Privacy policy

Last updated: 12 August 2026

JoyClik™ is a New Zealand digital wellness business offering counselling-informed and evidence-informed digital journals, guides, workbooks and practical educational tools.

This Privacy Policy explains how JoyClik™ collects, uses, stores and shares personal information when you visit joyclik.com, purchase or access a digital product, create a customer account, subscribe to our emails, use our website chat or otherwise contact us.

JoyClik™ is responsible for the personal information described in this policy unless a service provider processes information separately for its own stated purposes. This policy explains our privacy practices; it does not treat your use of the website as blanket consent to every form of data processing.

Information We Collect

Depending on how you interact with JoyClik™, we may collect:

  • identity and contact information, such as your name, email address, billing address, country, telephone number if provided and customer-account details;
  • order and transaction information, including products purchased, order history, payment status, currency, discounts, refunds and relevant tax information;
  • digital-delivery information, such as delivery status, download links, access attempts and information needed to restore access or resolve a download problem;
  • communications you send through email, website forms or Shopify Inbox, including chatbot and customer-support messages;
  • marketing information, including subscription status, consent records, email preferences and campaign engagement such as delivery, opens, clicks and unsubscribes, where enabled and permitted;
  • device and website-use information, such as IP address, browser type, device identifiers, approximate location, referral source, pages viewed, links selected and interactions with our website;
  • cookie, pixel, analytics and advertising information, subject to your choices and applicable law; and
  • information necessary to protect our website, detect fraud, enforce our terms and comply with legal obligations.

Payment information is processed by Shopify Payments, PayPal or another payment method displayed at checkout. JoyClik™ does not directly receive or store your complete payment-card number.

JoyClik™ does not receive your Shopify customer-account password.

How We Collect Information

We collect personal information:

  • directly from you when you place an order, create an account, subscribe, use website chat, complete a form or contact us;
  • automatically when you use our website, through cookies, pixels, server logs and similar technologies;
  • from Shopify and connected service providers when they process an order, payment, account, download, email, advertising interaction or support request;
  • from Google and Meta in connection with analytics, advertising performance and campaign interactions, subject to applicable privacy controls; and
  • from referral sources or technical systems that show how visitors reached or interacted with our website.

Where we receive personal information indirectly, we take reasonable steps to provide the information required by applicable law, including information about the collection, its purpose, intended recipients and your access and correction rights.

How and Why We Use Personal Information

We use personal information to:

  • process orders and provide purchased digital products;
  • create and manage customer accounts;
  • send order, payment, delivery and service communications;
  • restore digital access and respond to customer enquiries;
  • administer refunds, complaints and consumer-law remedies;
  • operate, secure and improve our website and services;
  • understand website and product interest through analytics;
  • measure and improve advertising;
  • send marketing communications where permitted;
  • prevent fraud, misuse and unauthorised access;
  • maintain accounting, tax and business records;
  • establish, exercise or defend legal rights; and
  • comply with applicable legal and regulatory obligations.

For customers in the United Kingdom and other places where a legal basis must be identified, we generally rely on:

  • Contract: where processing is necessary to complete your purchase, deliver your digital product, manage your account or provide purchase-related support;
  • Legal obligation: where information is needed for tax, accounting, consumer protection, privacy or other legal requirements;
  • Legitimate interests: where necessary to operate and secure JoyClik™, prevent fraud, understand website performance, improve services, maintain appropriate business records or protect legal rights, provided those interests are not overridden by your rights and freedoms; and
  • Consent: for marketing, non-essential cookies, personalised advertising or other processing where consent is required.

You may withdraw consent at any time. Withdrawal does not affect processing already carried out lawfully before consent was withdrawn.

Sensitive and Wellbeing Information

JoyClik™ does not ask customers to provide medical records, counselling notes, diagnostic information or detailed personal accounts of their mental health.

Please do not include unnecessary health information, crisis information or other sensitive personal details in website chat, general forms or customer-support emails. These channels are provided for product and customer support and are not confidential counselling, therapy, diagnosis or crisis-support services.

If you voluntarily provide sensitive information, we will use it only where reasonably necessary to respond, protect someone where legally permitted or required, or comply with the law. We will not use sensitive wellbeing information for personalised advertising.

Shopify and Shopify Network Intelligence

Our store is hosted by Shopify. Shopify processes personal information when you visit JoyClik™, create an account, use checkout or make a purchase.

JoyClik™ has Shopify Network Intelligence enabled. Shopify may use information about your activity with JoyClik™, together with information from your interactions with Shopify and other Shopify merchants, to provide Enhanced Services. These services may include:

  • improving and personalising shopping experiences;
  • improving store performance and Shopify services;
  • providing analytics and reporting;
  • supporting fraud prevention and security; and
  • improving advertising relevance and measurement.

Shopify may process information as a service provider acting for JoyClik™ and, for some purposes, as a separate controller or business responsible for its own processing.

You can learn more in the Shopify Consumer Privacy Policy and manage certain Shopify-specific privacy rights through Shopify Privacy Controls.

Cookies, Analytics and Advertising

JoyClik™ and its providers use cookies, pixels and similar technologies to operate the website, remember preferences, understand website performance, measure campaigns and support advertising.

These technologies may include:

  • Shopify cookies, pixels and customer-privacy tools;
  • Google Analytics;
  • Google advertising technologies;
  • Meta advertising technologies; and
  • technologies used by connected Shopify services and apps.

Necessary technologies support functions such as security, checkout, customer accounts, privacy preferences and digital delivery. Non-essential analytics and advertising technologies are used in accordance with your consent choices and applicable law.

Our cookie banner is available across all configured regions. You can accept, reject or adjust non-essential categories and later change your selection through the Cookie Preferences control on our website.

For more information, please read our Cookie Notice.

Email, Chat and Digital Delivery Providers

We use:

  • Klaviyo for marketing emails, relevant confirmation or transactional messages, subscription preferences and email engagement information;
  • Cloudflare and Google/Gmail for email-routing infrastructure and to receive, send and manage JoyClik™ business communications;
  • Shopify Inbox and the Shopify Inbox agent to provide website chat, AI-assisted responses and customer support; and
  • Uplinkly Digital Downloads to provide digital-delivery emails, download links and access support.

Marketing emails are sent only where we have consent or another lawful permission. You can unsubscribe using the link in a marketing email or by contacting us. Unsubscribing from marketing does not prevent necessary order, payment, delivery, account or policy communications.

When you use our website chat, Shopify processes your chat communications in real time to generate AI-assisted responses and to improve the quality of the Shopify Inbox agent over time. Conversation history is available to JoyClik™ for customer-support, quality and appropriate record-keeping purposes.

The chat automatically displays a notice when you are interacting with AI. An automated conversation may be transferred to JoyClik™ staff where human assistance is needed and available.

Please do not send passwords, complete payment-card details or unnecessary personal health information through website chat or email.

When We Share Personal Information

We may share relevant personal information with:

  • Shopify, including Shopify Payments, customer accounts, Shopify Inbox and Shopify Network Intelligence;
  • PayPal and other payment methods selected at checkout;
  • Uplinkly Digital Downloads;
  • Klaviyo;
  • Cloudflare and Google/Gmail;
  • Google Analytics, Google advertising services and Meta advertising services;
  • fraud-prevention, security and technical-support providers;
  • accountants, legal advisers and other professional advisers where necessary;
  • government, regulatory, court or law-enforcement authorities where disclosure is legally required or permitted; and
  • a genuine purchaser, successor or adviser involved in a proposed sale, restructuring or transfer of the JoyClik™ business, subject to appropriate confidentiality and legal safeguards.

We disclose only the information reasonably necessary for the relevant purpose.

Sale, Sharing and Targeted Advertising

JoyClik™ does not sell personal information in exchange for money.

However, some privacy laws define “sale” or “sharing” more broadly. The use of Shopify Network Intelligence, Google, Meta and other advertising or analytics technologies may be treated as selling, sharing or processing personal information for targeted advertising under certain United States state privacy laws.

Where these rights apply, you can opt out through our Your Privacy Choices page. Shopify’s privacy tools may also recognise a supported Global Privacy Control signal in regions where it is required.

You can separately control Shopify’s use of information for certain advertising purposes through Shopify Privacy Controls.

We will not discriminate against you for exercising an applicable privacy right.

International Processing and Transfers

JoyClik™ is based in New Zealand. Our Shopify settings currently identify the United States as the primary geographic storage location for store data.

Shopify and our other providers may store or process personal information in the United States and in other countries where they, their related companies or their approved subprocessors operate. Information processed overseas may be subject to the laws of that country and, where legally authorised, may be accessible to courts, regulators or law-enforcement authorities there.

Where required, we take reasonable steps to use providers and transfer arrangements that protect personal information. Depending on the applicable law, safeguards may include:

  • privacy and data-processing agreements;
  • contractual requirements providing comparable protection;
  • standard contractual clauses or recognised transfer addenda;
  • transfers to countries recognised as providing adequate protection; or
  • another transfer mechanism permitted by law.

You may contact our Privacy Officer for further information about relevant transfer safeguards.

How Long We Keep Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, security and business requirements.

In general:

  • order, transaction, tax and accounting records are normally retained for at least seven years, or longer where required by law or a continuing dispute;
  • customer-account information is retained while the account remains active and afterwards where needed for orders, support, security or legal obligations;
  • digital-delivery and access records are retained for as long as reasonably needed to provide access, prevent misuse and resolve delivery issues;
  • support, email and chat records are retained for as long as reasonably needed to resolve the enquiry, maintain an appropriate service record or protect legal rights;
  • marketing information is retained until you unsubscribe or withdraw consent, after which we may retain a minimal suppression record so that your preference continues to be respected;
  • consent and privacy-choice records are retained where needed to demonstrate and honour your choices; and
  • analytics, cookie and advertising information is retained according to our configured settings and the relevant provider’s retention practices.

When information is no longer required, we take reasonable steps to delete, anonymise or securely dispose of it.

Security and Privacy Breaches

We use reasonable administrative, technical and organisational safeguards to protect personal information. These include access controls, secure platforms, account protections and service providers selected with regard to their security practices.

No website, transmission method or storage system can be guaranteed to be completely secure. If a privacy breach occurs, we will investigate it and notify affected individuals and relevant authorities where required by law, including where a breach has caused or is likely to cause serious harm.

You are responsible for keeping your customer-account credentials secure and for contacting us promptly if you suspect unauthorised access.

Your Privacy Rights

Depending on where you live and which laws apply, you may have the right to:

  • request access to personal information held about you;
  • request correction of inaccurate or incomplete information;
  • request deletion of certain information;
  • request a portable copy of certain information;
  • object to or restrict certain processing;
  • withdraw consent;
  • unsubscribe from marketing;
  • manage non-essential cookies;
  • opt out of sale, sharing or targeted advertising;
  • ask about international-transfer safeguards;
  • use an authorised agent where permitted;
  • appeal certain decisions about a privacy request where applicable; and
  • complain to an appropriate privacy or data-protection authority.

These rights may be subject to identity verification and lawful exceptions. For example, we may need to retain order and transaction records for tax, accounting, fraud-prevention or legal purposes.

To exercise a right relating to JoyClik™, contact our Privacy Officer at care@joyclik.com. Please describe your request and provide enough information for us to identify the relevant records. We will respond within the period required by applicable law.

For rights relating to Shopify’s separate processing, use Shopify Privacy Controls.

Children’s Privacy

Our website, checkout, customer accounts and direct services are intended for adults.

Some JoyClik™ resources are designed for parents, caregivers, educators or other adults to use with children. Children should not make purchases, create customer accounts or submit personal information directly through our website.

We do not knowingly collect personal information directly from children. If you believe a child has provided personal information to JoyClik™, please contact our Privacy Officer. We will review the circumstances and delete or otherwise handle the information as required by law.

Privacy Questions and Complaints

Please contact our Privacy Officer first if you have a privacy question or complaint. We will review the matter fairly and respond within the period required by applicable law.

If you are not satisfied with our response, you may have the right to complain to the privacy or data-protection authority where you live. Relevant authorities may include:

  • the Office of the Privacy Commissioner in New Zealand;
  • the Information Commissioner’s Office in the United Kingdom;
  • the Office of the Privacy Commissioner of Canada or an applicable provincial authority;
  • the Office of the Australian Information Commissioner; or
  • an applicable United States state privacy regulator or Attorney General.

Changes to This Privacy Policy

We may update this Privacy Policy when our services, providers, legal obligations or privacy practices change.

We will update the date at the top of this policy and provide any additional notice required by law. If a change materially affects how we use information previously collected, we will take any further steps required by applicable law before applying that change.

Contact Our Privacy Officer

JoyClik™
Attention: Privacy Officer
Business location: Mount Maunganui, Tauranga, Bay of Plenty, New Zealand
Postal address: PO Box 10013, Bayfair, Tauranga 3152, New Zealand
Email: care@joyclik.com
Telephone: +64 22 564 6094
Website: https://www.joyclik.com