Joy Loyalty Program & Rewards

Hi TEASE dancewear Store Owner,

Thank you for your important feedback regarding GDPR compliance and the Data Processing Agreement (DPA).

We understand the critical nature of this requirement for EU merchants. While we were previously working to finalize a downloadable and signable DPA, we have now published a dedicated DPA page that clearly outlines our data handling practices and compliance measures:
https://joy.so/data-processing-addendum-dpa/

We currently:
- Listen to and properly process Shopify’s GDPR webhooks (such as customer data access and erasure requests)
- Do not share or sell customer data with any third party
- Store data securely on Google Cloud infrastructure, which follows industry-standard compliance protocols

Following that, our team is currently taking the following actions to strengthen our overall privacy and compliance approach:
- We’re implementing internal support for Data Subject Access Requests (DSAR), with tooling to process these requests efficiently.
- A trust center is in planning, though this will take more time due to overlap with broader certifications like SOC 2, we are working with Sprinto
- We're also looking to consult with a privacy lawyer or DPO for third-party review.
- GDPR training for our internal team is being scheduled as part of this effort.

Thanks again for your honest feedback. Your input helps us continue building a better, more transparent product.

Best regards,
Joy Loyalty Team