Privacy Policy
Version 1 · updated Oct 8, 2026
In short: we collect the information we need to run your account, process and deliver your orders, take payment and support you. Payments are handled by specialised processors such as Stripe and PayPal. We do not sell your personal information. Analytics and marketing cookies are used only with your consent, and you can ask us at any time to see, correct or delete your data.
1. Who is responsible for your data
The controller of your personal data is JOESAN INC, a company registered in the State of Wyoming, USA, which operates this store (JShop). For any privacy question or request, email [email protected].
2. What we collect
- Account details — name, email address, password (stored only as a secure hash), language and preferences.
- Order details — billing and shipping addresses, phone number, company name and tax or VAT number if you give them, the products you buy and your order history.
- Payment information — card and wallet payments are processed by Stripe and PayPal payments by PayPal; we receive a confirmation and limited details such as the card brand and last four digits, never your full card number. For cryptocurrency payments we keep the transaction hash, sending address and any proof of payment you upload.
- Returns and support — messages you send us, return requests and the photos you attach to them.
- Referrals — if you sign up through a sales representative's invitation link, we record which representative referred you.
- Technical data — IP address, browser and device information, and pages visited, collected through cookies and similar technologies (see section 5).
3. How we use it and why
- To create and manage your account and to process, ship and support your orders, returns and warranty claims — necessary to perform our contract with you.
- To take payment, prevent fraud and keep the store secure — our legitimate interests and, where applicable, legal obligations.
- To meet tax, accounting, customs and export control obligations — legal obligation.
- To answer your questions and send service messages about your orders — contract and legitimate interests.
- To send marketing emails and use analytics or marketing cookies — only with your consent, which you can withdraw at any time.
4. Who we share it with
We share personal data only as needed to run the store: with payment processors (Stripe, PayPal), with carriers and customs brokers to deliver your orders, with hosting, email and IT service providers who process data on our behalf, with manufacturers or their service partners when you ask us to help with a warranty claim, and with professional advisers or authorities where the law requires it. Our service providers may use your data only to provide their services to us. We do not sell your personal information, and we do not share it for cross-context behavioural advertising without your consent.
5. Cookies and consent
Essential cookies keep the store working — your session, cart, language and security — and are always on. Analytics and marketing cookies are set only if you accept them in the cookie banner. You can change your choice at any time through the Cookie settings link in the footer, from Account → Privacy, or by deleting cookies in your browser.
6. How long we keep it
We keep your account data while your account is open. Order, invoice and payment records are kept for as long as tax, accounting and other legal obligations require, even after an account is closed. Other data, such as support messages and return photos, is kept only as long as needed for the purpose it was collected for, or to establish or defend legal claims.
7. International transfers
We are based in the United States, and our service providers may process data in the United States and other countries. Where data protection law requires it, we rely on appropriate safeguards for these transfers, such as the European Commission's Standard Contractual Clauses.
8. Your rights
Depending on where you live — for example under the EU and UK GDPR or the California Consumer Privacy Act (CCPA/CPRA) — you may have the right to access your data, receive a copy of it, correct it, delete it, restrict or object to its processing, withdraw consent, and opt out of the sale or sharing of personal information (we do neither). You can download your data or ask for your account to be deleted yourself from Account → Privacy, or email [email protected]. We may need to verify your identity before acting on a request, and we will not treat you differently for exercising your rights. You may also lodge a complaint with your local data protection authority.
9. Security
We protect your data with encryption in transit, access controls and regular review of who can see what. Card data never reaches our servers. No system is perfectly secure, so please use a strong, unique password and tell us right away if you suspect unauthorised access to your account.
10. Children
This store is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, contact us and we will delete it.
11. Changes to this policy
We may update this policy. The version and the date of the last update are shown on this page, and we will notify you of significant changes by email or on the store.
12. Contact
For any question about this policy or your personal data, email [email protected] or use our contact form.