Privacy Policy

Effective Date: April 26, 2026

This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from our website. We are committed to protecting your privacy and ensuring a secure experience for all our collectors and enthusiasts.

1. Information We Collect

When you visit the Site, we automatically collect certain information about your device, including your web browser, IP address, and time zone. Additionally, we collect information when you make a purchase:

• Order Information: Name, billing address, shipping address, email address, and (optionally) phone number.
• Payment Information: Card and billing details are submitted directly to our payment processor, NMI (Network Merchants, Inc.). NMI handles authorization and settlement on our behalf, and we do not store your full card number, CVV, or other sensitive financial details on our servers.
• Shipping Information: Your shipping address is provided to Shippo, our shipping label provider, in order to fetch carrier rates (USPS, UPS, FedEx) and generate a label.
• Social Media (Optional): We provide an option for users to share their Instagram handle. This is 100% optional and is used to connect with our community or provide personalized support.

2. How Do We Use Your Personal Information?

We use the Order Information primarily to fulfill any orders placed through the Site (processing payments, arranging shipping, and providing invoices). We also use this to:

• Communicate with you regarding your order.
• Screen for potential risk or fraud.
• Provide information regarding our products when in line with the preferences you have shared.

3. Sharing Your Personal Information

We share your information with third-party service providers only to the extent needed to run the Site and fulfill orders. These providers act as our subprocessors and are bound by their own privacy policies:

• NMI (Network Merchants, Inc.) — payment processing and fraud screening. See NMI's Privacy Policy.
• Shippo — generating shipping labels and providing tracking. See Shippo's Privacy Policy.
• Shipping carriers (USPS, UPS, FedEx) — receive the recipient's name and address only as needed to deliver your package.
• Email/SMS providers — used to send order confirmations, shipping notifications, and (where applicable) admin alerts.

We never sell, rent, or trade your personal data to third-party marketing companies. We may also disclose information when required by law (e.g., a valid subpoena or court order).

4. Cookies, Local Storage & Tracking

We use a small number of cookies and browser storage entries to make the Site work. We do not use third-party advertising cookies, analytics trackers, or marketing pixels.

• Strictly necessary (cannot be disabled): a secure, HTTP-only authentication cookie that keeps you signed in to your account; a 21+ age-verification flag stored in your browser; and your shopping cart contents stored in your browser so your cart survives page reloads.
• Functional / preferences: the last page you were viewing, any saved coupon codes you've applied, and one-time flags so we don't repeatedly show you the same beta banner or promotion popup.
• Third-party: none. We do not load Google Analytics, Meta/Facebook pixels, or any advertising trackers.

You can clear cookies and local storage at any time through your browser settings. Doing so will sign you out of your account and empty your cart.

5. Discreet Shipping & Privacy

We understand the importance of discretion. All orders are shipped in plain, unmarked packaging. There is no mention of the contents on the outside of the package. Financial statements will show a neutral billing descriptor.

6. Age Restriction

This Site is intended for individuals who are at least 21 years of age. By using this site, you represent that you meet these age requirements.

7. Data Retention & Your Rights

We maintain your Order Information for our records unless and until you ask us to delete it. You have the right to access, correct, update, or delete the personal information we hold about you at any time. To exercise these rights, email us at jollypondfarm@gmail.com with the email address used on your order. We will respond within 30 days.

Note: we may need to retain limited transactional records (e.g., order totals, dates) for tax, accounting, and legal-compliance reasons even after a deletion request.

8. Virginia & California Resident Rights

We are a Virginia-based business and we honor the rights granted to residents of states with comprehensive privacy laws — most notably the Virginia Consumer Data Protection Act (VCDPA) and the California Consumer Privacy Act (CCPA/CPRA). Eligible residents have the right to:

• Know what personal information we have collected about you.
• Obtain a copy of that information in a portable format.
• Correct inaccurate personal information.
• Request deletion of your personal information.
• Opt out of the sale or targeted-advertising use of your personal information. (Note: we do not sell personal information and do not use it for targeted advertising, so there is nothing to opt out of — but the right is preserved.)
• Appeal a denial of any request by replying to our response email.

To exercise any of these rights, email jollypondfarm@gmail.com. We will verify your identity using the information already on file with your order before fulfilling the request.

9. Visitors From the EU, UK & Outside the U.S.

We currently ship only within the United States, but our site is reachable globally. If you access the Site from the European Economic Area, the United Kingdom, or another jurisdiction with comprehensive privacy laws (e.g., GDPR, UK GDPR), the following applies:

• Lawful bases: we process Order Information to perform a contract with you (your purchase); we process device/log information for our legitimate interest in keeping the Site secure and preventing fraud; and we process optional information (such as your Instagram handle) on the basis of your consent, which you may withdraw at any time.
• International transfers: data is processed and stored on servers located in the United States. By using the Site, you understand that your information will be transferred to and processed in the U.S.
• Your rights: in addition to the rights in Section 7, you may have the right to lodge a complaint with your local data-protection supervisory authority (for example, the ICO in the UK or your national DPA in the EU).

10. Legal Compliance

Our products are sold as adult novelty souvenirs and for genetic preservation purposes. We comply with the 2018 Farm Bill. It is the responsibility of the user to adhere to their local and state laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. The "Effective Date" at the top will always reflect the most recent revision.

12. Contact Us

For questions, concerns, or requests related to this Privacy Policy, email us at jollypondfarm@gmail.com.