contract: When we need to use your information to fulfill an order or provide services you requested (e.g., processing your purchase, delivering your product).
• Legitimate Interest: When our use of your information is necessary for our legitimate business interests (e.g., improving the Website, preventing fraud) and does not override your privacy rights.
• Legal Obligation: When we are required by law to process your information (e.g., complying with a subpoena, filing tax returns).

We regularly review our legitimate interests to ensure they are proportional and do not infringe on your rights. If you have questions about the legal basis for a specific use of your information, please contact us (see Section 17).

5. How We Store Your Information

We take data security seriously and use industry-standard measures to store your information securely. Below is information about how we store your data, including storage locations, security measures, and data retention periods.

5.1 Storage Locations

Your Personal Information may be stored on servers located in the United States, the EEA, the UK, or other countries where we or our Service Providers operate. If your information is transferred to a country outside your region (e.g., from the EEA to the US), we ensure that the transfer is compliant with applicable data protection laws. For example:

• For EEA/UK users, we use Standard Contractual Clauses (SCCs) approved by the European Commission or rely on adequacy decisions (e.g., the UK’s adequacy decision for the US) to ensure your data is protected to the same standard as in the EEA/UK.
• For users in other regions (e.g., California), we comply with data transfer requirements under the CCPA and other applicable laws.

We only transfer your information to countries with robust data protection laws or to Service Providers that agree to protect your data in accordance with this policy.

5.2 Security Measures

We implement a range of technical, administrative, and physical security measures to protect your Personal Information from unauthorized access, use, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your device and our Website is encrypted using Transport Layer Security (TLS) 1.2 or higher (you can verify this by looking for the “https://” prefix and padlock icon in your browser’s address bar). We also encrypt sensitive data (e.g., payment information, passwords) when stored on our servers using AES-256 encryption.
• Secure Servers: Our servers are hosted by reputable third-party providers with strict security protocols, including firewalls, intrusion detection systems, and regular security audits.
• Access Controls: Only authorized employees, contractors, or Service Providers who need access to your Personal Information to perform their job functions (e.g., processing orders, providing customer support) are allowed to access it. These individuals are required to sign confidentiality agreements and undergo security training.
• Regular Audits and Updates: We conduct regular security audits of our systems and processes to identify and address vulnerabilities. We also update our software, plugins, and security tools regularly to protect against new threats.
• Fraud Prevention Tools: We use fraud detection software to monitor for unusual activity (e.g., multiple orders from the same IP address, suspicious payment details) and take action to prevent unauthorized access.

While we take all reasonable steps to protect your information, no security system is 100% foolproof. We cannot guarantee that your information will never be accessed, disclosed, or altered by unauthorized third parties. If a data breach occurs, we will notify you and relevant authorities as required by law (see Section 5.4).

5.3 Data Retention

We retain your Personal Information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law (e.g., tax records, warranty claims). The retention period for each type of information is based on:

• The purpose of the collection (e.g., we retain order information until the warranty period expires and tax records are no longer required by law).
• Legal obligations (e.g., we may need to retain certain financial records for 7 years to comply with tax laws).
• Your consent (e.g., we retain your email address for marketing purposes until you opt out).

When your information is no longer needed, we securely delete or anonymize it. For example:

• Account Information: If you delete your account, we will delete your name, email address, and purchase history within 30 days, unless we are required to retain it for legal or tax purposes.
• Marketing Information: If you opt out of marketing communications, we will remove your email address from our marketing lists immediately, but may retain a record of your opt-out to comply with legal requirements.
• Warranty Information: We retain product registration and warranty claims for the duration of the warranty period plus 2 years, to handle any post-warranty inquiries or claims.

If you have questions about how long we retain a specific type of information, please contact us (see Section 17).

5.4 Data Breach Notification

In the event of a data breach that affects your Personal Information, we will:

• Investigate the breach promptly to determine the scope, cause, and impact.
• Take immediate steps to contain the breach and prevent further unauthorized access.
• Notify you via email, text message, or postal mail (depending on the contact information we have) within the time frame required by law (e.g., 72 hours for EEA/UK users under GDPR).
• Provide you with information about the breach (e.g., what information was exposed, steps you can take to protect yourself, such as changing passwords).
• Notify relevant regulatory authorities (e.g., the Information Commissioner’s Office in the UK, the California Attorney General) if required by law.

We will also provide updates as the investigation progresses, if new information becomes available.

6. Cookies and Tracking Technologies

We use cookies and other tracking technologies to improve your experience on the Website, personalize content, and analyze usage. This section explains what cookies are, the types of cookies we use, and how you can manage them.

6.1 What Are Cookies?

Cookies are small text files that are stored on your device (computer, smartphone, tablet) when you visit a website. They are widely used to make websites work more efficiently, remember user preferences, and provide information to website owners. Cookies can be “session cookies” (deleted when you close your browser) or “persistent cookies” (remain on your device for a set period or until you delete them).

6.2 Types of Cookies We Use

We use three main types of cookies on our Website:

• Essential Cookies: These cookies are necessary for the Website to function properly. They enable basic features like logging in, navigating pages, and processing orders. Without these cookies, the Website may not work as intended. Examples include cookies that remember your login status or keep track of items in your shopping cart.
• Performance Cookies: These cookies collect information about how you use the Website (e.g., which pages you visit, how long you stay on a page, if you encounter errors). We use this information to improve the Website’s performance and usability. For example, if many users struggle to find the checkout button, we may redesign that page. Performance cookies do not collect Personal Information—they are anonymized.
• Marketing Cookies: These cookies are used to deliver personalized marketing content to you, both on our Website and on third-party websites. They track your browsing behavior (e.g., which products you view) to show you relevant ads or promotions. For example, if you view a lawn mower on our Website, you may see ads for that lawn mower on social media or other websites.

We also use web beacons (as mentioned in Section 3.2) to track the effectiveness of our marketing emails (e.g., whether you open an email or click a link) and web pages.

6.3 Third-Party Cookies

Some cookies on our Website are set by third parties, not by us. These include:

• Payment Processors: Cookies set by our payment partners (e.g., PayPal, Stripe) to process payments securely.
• Analytics Providers: Cookies set by tools like Google Analytics to collect usage data (we use this data to improve the Website).
• Social Media Platforms: Cookies set by social media buttons (e.g., Facebook Like, Instagram Share) to enable sharing and track interactions.
• Advertising Networks: Cookies set by ad networks (e.g., Google Ads, Facebook Ads) to deliver targeted ads.

We do not control third-party cookies, and their use is governed by the privacy policies of the third parties that set them. We recommend reviewing the privacy policies of these third parties to understand how they use cookies.

6.4 Managing Cookies

You have the right to control which cookies are stored on your device. You can manage cookies through your browser settings:

• Block All Cookies: Most browsers allow you to block all cookies (essential cookies may still be required for the Website to work).
• Block Third-Party Cookies: You can choose to allow first-party cookies (set by our Website) but block third-party cookies.
• Delete Cookies: You can delete existing cookies from your browser at any time.
• Receive Notifications: You can set your browser to notify you when a cookie is being set.

The steps to manage cookies vary by browser. Here are links to instructions for common browsers (note: no URLs, but general guidance):

• Chrome: Go to Settings > Privacy and security > Cookies and other site data.
• Safari: Go to Preferences > Privacy > Manage Website Data.
• Firefox: Go to Settings > Privacy & Security > Cookies and Site Data.
• Edge: Go to Settings > Cookies and site permissions > Manage and delete cookies and site data.

If you block or delete cookies, some features of the Website may not work properly (e.g., you may need to log in every time you visit, or your shopping cart may not be saved). You can still use most of the Website’s basic functions, but your experience may be less personalized.

We also provide a cookie consent banner on the Website when you first visit. You can choose to accept all cookies, reject non-essential cookies, or customize your preferences (e.g., allow performance cookies but reject marketing cookies). Your choice is saved, but you can change it at any time by clicking the “Cookie Settings” link in the footer of the Website.

7. Disclosure of Your Information to Third Parties

We do not sell your Personal Information to third parties for marketing purposes without your explicit consent. However, we may disclose your information to certain third parties in the following circumstances:

7.1 Service Providers

We share your Personal Information with Service Providers who help us operate our Website, process orders, or provide services. These Service Providers are contractually obligated to use your information only to perform the services we hire them for, and to protect your information in accordance with this policy. Examples of Service Providers include:

• Payment Processors: Companies like PayPal, Stripe, or credit card processors that handle payment transactions. We share your payment details (e.g., card number, billing address) with these providers to process your order securely.
• Shipping Carriers: Companies like UPS, FedEx, or USPS that deliver your products. We share your shipping address and contact information with these carriers to ensure your order is delivered correctly.
• Email Marketing Platforms: Tools like Mailchimp or Klaviyo that send our newsletters and promotional emails. We share your email address and marketing preferences with these platforms to deliver communications.
• Customer Support Tools: Software like Zendesk or Freshdesk that help us manage customer inquiries. We share your contact information and message history with these tools to provide support.
• Analytics Providers: Tools like Google Analytics that collect usage data. We share anonymized or aggregated data with these providers to improve the Website.
• Fraud Prevention Services: Companies that help detect and prevent fraudulent activities. We share your order details, IP address, and device information with these services to protect against fraud.

7.2 Legal and Regulatory Authorities

We may disclose your Personal Information to legal or regulatory authorities if:

• We are required to do so by law (e.g., in response to a subpoena, court order, or government request).
• We believe disclosure is necessary to comply with a legal obligation, protect our rights or property, or prevent harm to others (e.g., reporting illegal activity, responding to a data breach).
• We receive a valid request from a law enforcement agency investigating fraud, theft, or other criminal activity.

We will only disclose the minimum amount of information necessary to comply with the request, and we will challenge any unreasonable or overly broad requests if permitted by law.

7.3 Business Transfers

If we are involved in a merger, acquisition, sale of assets, bankruptcy, or other business transfer, your Personal Information may be transferred to the new owner or entity as part of the transaction. We will notify you via email or a prominent notice on the Website before your information is transferred, and we will ensure the new owner agrees to protect your information in accordance with this policy.

7.4 With Your Consent

We may disclose your Personal Information to third parties with your explicit consent. For example, if you agree to share your information with a partner company for a joint promotion, we will only share the information you authorize.

7.5 Anonymized or Aggregated Data

We may share anonymized or aggregated data (which cannot identify you) with third parties for research, marketing, or other purposes. For example, we may share data with retailers about which products are most popular, or with advertisers about the effectiveness of a campaign.

8. Third-Party Links and Services

Our Website may contain links to third-party websites, services, or applications (e.g., social media platforms, retailers, blogs). This Privacy Policy does not apply to these third parties—we are not responsible for their privacy practices or the content of their websites.

When you click on a link to a third-party website, you will be directed to that website, and your information may be collected by the third party. We recommend reviewing the privacy policy of any third-party website you visit to understand how they collect, use, and protect your information.

Examples of third-party links you may find on our Website include:

• Social media links (e.g., Facebook, Instagram, Twitter) to our official pages.
• Links to retail partners where you can purchase our products.
• Links to blog posts or articles from third-party publications.
• Links to warranty registration portals or service providers.

We do not endorse or control these third parties, and we are not liable for any loss or damage resulting from your use of their websites or services.

9. Your Rights Regarding Your Information

Depending on your location, you have certain rights regarding your Personal Information under applicable data protection laws (e.g., GDPR for EEA/UK users, CCPA for California users). Below is an overview of these rights and how to exercise them.

9.1 Right to Access

You have the right to request a copy of the Personal Information we hold about you. This includes information like your account details, purchase history, and marketing preferences. We will provide you with a clear, understandable copy of your information free of charge (we may charge a reasonable fee for additional copies if permitted by law).

9.2 Right to Correction

If your Personal Information is inaccurate or incomplete, you have the right to request that we correct or update it. For example, if your shipping address has changed, you can ask us to update it in our records. You can also update most of your information directly through your Website account (e.g., editing your profile, changing your password).

9.3 Right to Deletion (“Right to Be Forgotten”)

In certain circumstances, you have the right to request that we delete your Personal Information. This right applies if:

• The information is no longer needed for the purpose it was collected.
• You withdraw your consent (and there is no other legal basis for processing).
• You object to the processing (and there are no overriding legitimate interests).
• The information was collected unlawfully.
• We are required to delete it by law.

We may not be able to delete your information if we need to retain it for legal, tax, or security purposes (e.g., retaining order records for warranty claims). If we cannot delete your information, we will anonymize it so it can no longer identify you.

9.4 Right to Data Portability

You have the right to request that we transfer your Personal Information to another organization or to you in a structured, machine-readable format (e.g., CSV file). This right applies if:

• The processing is based on your consent or a contract.
• The processing is done automatically (not manually).

We will provide your information in a format that is easy to transfer to another service provider, and we will cooperate with the receiving organization if requested.

9.5 Right to Object

You have the right to object to our processing of your Personal Information in the following cases:

• Processing based on legitimate interest (you can object if you believe your privacy rights override our legitimate interests).
• Processing for direct marketing purposes (you can opt out of marketing communications at any time).

If you object, we will stop processing your information unless we can demonstrate compelling legitimate grounds for the processing that override your rights, or we need to process the information for legal purposes.

9.6 Right to Withdraw Consent

If you have given us consent to process your Personal Information (e.g., for marketing), you can withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing based on consent before it was withdrawn. For example, if you withdraw consent for marketing emails, we will stop sending them, but any emails sent before the withdrawal are still lawful.

9.7 Right to Lodge a Complaint

If you believe we have violated your privacy rights, you have the right to lodge a complaint with a data protection authority in your country of residence. For example:

• EEA users: Contact your national data protection authority (e.g., ICO in the UK, CNIL in France).
• California users: Contact the California Attorney General’s Office or the California Consumer Privacy Agency (CCPA).

We encourage you to contact us first to resolve any issues before lodging a complaint—we will work with you to address your concerns.

9.8 How to Exercise Your Rights

To exercise any of the above rights, please contact us using the contact information provided in Section 17. We may ask you to provide proof of identity (e.g., a copy of your ID, a confirmation email to your registered address) to ensure we are disclosing or modifying information for the correct person. This is a security measure to protect your information from unauthorized access.

We will respond to your request within the time frame required by law (e.g., 30 days for CCPA, 1 month for GDPR). If we need more time to process your request (e.g., if it is complex), we will notify you and provide a new deadline.

10. Marketing Communications

We love keeping you updated about our latest products, promotions, and tips—but we only want to send you communications you want to receive. This section explains how we handle marketing communications and how you can opt out.

10.1 Types of Marketing Communications

We may send you the following types of marketing communications:

• Emails: Newsletters, product announcements, special offers, discount codes, and information about sales or events.
• Text Messages: Short updates about promotions or limited-time offers (only if you have explicitly opted in to text messages).
• Postal Mail: Catalogs, flyers, or other promotional materials (only if you have provided your postal address and consented to receive mail).
• Push Notifications: Alerts on your mobile device about new products or offers (only if you have downloaded our app and enabled push notifications).

10.2 Consent for Marketing Communications

We will only send you marketing communications if you have given us your consent. You can give consent in the following ways:

• Checking a box to subscribe to newsletters when creating an account or making a purchase.
• Opting in to text messages by entering your phone number and agreeing to receive texts.
• Signing up for our newsletter on the Website (e.g., via a pop-up form or footer sign-up).
• Providing your postal address and agreeing to receive mailings.

We will never send you marketing communications without your consent, and we will clearly inform you of what you are subscribing to (e.g., “Subscribe to our newsletter to receive 10% off your first order and weekly product tips”).

10.3 Opting Out of Marketing Communications

You can opt out of marketing communications at any time—unsubscribing is easy:

• Emails: Click the “Unsubscribe” link at the bottom of any marketing email. You will be directed to a page where you can confirm your opt-out, or you can reply to the email with “Unsubscribe” in the subject line.
• Text Messages: Reply to the text message with “STOP” or “UNSUBSCRIBE.” You may receive a confirmation text letting you know you have been unsubscribed.
• Postal Mail: Follow the instructions on the mailing (e.g., return the card with “Remove” written on it) or contact us to request removal from our postal list.
• Push Notifications: Disable push notifications in your device settings (e.g., Settings > Notifications > [App Name] > Toggle off Allow Notifications).

Opting out of marketing communications will not affect transactional communications (e.g., order confirmations, shipping updates)—these are necessary to provide the Services and you cannot opt out of them.

We will process your opt-out request within 10 business days (or sooner, if required by law). After you opt out, we will not send you any further marketing communications, but we may retain a record of your opt-out to comply with legal requirements.

11. Children’s Privacy

Our Website and Services are not intended for children under the age of 13 (or 16, if you are located in the EEA/UK). We do not knowingly collect Personal Information from children under these ages. If we learn that we have collected Personal Information from a child without parental consent, we will delete that information immediately.

11.1 Parental Consent

If a child under 13 (or 16 in EEA/UK) wants to use our Website (e.g., to purchase a product), they must have the consent of a parent or guardian. Parents or guardians can contact us to:

• Request a copy of any Personal Information we may have collected about their child.
• Request that we delete their child’s Personal Information.
• Refuse further collection or use of their child’s information.

11.2 How We Protect Children’s Privacy

We take steps to prevent children from accessing areas of the Website that require Personal Information (e.g., account registration, purchases) without parental consent. For example, our account registration form asks for a date of birth, and if the user indicates they are under 13, they are directed to a page explaining that parental consent is required.

If you believe your child has provided us with Personal Information without your consent, please contact us (see Section 17) and we will take immediate action to delete the information.

12. International Data Transfers

As mentioned in Section 5.1, your Personal Information may be transferred to countries outside your region. We only transfer your information to countries that have adequate data protection laws, or to Service Providers that agree to protect your data in accordance with this policy and applicable law.

12.1 Transfers to the United States

If you are located in the EEA, UK, or another country with strict data protection laws, your information may be transferred to the United States (where our servers or Service Providers are located). To ensure compliance with GDPR and other laws, we use:

• Standard Contractual Clauses (SCCs): Pre-approved contracts issued by the European Commission that ensure third parties in the US protect your data to the same standard as in the EEA/UK.
• Adequacy Decisions: If the European Commission or UK government has issued an adequacy decision for the US (recognizing that US data protection laws are equivalent to EEA/UK standards), we rely on that decision for transfers.

12.2 Transfers to Other Countries

If your information is transferred to a country without an adequacy decision, we will use SCCs, binding corporate rules (BCRs), or other approved mechanisms to ensure your data is protected. We will never transfer your information to a country where we believe it will not be adequately protected.

If you have questions about international data transfers, please contact us (see Section 17).

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technology. When we make material changes to the policy, we will notify you in one or more of the following ways:

• Sending an email to your registered email address (if you have an account).
• Posting a prominent notice on the Website (e.g., a banner at the top of the homepage).
• Updating the “Last Updated” date at the top of this policy.

Material changes include:

• New ways of collecting or using your information.
• Changes to how we disclose your information to third parties.
• Updates to your rights or how to exercise them.
• Changes to data retention periods or security measures.

Non-material changes (e.g., minor clarifications) will not be notified separately but will still be reflected in the updated policy. We encourage you to review this policy regularly to stay informed about how we handle your information.

Your continued use of the Website or Services after the effective date of the updated policy constitutes your acceptance of the changes. If you do not agree with the changes, please stop using the Website or Services and contact us to close your account.

14. Your California Privacy Rights (CCPA/CPRA)

If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). This section summarizes those rights and how to exercise them.

14.1 Right to Know

You have the right to request that we disclose:

• The categories of Personal Information we have collected about you.
• The sources from which we collected the information.
• The business purposes for collecting or disclosing the information.
• The categories of third parties with whom we shared the information.
• The specific pieces of Personal Information we have collected about you.

14.2 Right to Delete

You have the right to request that we delete your Personal Information, subject to certain exceptions (e.g., we may need to retain the information to fulfill a contract, comply with legal obligations, or protect our rights).

14.3 Right to Opt Out of Sale or Sharing

We do not sell your Personal Information to third parties for marketing purposes. However, under the CCPA/CPRA, “sharing” includes disclosing your information to third parties for cross-context behavioral advertising (e.g., targeted ads on other websites). You have the right to opt out of this sharing.

14.4 Right to Non-Discrimination

We will not discriminate against you for exercising your CCPA/CPRA rights. This means we will not:

• Deny you access to the Website or Services.
• Charge you a higher price or provide lower quality services.
• Offer you different terms or conditions.

14.5 How to Exercise Your California Rights

To exercise your CCPA/CPRA rights, please contact us using the contact information in Section 17. You can make a request:

• Yourself.
• Through an authorized agent (you will need to provide proof of authorization).

We may ask you to verify your identity (e.g., by providing your email address, phone number, or other information) to ensure we are responding to the correct person. We will respond to your request within 45 days (we may extend this by 45 days if necessary, and we will notify you of the extension).

15. Do Not Track (DNT) Signals

Some browsers allow you to send a “Do Not Track” (DNT) signal, which indicates that you do not want your browsing activity tracked across websites. Currently, there is no universal standard for how websites should respond to DNT signals. Our Website does not currently recognize or respond to DNT signals, but we do not track your browsing activity across unrelated websites without your consent.

If you want to limit tracking, you can manage cookies through your browser settings (see Section 6.4) or opt out of targeted advertising through third-party tools (e.g., the Digital Advertising Alliance’s Consumer Choice Page or the Network Advertising Initiative’s Opt-Out Page).

16. Data Protection for EEA/UK Users (GDPR)

For users located in the EEA or UK, the General Data Protection Regulation (GDPR) provides additional protections for your Personal Information. This section summarizes key GDPR requirements and how we comply with them.

16.1 Lawful Bases for Processing

As outlined in Section 4.3, we only process your Personal Information if we have a valid legal basis (consent, contract, legitimate interest, or legal obligation). We document all legal bases for processing and review them regularly to ensure they remain valid.

16.2 Data Minimization

We only collect and process the minimum amount of Personal Information necessary to fulfill the purposes for which it was collected. We do not collect extraneous information that is not needed for the stated purpose.

16.3 Transparency

We provide clear, accessible information about how we collect, use, and disclose your information (through this Privacy Policy and other notices on the Website). We ensure that any consent you provide is freely given, specific, informed, and unambiguous.

16.4 Accountability

We take responsibility for ensuring compliance with the GDPR and maintain records of our data processing activities (e.g., what information we collect, who we share it with, how long we retain it). We conduct regular data protection impact assessments (DPIAs) for high-risk processing activities (e.g., large-scale marketing campaigns).

16.5 Data Protection Officer (DPO)

If required by law, we have appointed a Data Protection Officer (DPO) to oversee our data protection practices. You can contact the DPO using the contact information in Section 17 if you have questions about GDPR compliance or want to exercise your GDPR rights.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, your Personal Information, or your rights, please contact us using the following information:

• Email: privacy@mysunjoe.com
• Phone: [Insert Phone Number]
• Mailing Address: [Insert Physical Address]
• Contact Form: You can also submit a request through the “Contact Us” form on the Website.

We will respond to your inquiry within 10 business days (or sooner, if required by law). If you are submitting a request to exercise your rights (e.g., access, deletion), please include as much detail as possible (e.g., your full name, email address, account username) to help us process your request quickly.

18. Additional Information

18.1 Severability

If any provision of this Privacy Policy is found to be invalid or unenforceable by a court of law, the remaining provisions will remain in full force and effect.

18.2 Governing Law

This Privacy Policy is governed by the laws of [Insert Governing Law, e.g., the State of California, USA or England and Wales], without regard to its conflict of law provisions.

18.3 Entire Agreement

This Privacy Policy constitutes the entire agreement between you and us regarding the collection, use, and disclosure of your information, and supersedes any prior agreements or understandings.