Privacy Policy

Effective Date: 1 January 2025

JoyRibbons (operated by Flywave Technology Limited) is committed to protecting your privacy. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what your rights are. It applies to all users of joyribbons.com and our related services — including couples creating registries, guests purchasing gifts, and visitors browsing the Platform.

We collect personal data in the following ways:

• Information you give us directly: Name, email address, phone number, delivery address, bank account details, wedding details, and any other information you provide when registering or using the Platform.
• Payment data: Payment details are collected and processed by our third-party payment providers. We do not store full card or bank details on our servers.
• Usage data: When you visit our Platform, we automatically collect data such as your IP address, browser type, device type, pages visited, time spent, and referring URLs. This helps us understand how people use JoyRibbons and improve our service.
• Communications: If you contact us by email or through our contact form, we retain those communications to resolve your query and improve our service.
• Third-party sources: We may receive information from payment processors, delivery partners, and marketing platforms to verify identity, prevent fraud, and improve our service.

• To create and manage your account and wedding registry
• To process gift purchases and facilitate delivery of physical gifts
• To process payout requests and transfer funds to your bank account
• To verify your identity and prevent fraud, money laundering, and abuse
• To communicate with you about your account, registry, orders, and payouts
• To send you service updates, promotional communications (where you have consented), and important notices
• To comply with our legal obligations under Nigerian law and applicable international regulations
• To improve the Platform, conduct analytics, and personalise your experience

Where you request a cash payout, we collect and retain your bank account details solely for the purpose of processing your withdrawal. This data is encrypted in transit and at rest. We do not share your bank details with third parties except to the extent necessary to execute the transfer (e.g. via our payment processing partner).

Financial transaction records (including payout history) are retained for a minimum of 7 years as required by Nigerian financial regulations and for our legitimate business interests in the event of disputes or audits.

We use cookies and similar tracking technologies on our Platform. Cookies are small files placed on your device that help us recognise you, remember your preferences, and improve your experience. We use:

• Essential cookies: Required for the Platform to function (login sessions, shopping basket, security).
• Analytics cookies: Help us understand how visitors use the Platform (e.g. Google Analytics). Data is aggregated and anonymised where possible.
• Marketing cookies: Where you have consented, these allow us to show you relevant advertisements on other platforms and measure campaign performance.

You can manage or disable cookies through your browser settings. Note that disabling essential cookies may affect the functionality of the Platform.

We do not sell your personal data. We may share it with:

• Payment processors to handle transactions and payouts securely
• Delivery and logistics partners to fulfil physical gift deliveries
• Cloud and infrastructure providers who host and operate the Platform on our behalf
• Analytics and marketing providers to help us measure and improve our Platform (subject to your consent where required)
• Law enforcement or regulatory authorities where required by law, court order, or to protect our legal rights
• A purchaser of our business if JoyRibbons is acquired or merged — in which case your data may be transferred and we will notify you in advance

All third parties we engage are required to protect your data in accordance with this Policy and applicable law.

When you create a public registry, certain information — such as your names, wedding date, registry items, and any couple story you choose to share — will be visible to anyone with your registry link. Please only include information in your public registry that you are comfortable sharing. You can set your registry to private or restrict access at any time from your account settings.

JoyRibbons operates from the United Kingdom and Nigeria. Your data may be processed or stored in countries outside your own. Where this occurs, we ensure appropriate safeguards are in place — such as data processing agreements or adequacy decisions — to protect your data in line with applicable law including the Nigeria Data Protection Regulation (NDPR) and UK GDPR.

We retain your personal data only as long as necessary for the purposes outlined in this Policy, or as required by law. Account data is retained for as long as your account is active and for a reasonable period thereafter. Financial records are retained for at least 7 years. You can request deletion of your account and data at any time (subject to our legal retention obligations) by contacting us.

We implement industry-standard security measures including encryption in transit (TLS/SSL), encryption at rest for sensitive financial data, access controls limiting who can view your data, and regular security reviews. We restrict access to personal data to employees and contractors who need it to perform their roles, and all such parties are bound by confidentiality obligations.

In the event of a personal data breach that poses a risk to your rights, we will notify you and the relevant supervisory authority as required by law, without undue delay.

Under the Nigeria Data Protection Regulation (NDPR) and, where applicable, the UK GDPR, you have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Ask us to correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data (subject to our legal retention obligations)
• Objection: Object to processing of your data for marketing purposes
• Restriction: Ask us to restrict how we use your data in certain circumstances
• Portability: Receive your data in a structured, machine-readable format
• Withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at hello@joyribbons.com. We will respond within 30 days.

JoyRibbons is not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from a minor, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Platform at least 14 days before taking effect. We encourage you to review this page periodically.

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact our data team at hello@joyribbons.com.