Privacy & Cookies
Last updated: [date]
Joylizt helps friends and family come together to celebrate someone's milestone moment. To do that, we handle some personal information about the people who create a Lizt, the people who contribute to one, and the person being celebrated. This notice explains what we collect, why, and the choices you have. Section 14 explains how we use cookies.
1. Who we are
Joylizt is operated by Joylizt Ltd, a company registered in England and Wales (company number 17483142), registered office 124 City Road, London, EC1V 2NX. We are the controller of your personal data.
Questions or requests: support@joylizt.com.
2. The information we collect
If you create a Lizt (organisers)
- Your name, email address and password when you save and share your Lizt.
- The details you enter about the occasion and the person you're celebrating (see below).
- Gift ideas, notes and messages you add, and your marketing preference.
If you contribute to a Lizt (contributors)
- Your name and email address when you claim a gift or leave a message.
- Which gifts you've claimed, and any messages, photos or memories you post.
- Whether you've asked for reminders, and your marketing preference.
About the person being celebrated (recipients)
The organiser tells us the recipient's name, the occasion and its date, and may add details like their interests, age or milestone, and photos. The recipient's email address is collected only if the organiser uses it to send them the finished Lizt.
When you use AI gift suggestions
The information you give us to generate ideas, such as the recipient's interests, the occasion and a budget, and the suggestions we return.
Automatically, when you use the site
Device and browser type, IP address, pages viewed, and clicks on retailer links. Some of this is collected through cookies (see section 14).
Please don't add sensitive information about anyone, such as health conditions, religious beliefs or sexual orientation, to a Lizt, a message or a suggestion request.
3. How we use it, and our lawful basis
| What we do | Why | Lawful basis |
|---|---|---|
| Create and run your account and your Lizts | To provide the service you asked for | Contract |
| Show a Lizt to the contributors the organiser shares it with | So people can see what's wanted and join in | Contract (organiser); legitimate interests (contributors and recipient) |
| Record the recipient's details and deliver the finished Lizt to them | The core purpose of a Lizt is to celebrate them | Legitimate interests |
| Send service emails, such as claim confirmations, reminders you opted into, and the date the Lizt closes | To make the Lizt work | Contract; legitimate interests |
| Generate AI gift suggestions | To help you find ideas quickly | Contract |
| Track clicks through to retailers | So we're paid commission and can see which ideas people use | Legitimate interests |
| Send marketing emails about Joylizt | To keep in touch about future occasions | Consent, which you can withdraw any time |
| Keep the service safe, handle reports and prevent misuse | To protect users and meet our legal duties | Legitimate interests; legal obligation |
| Understand how the site is used and improve it | To make Joylizt better | Consent (analytics cookies); legitimate interests (anonymised data) |
Where we rely on legitimate interests, we've weighed our interests against yours. You can ask us for details of that assessment.
4. A note for recipients
Most Lizts are a surprise, so you may be reading this after friends or family have already created one for you. They gave us your details to organise a celebration, and we only use them for that. When you receive your Lizt, you can ask us to see, correct or delete the information about you by emailing support@joylizt.com.
5. Retailer links
When you click a gift idea, you leave Joylizt and go to the retailer's site. Anything you buy there is between you and the retailer, and their privacy and cookie policies apply. Some links may be affiliate links, which means the retailer may pay us a small commission. If so, the retailer or affiliate network may use cookies on their own site to record that you came from us, under their own cookie settings. We don't receive your payment details.
6. AI suggestions
We use a third-party AI provider to generate gift suggestions. We send it only the details needed to produce ideas, and our contract stops it using that information to train its models. Suggestions are generated automatically, but they're only ideas. We don't use AI to make decisions that have a legal or similarly significant effect on you.
7. Who we share it with
We don't sell your personal data. We share it only with:
- People on the same Lizt. Contributors can see the organiser's name, the recipient's name and occasion, what's been claimed, and any messages and photos. Your email address isn't shown to other contributors.
- The recipient, who sees the finished Lizt, including messages and contributors' names.
- Service providers who help us run Joylizt, under contracts that require them to protect your data: [Supabase] (database and hosting), [Lovable] (website platform), [email provider] (emails), [AI provider] (gift suggestions) and [analytics provider].
- Affiliate networks and retailers, which receive click data, not your name or email.
- Authorities or advisers, if the law requires it or to protect our legal rights.
8. International transfers
Some of our providers process data outside the UK, including in the US. Where they do, we rely on UK adequacy regulations, including the UK Extension to the EU-US Data Privacy Framework, or on the UK International Data Transfer Agreement or Addendum. Ask us for details.
9. How long we keep it
- Account details: while your account is open, then deleted or anonymised within [12] months of closure or [24] months of inactivity.
- Lizts, claims, messages and photos: for [24] months after the Lizt closes, so the organiser and recipient can look back on it. After that we anonymise it, keeping only data that can't identify anyone, for statistics.
- Marketing preferences: until you unsubscribe, then we keep a suppression record so we don't email you again.
- Records we must keep by law for as long as the law requires.
10. Your rights
Under UK data protection law you can ask to access, correct, delete, restrict or move your data, and object to how we use it. You can withdraw consent at any time, which doesn't affect earlier use. Change your marketing preferences in My Liztz or use the unsubscribe link in any email.
Email support@joylizt.com to make a request. We'll respond within one month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We'd appreciate the chance to put things right first.
11. Age
Joylizt is for people aged [18] and over. We don't knowingly collect data from children using the service. Organisers may add details about a child recipient, for example for a first birthday. They should only add what's needed and must have the parent's or guardian's agreement.
12. Security
We use encryption in transit, access controls and reputable hosting providers to protect your data. No online service is completely secure, so please use a strong password and tell us straight away if you think your account has been compromised.
13. Changes
We'll update this notice as Joylizt grows, for example if we start handling payments. We'll show the date at the top and tell you by email about significant changes.
14. Cookies
Cookies are small files stored on your device when you visit a website. We use a few to make Joylizt work and, with your permission, a few more to understand how it's used.
| Type | What it does | Examples | Needs your consent? |
|---|---|---|---|
| Strictly necessary | Keeps you signed in, remembers your Lizt while you build it, protects against misuse | [Supabase auth session] | No |
| Analytics | Tells us which pages people use, so we can improve them | [analytics provider] | Yes |
You choose which optional cookies to allow when you first visit. Change your mind at any time through the link in the footer. You can also block cookies in your browser settings, though the site may not work properly without the necessary ones.
Retailers you visit from Joylizt may set their own cookies. Those are controlled by the retailer's cookie settings, not ours.
Also see our Terms of use.