Policies
User data policy
How we collect, use, and protect your personal information.
Why we collect your information
Joy in a Box collects and processes personal information as reasonably necessary to manage enquiries, process orders, arrange delivery, communicate with customers and operate its business.
How we protect it
Personal information will be handled in accordance with applicable data-protection law, including the Protection of Personal Information Act (POPIA), where applicable.
Marketing emails
Customers who subscribe to marketing communications may unsubscribe using the mechanism provided in those communications.
Cookies and similar technologies
Our website stores a small amount of information in your browser so that it works properly. Most of it is kept in your browser's local storage rather than in cookies, but we treat it the same way and explain it here. Essential (always on) These are needed for the website to work and cannot be switched off: • Cart: remembers the items in your cart between visits. • Favourites: remembers the pieces you have saved. • Enquiry list: remembers the pieces you have added to an enquiry. • Login session: keeps you signed in to your account. Sign-in is provided by Supabase, our database and account provider. • Cookie choice: remembers the choice you made in our cookie notice, together with the date it was made. • Security check: Cloudflare Turnstile helps protect our forms from spam and abuse. To do this, it may process technical information about your browser and device. Analytics (only with your permission) • Cloudflare Web Analytics: if you allow analytics, we use it to count visits and see which pages are viewed, so that we can improve the website. Cloudflare states that this service does not use cookies or local storage and does not track you across other websites. It stays off unless you choose to allow it. Other services • Google Fonts: the fonts on our website are loaded from Google, so your browser shares your IP address with Google when a page loads. • PayFast: when you choose to pay, you are taken to PayFast's secure payment page. PayFast may set its own cookies on its website, under its own privacy policy. Some of these providers may process information outside South Africa. We do not use advertising or marketing cookies. Your choices You can change your choice at any time using the "Cookie settings" link at the bottom of every page. If you withdraw permission for analytics, it stops straight away. You can also clear or block stored information in your browser settings, but parts of the website, such as your cart and sign-in, may then not work.
Sharing your information
[Placeholder — couriers, payment providers, and other third parties you share data with.]
Your rights
[Placeholder — how customers can access, correct, or delete their data under POPIA.]
Contact
[Placeholder — who to contact about privacy, e.g. your Information Officer.]
Questions? Email hello@joyinabox.co.za or call +27 73 992 3192.