Last updated: October 29, 2025

Jolloful operates this shop and website, including all related information, content, features, tools, products, and services, in order to provide you as a customer with a personalized shopping experience (the “Services”). Jolloful is powered by Shopify, which enables us to provide you with the Services. This Privacy Policy describes how we collect, use, or disclose personal data when you visit, use, or make a purchase or other transaction using the Services, or otherwise communicate with us. In the event of any conflict between our Terms and Conditions and this Privacy Policy, this Privacy Policy shall prevail with respect to the collection, processing, and disclosure of your personal data.

Please read this Privacy Policy carefully. By accessing or using any of the Services, you confirm that you have read this Privacy Policy and agree to the collection, use, and disclosure of your data as described herein.

What Personal Data Do We Collect or Process?

When we use the term “personal data,” we mean information that identifies you or can reasonably be linked to you. Personal data does not include information that has been collected anonymously or has been anonymized so that it can no longer identify you. Depending on how you interact with the Services, where you reside, and as permitted or required by applicable law, we may collect or process the following categories of personal data, including inferences drawn from such data:

• Contact details, including name, mailing address, billing address, shipping address, telephone number, and email address.
• Financial data, including credit and debit card numbers, bank account numbers, payment card details, financial account information, transaction details, payment method, payment confirmations, and other payment-related information.
• Account information, including username, password, security questions, configurations, and settings.
• Transaction information, including items you view, add to your cart, save to a wishlist, purchase, return, exchange, or cancel, as well as your past transactions.
• Communications with us, including information you provide when contacting us, such as customer support inquiries.
• Device information, including information about your device, browser, or network connection, IP address, and other unique identifiers.
• Usage information, including information about your interaction with the Services, such as how and when you access or browse them.

Sources of Personal Data

We may collect personal data from the following sources:

• Directly from you, for example when you create an account, access or use the Services, communicate with us, or otherwise provide your personal data.
• Automatically through the Services, for example from your device when you use our products or services or visit our website, including through cookies and similar technologies.
• From our service providers, for example when we engage them to enable certain technologies or when they collect or process your personal data on our behalf.
• From our partners and other third parties.

How Do We Use Your Personal Data?

Depending on how you interact with us or which Services you use, we may use your personal data for the following purposes:

Provision, Customization, and Improvement of the Services

We use your personal data to provide the Services to you. This includes fulfilling our contract with you, processing your payments, executing your orders, saving your configurations and items of interest, sending account-related notifications, creating and managing your account, arranging shipping, facilitating returns and exchanges, enabling you to post reviews, and providing a personalized shopping experience (for example, recommending products based on your purchases). This may also include using your personal data to further customize and improve the Services.

Marketing and Advertising

We use your personal data for marketing and advertising purposes, such as sending marketing communications via email, SMS, or post, and displaying advertisements online for products or services offered through the Services or on other websites. This may include ads based on items you previously purchased or placed in your cart, as well as other activities related to the Services.

Security and Fraud Prevention

We use your personal data to authenticate your account, provide secure payment and shopping experiences, detect, investigate, or take action against potentially fraudulent, illegal, unsafe, or malicious activities, protect public safety, and ensure the security of our Services. If you register an account, you are responsible for safeguarding your login credentials. We strongly recommend that you do not share your username, password, or other access details with others.

Communication with You

We use your personal data to provide customer support, respond promptly to your inquiries, and maintain our business relationship with you.

Legal Reasons

We use your personal data to comply with applicable law or respond to lawful requests (including from law enforcement or regulatory authorities), to investigate or participate in civil investigations or legal proceedings, to investigate potential violations of our terms or policies, and to enforce our terms and policies.

How Do We Share Personal Data?

Under certain circumstances, we may disclose your personal data to third parties for legitimate purposes in accordance with this Privacy Policy, including:

• With Shopify, vendors, and other third parties that perform services on our behalf (e.g., IT management, payment processing, data analysis, customer support, cloud storage, fulfillment, and shipping).
• With business and marketing partners, who provide marketing services or display advertising to you. For example, we use Shopify to support personalized advertising services based on your online activities across different merchants and websites. These partners process your data in accordance with their own privacy policies. Depending on where you reside, you may have the right to direct us not to share your information for targeted advertising purposes.
• At your direction or with your consent, such as when you request us to share information with third parties (e.g., for product delivery) or when you use social media widgets or login integrations.
• With our affiliates or within our corporate group.
• In connection with business transactions, such as a merger or insolvency, to comply with legal obligations, enforce terms or policies, or protect the Services and related rights.

Relationship with Shopify

The Services are hosted by Shopify. Shopify collects and processes personal data regarding your access to and use of the Services in order to provide and improve them. Data you submit through the Services is transmitted to Shopify and may also be shared with third parties located in countries other than your country of residence.

To protect, expand, and improve our business, we use certain enhanced Shopify features that incorporate data from your interactions with our store, other merchants, and Shopify. In this context, Shopify may process personal data collected through these interactions. Shopify is responsible for such processing, including responding to requests regarding your rights related to that data.

For more information about how Shopify uses personal data and your rights, please refer to the Shopify Consumer Privacy Policy at:
https://privacy.shopify.com/en

Depending on your location, you may also exercise certain rights via the Shopify Privacy Portal.

Third-Party Websites and Links

The Services may contain links to third-party websites or online platforms. If you follow links to websites not affiliated with or controlled by us, you should review their privacy and security policies and terms. We are not responsible for the privacy, security, accuracy, completeness, or reliability of such third-party sites. Information you provide in public or semi-public areas, including on third-party social media platforms, may be visible to others without restriction.

Children’s Data

The Services are not intended for children, and we do not knowingly collect personal data from children who have not reached the age of majority in their country. If you are a parent or guardian of a child who has provided us with personal data, you may contact us to request deletion. As of the effective date of this Privacy Policy, we are not aware of selling or sharing (as defined by applicable law) personal data of individuals under 16 years of age.

Security and Data Retention

No security measure is completely secure or impenetrable. We cannot guarantee absolute security, and information transmitted to us may be at risk during transmission. We recommend that you do not use unsecured channels to send sensitive or confidential information.

We retain personal data for as long as necessary to manage your account, provide Services, comply with legal obligations, resolve disputes, and enforce agreements and policies.

Your Rights and Choices

Depending on your place of residence, you may have some or all of the following rights:

• Right of access to the personal data we hold about you.
• Right to deletion of personal data.
• Right to rectification of inaccurate personal data.
• Right to data portability, including receiving a copy of your data and requesting transfer to a third party under certain conditions.

Managing Communication Preferences

We may send promotional emails. You can unsubscribe at any time using the unsubscribe link in those emails. Even if you opt out of promotional communications, we may still send non-promotional messages (e.g., about your account or orders).

If you reside in the United Kingdom or the European Economic Area, you may also have:

• Right to object to or restrict processing in certain circumstances.
• Right to withdraw consent, where processing is based on consent (without affecting prior lawful processing).

You may exercise these rights through the Services (where available) or by contacting us using the details below. For more information about Shopify’s processing and related rights, see:
https://privacy.shopify.com/en

We may need to verify your identity before processing requests. You may appoint an authorized representative, subject to proof of authorization and identity verification.

Complaints

If you have complaints about how we process your personal data, please contact us. Depending on your residence, you may also have the right to lodge a complaint with the competent data protection authority.

International Transfers

We may transfer, store, and process your personal data outside your country of residence. If transferring data outside the European Economic Area or the United Kingdom, we rely on recognized transfer mechanisms such as the European Commission’s Standard Contractual Clauses or equivalent UK mechanisms, unless the destination country provides an adequate level of protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in practices or for operational, legal, or regulatory reasons. The revised version will be posted on this website, and the “Last updated” date will be amended accordingly.

Contact

If you have questions about our privacy practices, this Privacy Policy, or wish to exercise your rights, you may contact us:

• By email: info@jolloful.com
• By post: Godesberger Allee 139, 53175 Bonn, Germany

For the purposes of applicable data protection laws, we are the data controller of your personal data.