Privacy policy

Effective Date: March 30, 2026

This Privacy Policy describes how Joe'y ("we," "us," or "our") collects, uses, and discloses your personal information when you visit www.drinkjoey.com (the "Site"), interact with our marketing communications, or engage with our social media. By using the Site, you agree to the practices described in this policy.

If you are a California resident, please see the California Consumer Privacy Act (CCPA/CPRA) Rights section below for additional rights that apply to you.

1. What Personal Information We Collect

Device Information

When you visit our Site, we automatically collect certain information about your device and browsing behavior, including:

  • Your IP address and approximate location (city/region level)
  • The web browser and operating system you are using
  • Time zone settings
  • Pages viewed, search terms used, and how you interact with our Site
  • Cookies, pixels, tags, and web beacons

We refer to this collectively as your "Device Information."

Order Information

When you make or attempt to make a purchase on our Site, we collect the information necessary to fulfill your order, including:

  • Full name
  • Billing and shipping address
  • Email address and phone number
  • Payment information (processed securely via Shopify Payments, Shop Pay, PayPal, Apple Pay, Google Pay, Venmo, Klarna, and Afterpay)

Your payment information is collected and stored solely to complete your transaction and to maintain a saved payment option in your account. You may remove saved payment info at any time by visiting your account settings. We refer to this as your "Order Information."

Subscription Information

If you sign up for a recurring subscription, your subscription is managed through ReCharge. ReCharge stores your billing details and subscription preferences in order to process recurring charges. You can manage or cancel your subscription at any time through your account. See ReCharge's privacy policy at rechargepayments.com/privacy.

Communications Information

If you sign up for our email or SMS marketing, we collect your email address and/or mobile phone number. If you contact our customer support team through Gorgias, we may also collect the content of that communication and any associated order history.

Throughout this policy, we refer to Device Information, Order Information, Subscription Information, and Communications Information collectively as your "Personal Information" or "PI."

2. How We Use Your Personal Information

Order Fulfillment & Customer Service

  • To process and fulfill your orders
  • To communicate with you about your order, shipping status, or returns
  • To manage your subscription and process recurring charges
  • To respond to customer support inquiries via Gorgias
  • To screen for and prevent fraud

Site Improvement & Analytics

  • To analyze how visitors use our Site and identify areas for improvement
  • To improve our user experience (UX), user interface (UI), and product offerings
  • To conduct internal business analysis using Triple Whale

Marketing & Advertising

  • To send you promotional emails via Klaviyo (if you opted in) — you can unsubscribe at any time
  • To send you SMS/text marketing messages via Klaviyo (if you provided explicit written consent) — you can opt out at any time by replying STOP
  • To deliver targeted advertisements on Meta (Facebook/Instagram), Google, TikTok, and Pinterest
  • To retarget you with ads on other websites based on your previous interactions with our Site
  • To power our referral program through ReCharge

Legal Compliance

  • To comply with applicable laws and regulations
  • To respond to court orders, subpoenas, search warrants, or other lawful government requests
  • To enforce our Terms & Conditions and protect our legal rights

3. How We Share Your Personal Information

Service Providers & Technology Platforms

We share your PI with trusted third-party service providers who help us operate our business. These providers are contractually required to protect your information and use it only as directed by us. They include:

Advertising Partners

We share certain PI (such as hashed email addresses and browsing data via cookies/pixels) with advertising partners including Meta, Google, TikTok, and Pinterest to deliver targeted and retargeted advertisements. This may constitute "sharing" of personal information under California law. See the CCPA section below for your California rights.

Public Posts

Our Site includes product review sections and a blog with comment functionality. Any information you post publicly on the Site may be viewed by other users. We are not responsible for the privacy of information you voluntarily post in these public areas.

Corporate Transactions

We may share your PI with any successor entity in connection with a merger, acquisition, or sale of assets. We will notify you of any such change by updating this Privacy Policy.

Legal Requirements

We may disclose your PI when required by law, or when we believe disclosure is reasonably necessary to protect our rights, investigate fraud, or comply with legal process.

4. Cookies & Tracking Technologies

We use cookies, pixels, web beacons, and similar technologies to collect Device Information and to power advertising and analytics. You may control cookies through your browser settings; however, disabling cookies may affect site functionality.

  • Strictly Necessary Cookies — Required for the Site to function (e.g., shopping cart, login sessions)
  • Analytics Cookies — Help us understand how visitors use the Site (Google Analytics, Triple Whale)
  • Marketing & Advertising Cookies — Used to deliver targeted ads and measure their effectiveness (Meta Pixel, TikTok Pixel, Pinterest Tag, Google Ads)

Do Not Track

Some browsers offer a "Do Not Track" (DNT) signal. Because there is no consistent industry standard for responding to DNT signals, we do not currently alter our data practices when we detect a DNT signal from your browser. You may use the opt-out tools in Section 5 to limit data collection.

5. Your Choices & Opt-Out Rights

Email Marketing

To unsubscribe from promotional emails, click the Unsubscribe link in any marketing email. You will still receive transactional emails (e.g., order confirmations, shipping updates, subscription billing notices).

SMS / Text Marketing

If you opted in to SMS marketing, you may opt out at any time by replying STOP to any text from us. For help, reply HELP. Message and data rates may apply. Message frequency varies.

Targeted Advertising Opt-Outs

Opting out of targeted advertising does not stop you from seeing ads from us — it means the ads may be less relevant to your interests.

6. Data Retention

We retain your Personal Information for as long as necessary to fulfill the purposes described in this policy:

  • Order Information is retained for at least 7 years to comply with applicable tax and accounting laws.
  • Subscription data is retained for the duration of your active subscription and for a reasonable period thereafter for billing dispute purposes.
  • Device Information (analytics data) is retained in accordance with our service providers' standard retention periods.
  • Marketing contact data (email, SMS) is retained until you unsubscribe or request deletion.

When PI is no longer required, we delete or anonymize it in accordance with our internal data retention schedule.

7. Data Security

We take reasonable technical and organizational measures to protect your PI from unauthorized access, disclosure, alteration, or destruction. Our Site is hosted on Shopify, which maintains industry-standard security including SSL/TLS encryption for data in transit and PCI-DSS compliance for payment data. ReCharge similarly maintains PCI-DSS compliance for subscription billing.

No method of transmission over the internet is 100% secure. While we strive to protect your PI, we cannot guarantee absolute security. In the event of a data breach likely to affect your rights, we will notify you in accordance with applicable law.

8. California Consumer Privacy Act (CCPA / CPRA) Rights

If you are a California resident, you have the following rights under the CCPA and CPRA:

  • Right to Know — Request disclosure of the categories and specific pieces of PI we have collected, the sources, the purposes, and the third parties with whom we share it.
  • Right to Delete — Request that we delete your PI, subject to certain legal exceptions.
  • Right to Correct — Request that we correct inaccurate PI we hold about you.
  • Right to Opt Out of "Sharing" — We share PI with advertising partners (Meta, Google, TikTok, Pinterest) for cross-context behavioral advertising. You have the right to opt out of this sharing.
  • Right to Non-Discrimination — We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise any of these rights, contact us at support@drinkjoey.com. We will respond to verified requests within 45 days as required by law. We do not sell your personal information as defined under the CCPA.

9. Children's Privacy

Our Site is not directed to children under the age of 13. We do not knowingly collect Personal Information from children under 13. If you are a parent or guardian and believe your child has provided us with PI without your consent, please contact us at support@drinkjoey.com and we will promptly delete such information.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the "Effective Date" at the top of this policy and, where appropriate, notify you by email or by a prominent notice on our Site.

11. Contact Us

If you have questions about this Privacy Policy, would like to exercise your privacy rights, or wish to make a complaint, please contact us:

Joe'y
Email: support@drinkjoey.com
Website: drinkjoey.com/pages/contact-us

We will respond to all legitimate privacy requests within 30 days (or within the timeframe required by applicable law).