1. Introduction
At Mood Broker Ltd, trading as Gives You Joy ("we", "our", "us"), we are committed to protecting and respecting your privacy. This policy explains how we handle your personal information when you use our website (www.givesyoujoysocial.com), products, and services. It also outlines your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018).
2. At a Glance: Your Privacy Rights
- Transparency: We tell you what data we collect and why.
- Control: You can access, correct, delete, or move your data.
- Choice: You decide how we use your data for marketing.
- Security: We use industry-standard methods to protect your data.
3. What Information Do We Collect?
We collect personal data when you sign up for Gives You Joy: Social, subscribe to our services or purchase products, provide feedback or contact us, or voluntarily share dietary requirements or special accessibility needs for events or services.
| Category | Examples |
|---|---|
| Identity Data | Name, username, date of birth |
| Contact Data | Email, phone number, address |
| Financial Data | Payment card details, bank account info |
| Transaction Data | Purchase history |
| Device Data | IP address, browser type |
| Content Data | Photos or files uploaded |
| Profile Data | Preferences, survey responses |
| Usage Data | Website/app usage |
| Marketing Data | Communication preferences |
| Location Data | GPS location (with consent) |
| Special Category Data | Dietary requirements, accessibility or special needs |
4. How Do We Use Your Information?
We only use your personal data when allowed by law. Legal bases include contract performance, legal obligation, legitimate interest, and consent.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Register you as a user | Identity, Contact | Performance of contract |
| Process purchases | Identity, Contact, Financial | Performance of contract |
| Communicate service updates | Identity, Contact | Legal obligation, Legitimate interest |
| Send marketing emails | Identity, Contact, Marketing | Consent |
| Administer promotions | Identity, Contact, Profile | Consent, Legitimate interest |
| Improve and secure services | Device, Usage | Legitimate interest |
| Personalise content/ads | Usage, Profile, Location | Consent |
| Accommodate special needs or dietary requirements | Special Category Data | Explicit consent |
5. Who Processes Your Data
Your personal data may be accessed or processed by Gives You Joy personnel, subcontractors and partners engaged in providing our services, our internal IT, marketing and admin teams, and external third parties including IT and payment service providers, legal and professional advisers, regulators and law enforcement (if required by law), and successors in a merger or acquisition.
Subcontractors and partners include: Customer.io, Respond.io, Meta, NocoDB, WhatsApp Business App, Paperform, Pipedream, Stripe, Twilio, Google EU, and Hotjar. (Note: You can update this list in the future if your software stack changes).
6. International Transfers
If data is transferred outside the UK/EEA, we ensure an adequate level of protection through Standard Contractual Clauses (SCCs), transfers to countries with adequacy decisions, or other legally approved safeguards.
7. Data Retention
We retain data only as long as needed for the purposes collected.
| Data Type | Retention Period | Legal Basis |
|---|---|---|
| Account Data | 6 years after last activity | Legitimate interest |
| Financial Records | 6 years | Legal obligation |
| Marketing Preferences | Until withdrawn | Consent |
| Special Category Data | Until the event/service is delivered or consent is withdrawn | Explicit consent |
| Anonymised Data | Indefinitely | Not applicable |
8. Your Legal Rights
Under GDPR and the UK DPA 2018 you have the following rights. To exercise any of these rights, email us at: hello@givesyoujoysocial.com. We aim to respond within one month and may need to verify your identity.
- Access and Rectification: Obtain and correct inaccurate or incomplete data
- Erasure: Request deletion of your data
- Processing Restrictions: Limit how your data is processed
- Objection: Refuse certain data processing, including profiling for commercial purposes
- Portability: Retrieve your data in a structured format
- Withdraw Consent: Revoke consent for processing at any time (previous processing remains lawful)
9. Consent Management
We use clear and granular methods for obtaining consent. You can opt-in via forms and toggles, manage your preferences in your account or via unsubscribe links, and withdraw consent at any time.
We comply with the Privacy and Electronic Communications Regulations (PECR) when sending electronic marketing.
SMS Marketing: Where you have provided your explicit prior consent, we may send you marketing messages by SMS. This consent is collected separately from email marketing consent, via a clearly labelled opt-in at the point of sign-up or through your account preferences. We rely on your consent as our legal basis under both UK GDPR and the Privacy and Electronic Communications Regulations 2003 (PECR). You can withdraw consent and opt out of SMS marketing at any time by replying STOP to any marketing text we send, or by updating your communication preferences in your account settings. Opting out will not affect the lawfulness of any messages sent before you withdrew consent. Our SMS messages are sent via Customer.io, using phone numbers provisioned through Twilio, both of whom process your phone number solely for this purpose and in accordance with our data processing agreements with them.
10. Data Protection Measures
Your data is stored on secure servers protected by firewalls, antivirus software, and restricted access. We use Single Sign-On (SSO), Multi-Factor Authentication (MFA), and organisational and technical measures to prevent unauthorised access, alteration, or disclosure.
User Responsibility: You are responsible for safeguarding your account password and ensuring you log out after each session.
11. Data Security and Breaches
We protect your data using encryption (e.g. SSL), secure servers, and access controls. If a data breach occurs, we will notify affected individuals and regulators as required.
12. Cookies and Tracking
We use cookies to enhance your experience, remember preferences, and analyse site/app performance. See our Cookies Policy for full details and how to manage preferences.
13. Changes to This Policy
We regularly review and update this policy. Changes will be posted on our website and, where appropriate, notified by email.
14. Contact Us
For questions or complaints about your data, or to exercise your rights, please contact us at:
Email: hello@givesyoujoysocial.com
Post: Mood Broker Ltd, 21 High Street, Ynysddu, Newport, NP11 7JJ
Last Reviewed: 14 June 2026