NEJoye ("we," "our," or "us") operates the website nejoye.com (the "Site"). This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you visit or make a purchase from our Site. It also explains your rights under applicable privacy laws in the United States and Canada.

1. Information We Collect

1.1 Information You Provide Directly

When you make a purchase, create an account, contact us, or sign up for marketing communications, we may collect:

Contact Information: Name, email address, phone number, and shipping/billing address.

Payment Information: Credit/debit card details, billing address (processed securely by our payment processors; we do not store full payment card numbers).

Account Information: Username, password, and purchase history.

Communications: Any information you provide when you contact customer support or submit a product inquiry.

1.2 Information Collected Automatically

When you visit our Site, we automatically collect certain device and usage information, including:

Device Information: IP address, browser type, operating system, device identifiers.

Usage Information: Pages visited, time spent on pages, referring URL, clickstream data.

Cookies and Similar Technologies: See Section 6 (Cookie Policy) below.

1.3 Information from Third Parties

We may receive information about you from third-party service providers, including:

Shopify (our e-commerce platform) — order and fulfillment data.

Payment processors (e.g., Shopify Payments, PayPal) — transaction confirmation.

Shipping carriers — delivery confirmation and tracking updates.

Analytics providers (e.g., Google Analytics, Microsoft Clarity) — site usage data.

2. How We Use Your Information

We use your personal information for the following purposes:

 3. Marketing Communications

3.1 Email Marketing

With your explicit consent, we may send you promotional emails about new products, special offers, and company news. We comply with the CAN-SPAM Act (United States) and CASL (Canada's Anti-Spam Legislation) :

Every marketing email includes a clear and conspicuous unsubscribe link.

Unsubscribe requests are processed within 10 business days (CAN-SPAM) / immediately (CASL).

We include our physical mailing address in every commercial email.

We honor opt-out requests for all future marketing emails.

We do not use false or misleading header information or deceptive subject lines.

3.2 How to Opt Out

You may unsubscribe at any time by:

Clicking the "Unsubscribe" link at the bottom of any marketing email.

Contacting us with "Unsubscribe" in the subject line.

3.3 SMS / Text Marketing (If Applicable)

If we offer SMS marketing in the future, we will obtain your separate express written consent and provide clear opt-out instructions (e.g., texting STOP). Message and data rates may apply.

3.4 Transactional Communications

Even if you opt out of marketing, we may still send non-promotional communications necessary for your orders (order confirmations, shipping updates, and customer service messages).

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We share information only as necessary to operate our business:

All third-party service providers are contractually bound to protect your data and use it only for the services they provide to us. 

5. Your Privacy Rights

5.1 California Residents (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) :

Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months.

Right to Delete: Request deletion of your personal information, subject to certain exceptions (e.g., completing a transaction, legal obligations).

Right to Correct: Request correction of inaccurate personal information.

Right to Opt Out of Sale/Sharing: We do not sell personal information and have not sold personal information in the past 12 months. We also do not share personal information for cross-context behavioral advertising.

Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise your CCPA rights, contact us at legal@nejoye.com with "CCPA Request" in the subject line. We will verify your identity before processing your request and respond within 45 days (with a possible 45-day extension).

5.2 Canadian Residents (PIPEDA / Provincial Laws)

Canadian residents have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws:

Right to Access: Request access to the personal information we hold about you.

Right to Correction: Request correction of inaccurate or incomplete personal information.

Right to Withdraw Consent: Withdraw your consent for the collection, use, or disclosure of your personal information (subject to legal or contractual restrictions).

Right to Challenge Compliance: Challenge our compliance with PIPEDA.

To exercise your rights, contact our Privacy Officer at legal@nejoye.com.

5.3 Residents of Other US States

Residents of states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, and others) may have similar rights to access, delete, correct, and opt out of targeted advertising. We extend these rights to all US residents upon verified request. Contact us at legal@nejoye.com.

5.4 Verification Process

To protect your information, we will verify your identity before processing privacy requests. This may require providing your name, email address, and order number. Authorized agents must provide written authorization from the consumer.

6. Cookie Policy

6.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They help us remember your preferences, understand site usage, and improve your experience.

6.2 Types of Cookies We Use

6.3 Managing Cookies

You can control cookies through your browser settings:

Block all cookies (may impact site functionality)

Delete existing cookies

Set preferences for specific sites

Most browsers also support "Do Not Track" (DNT) signals. We currently do not respond to DNT signals, but you can manage cookies directly through your browser.

6.4 Third-Party Cookies

Some third-party services we use (Google Analytics, Shopify) may place their own cookies. These are governed by the respective third party's privacy policies:

Google Privacy Policy

Shopify Privacy Policy

7. Data Retention

We retain your personal information only as long as necessary:

Order information: Retained indefinitely for accounting, tax, and legal compliance, and to support warranty claims.

Account information: Retained while your account is active. Inactive accounts may be deleted after 24 months.

Marketing consent records: Retained indefinitely to demonstrate compliance with CAN-SPAM and CASL.

Analytics data: Retained for up to 26 months (unless aggregated and anonymized).

8. Data Security

We implement commercially reasonable administrative, technical, and physical safeguards to protect your personal information:

Encryption: TLS/SSL encryption for data in transit; encrypted storage for sensitive data at rest.

Access Controls: Role-based access limited to employees and contractors who need it for their work.

Platform Security: Shopify is PCI DSS Level 1 compliant as a PCI-certified Service Provider.

Payment Security: We do not store full credit card numbers. PCI-compliant third-party processors handle all payment processing.

No method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

9. Children's Privacy

Our Site is not intended for children under 13 years of age (or under 16 in certain jurisdictions). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please get in touch with us immediately, and we will take steps to delete it.

10. International Data Transfers

We are based in China/Ningbo, and our Site is hosted on Shopify's platform (servers located in the United States and globally). If you access our Site from outside the United States, your information may be transferred to, stored, and processed in the United States or other jurisdictions where our service providers operate. By using our Site, you consent to such transfers.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

Post the updated policy on this page with a new "Last Updated" date.

Provide notice on our Site for at least 30 days before material changes take effect.

Obtain fresh consent for marketing communications if required by law.

12. Contact Us

If you have questions, concerns, or wish to exercise your privacy rights, please contact us:

NEJoye
Email: legal@nejoye.com
Address: No. 958, Wushan South Road, Qiaotou Town, Cixi City, Ningbo City, Zhejiang Province, China. 315300

Privacy Officer: Lucas/Director

Response Time: We aim to respond within 2 business days.