Privacy policy

Effective November 4, 2026.

This shop is run by Joy Kelleher through Thrive Gainesville, LLC, in Gainesville, Georgia. When this page says "I" or "we," it means both. It covers thrive-with-joy.com, colormyworldplease.com (which brings you here), and anything you buy, book or ask through them.

The short version

• I collect what's needed to send you what you bought, run a group or a gathering you registered for, reply to a question, or send you the writing and news you signed up for, and nothing more. If you subscribe on Substack, it also shows me details such as what you've paid, your country, how you found me and how you read what I send.
• Your card details go to the payment company, never to me.
• I don't sell your information, and I don't share it with advertisers.
• I also run a counseling practice. The shop's records and the practice's records are kept apart, on purpose. Some shop email does reach me at my practice address, including Squarespace's notice of each order, with your name, contact details, what you ordered and any answers you gave on its order form. Buying from this shop does not make you a client, and nothing you buy, book or write here goes into any clinical record.
• You can ask me what I hold about you, ask me to correct it, or ask me to delete it. Email joy@colormyworldplease.com.

What I collect, and why

When you buy something. Your name, email address, shipping and billing address, what you ordered, and your phone number if you give it. Squarespace, the platform this site runs on, collects these at checkout so I can send your order and its receipt. Your card number is entered on the payment company's secure form and handled by them (Squarespace Payments, or PayPal if you choose to pay that way). I see the card type and the last four digits on the order, never the full number.

When you buy the PDF edition. The same, plus a record that the download link was sent, so I can send it again if you need it.

When you register for a group or a gathering. Your name and email, which is how the meeting link, the address of an in-person group and any reminders reach you. For the teen group, the name and email are a parent's or guardian's, and I collect nothing here about the teen. An online session is sometimes recorded for the people who registered; if one is, I say so at the start, you're welcome to keep your camera off, and personal sharing is never recorded.

When you ask about a program for your group. What you enter in the inquiry form: your name, email, your group or organization's name if you give it, your part in it, your group's type and size, how and when you'd like to meet, a focus area, and one line about what you're hoping for. The form asks about the group, never about the people in it, and please keep it that way.

When you email me or leave a review. What you write, your name and your email address. If you send a review for the site, I'll ask before publishing it and say if you received a free copy.

When you subscribe on Substack. The subscribe buttons and links on this site open Substack's own pages, and what you enter there goes to Substack under its own privacy policy. Substack gives me your email address, and your name if you gave one, so I can send you my writing and news of my books and groups. It also shows me details such as whether your subscription is free or paid, when it started and what you've paid, your country, how you found my Substack, and how you read it, like which emails you open and which posts you read. If you pay, the payment goes through Stripe into my own Stripe account. Stripe keeps your card details and gives me a record of each payment, such as your email address, your billing address or country, and the card type and its last four digits, never the full number.

When you visit. Squarespace's built-in analytics record which pages were viewed, roughly where a visitor was (from the internet address, not a precise location), the kind of device and browser, and which site sent them here. I use it to see which pages people read and where they get stuck. I don't use Google Analytics, Meta pixels, or any advertising tracker.

Cookies

This site uses cookies for two things:

• Making the shop work: keeping items in your cart, moving you through checkout securely, remembering you if you create an account, and guarding against fraud. Squarespace sets these and the site can't run without them.
• Counting visits: Squarespace's own analytics cookies, which tell me page views and visits, not who you are.

There are no advertising cookies. Squarespace lists every cookie it sets, with its purpose and how long it lasts, on its help page "The cookies Squarespace uses." You can block or delete cookies in your browser; the cart and checkout may stop working if you block the first kind.

Who handles your information for me

I run a small shop on hosted services, so a few companies process your information on my behalf, each under its own privacy policy and a contract that limits what it can do with it:

• Squarespace, which hosts the site, runs the store, the forms and the email newsletters, and stores orders and form submissions.
• Squarespace Payments, or PayPal when you choose it, which processes your payment for an order and is the only one that sees your card details for it. PayPal does that under its own agreement with you.
• The United States Postal Service or another carrier, which receives your name and address on the shipping label.
• Microsoft 365, which carries the email between us.
• Google, which carries the email at my counseling practice's address, including Squarespace's order notices.
• Zoom, which hosts the online groups and sees the name you join with.
• Substack and Stripe, separately and on their own terms, if you subscribe: Substack runs the subscription, and Stripe takes the payment for a paid one into my own Stripe account.

None of the companies working for me may use your information for their own marketing. If you pay with PayPal or subscribe on Substack (and pay through Stripe), you're also dealing with them directly, under their own policies.

What I never do

• Sell your information, or share it with anyone for advertising.
• Combine the shop's records with my counseling practice's records, or use either to reach the other. They live in different systems with different logins, and that is deliberate. Shop email that reaches my practice address, like the order notices, never goes into a client's file.
• Ask about your health, your reasons for buying, or anything a book seller has no business knowing.
• Email you marketing you didn't ask for.

Email from me

You get an order email when you buy and a delivery email for a download or a group's link. Those are part of the purchase.

The shop's newsletters and news about groups go only to people who tick the box at checkout or sign up on the site. Every one of those emails has an unsubscribe link, and unsubscribing takes effect right away. My Substack writing, which also carries news of my books and groups, is a separate subscription that you manage on Substack.

How long I keep it

• Orders: as long as tax and accounting rules require, which in the US is generally up to seven years. The order notices in my email are kept no longer than that.
• Group inquiries: while we're in touch, and deleted within a year after our last contact if nothing came of it.
• Other emails: as long as they're useful for answering you; old correspondence is cleared out periodically.
• Newsletter sign-ups: until you unsubscribe.
• Substack subscriptions: held on Substack, and for a paid one in my Stripe account, each under its own policy; I don't keep a copy of the subscriber list anywhere else.
• Recordings of an online session: shared only with the people who registered, and deleted three months after the session.
• Visit statistics: kept by Squarespace in aggregate; nothing in them identifies you.

Your choices

Whatever state or country you live in, you can ask me to:

• tell you what information I hold about you, and send you a copy;
• correct something that's wrong;
• delete it, unless I'm required to keep it (an order record, for tax);
• stop sending you marketing email.

Email joy@colormyworldplease.com. I'll confirm it's you (usually by replying to the email address on the order) and answer within 30 days. I'll never treat you differently for asking. I don't sell or share personal information for targeted advertising, so there is nothing to opt out of there.

If you created a customer account at checkout, you can also see your orders and saved addresses there and delete the account yourself.

Children

The shop is for adults, with one exception: Fun with Color is a group for teens aged 13 to 17, and for it a parent or legal guardian registers and pays, and the site collects nothing about the teen. I don't knowingly collect information from anyone under 13, or from anyone under 18 beyond a parent's registration for that group. If a child has given me information, email me and I'll delete it.

Security

The site and checkout run over encrypted connections. Card details never touch this site. Access to the store's admin is limited to two people, each with two-factor login. No system is perfect, and if something ever went wrong with your information I would tell you.

Where your information lives

Squarespace and the other services above may store your information in the United States or in other countries. If you order from outside the US, this policy still covers your information.

Changes

If this policy changes in a way that matters, I'll update the date at the top and, if you have an account or an active order, tell you by email. Small wording changes just update the date.

Contact

Joy Kelleher, Thrive Gainesville, LLC joy@colormyworldplease.com 324 Brenau Ave, Gainesville, GA 30501