Privacy Policy

Joyous Marketplace ("we", "our", or "us") operates joyousmarketplace.com. This Privacy Policy explains what information we collect when you use our website, how we use it, and your rights regarding that information.

By using our site, you agree to the practices described in this policy.

We collect the following information depending on how you use our site:

• Google account data — when you sign in with Google, we receive your name and email address from Google's OAuth service. We do not receive your Google password or access to any Google services beyond basic profile information.
• Account information — name, email address, and password (if you register directly without Google).
• Order and shipping information — delivery address, phone number, and order details you provide at checkout.
• Payment reference — Paystack transaction reference numbers. We do not store card numbers or payment credentials.
• Wishlist and cart data — products you save or add to your cart.
• Usage data — pages visited and actions taken, collected via server logs for debugging and performance monitoring.

• To create and manage your account on Joyous Marketplace.
• To process and fulfil your orders and send order confirmation emails.
• To identify you when you sign in with Google — your Google name and email are used solely to create or log into your account.
• To send transactional emails (order confirmations, shipping updates). We do not send marketing emails without your consent.
• To improve our website performance and fix technical issues.

We do not use your Google account data for any purpose beyond account authentication and identification on this platform.

We do not sell your personal information. We only share data with the following trusted service providers strictly to operate the platform:

• Google (OAuth) — used solely for sign-in authentication. We receive only your name and email.
• Paystack — our payment processor. They handle payment transactions and are PCI-DSS compliant. We only receive a transaction reference, not your card details.
• Mailjet / SMTP provider — used to send transactional emails (order confirmations). Your email address is transmitted to send these messages.
• Cloudinary — used to host product images. No personal data is shared with Cloudinary.
• Railway (hosting) — our hosting provider stores the application and database. Data is stored within their secure infrastructure.

We may disclose information if required by law or to protect the safety of our users or the integrity of our platform.

• Your data is stored in a secured PostgreSQL database hosted on Railway's infrastructure.
• Passwords are hashed using ASP.NET Core Identity's default password hasher (PBKDF2 with HMAC-SHA256). We never store plain-text passwords.
• All communication between your browser and our server is encrypted via HTTPS/TLS.
• Google OAuth tokens are not stored — we only store your name and email from the initial sign-in.
• Payment card details are never stored on our servers. All payment processing is handled by Paystack.
• Access to the database and admin panel is restricted to authorised personnel only.

We retain your data for as long as your account is active or as needed to fulfil orders and comply with legal obligations.

• Account data — retained while your account is active. You may request deletion at any time.
• Order records — retained for up to 5 years for accounting and legal compliance.
• Guest cart data — automatically removed after 30 days of inactivity.
• Server logs — retained for up to 30 days for debugging purposes.

To request deletion of your account and personal data, email us at admin@joyousmarketplace.com or use the Contact page. We will process requests within 14 days.

• Authentication cookie — set when you log in, keeps you signed in during your session.
• Guest ID cookie — a random identifier stored for 30 days to preserve your cart if you browse without an account. It contains no personal information.
• Anti-forgery token — a security cookie used to prevent cross-site request forgery on forms.

We do not use advertising cookies or third-party tracking cookies.

• Access — you can view your account information and order history at any time by logging in.
• Correction — you can update your name and contact details from your account settings.
• Deletion — you can request full deletion of your account and personal data by contacting us.
• Portability — you can request a copy of your personal data in a readable format.
• Withdraw consent — if you signed in with Google, you can revoke our app's access at any time via your Google account settings at myaccount.google.com/permissions.

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

Joyous Marketplace
Email: admin@joyousmarketplace.com
Website: joyousmarketplace.com/Contact