Privacy Policy - JW Jewelryer

Effective Date: [MM/DD/YYYY]

This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you visit or make a purchase from [www.jewelryer.com] (the “Site”). It also explains your rights under applicable data protection laws, including the GDPR (EU) and CCPA (California).

1. Information We Collect

We collect personal data you voluntarily provide and automatically collected data when you use our Site.

1.1 Personal Data You Provide

Name, email address, phone number
Billing/shipping address
Payment information (processed by third-party payment providers; we do not store full card details)
Order history, account details, and communication records (support tickets, emails)

1.2 Automatically Collected Data

IP address, browser type, device information
Pages viewed, time spent, referral URLs, click behavior
Cookies and similar tracking technologies (see Section 7)

1.3 Sensitive Data

We do not collect sensitive personal data (e.g., race, religion, health) unless you explicitly provide it.

2. How We Use Your Information

We use your data to:

Process and fulfill orders, including shipping and payment processing
Create, maintain, and manage your account
Send order confirmations, updates, and customer service messages
Send marketing emails (only with your consent; you may unsubscribe anytime)
Improve Site functionality, user experience, and security
Prevent fraud, comply with legal obligations, and resolve disputes

3. Data Sharing & Disclosure

We do not sell, rent, or trade your personal data. We may share it only in limited cases:

Service Providers: Payment processors (Stripe/PayPal), shipping carriers, email platforms, analytics tools (Google Analytics) who process data on our behalf under data processing agreements.
Legal Requirements: To comply with law, court orders, or government requests; to protect our rights, safety, or property.
Business Transfer: In connection with a merger, acquisition, or sale of assets (you will be notified via email and a prominent notice on our Site).

4. Data Retention

We retain personal data only as long as necessary for the purposes collected or required by law:

Account data: Retained while your account is active; deleted within 30 days of account closure.
Order/transaction data: Retained for 7 years for tax and legal compliance.
Marketing data: Retained until you unsubscribe or withdraw consent.
Analytics/log data: Retained for 90–26 months (per tool settings).

5. User Rights（GDPR/CCPA Core）

Depending on your location, you may have the right to:

Access: Request a copy of your personal data we hold.
Rectification: Correct inaccurate or incomplete data.
Erasure (“Right to be Forgotten”): Request deletion of your data (where legally required).
Restrict Processing: Limit how we use your data.
Data Portability: Receive your data in a machine-readable format.
Object: Object to processing based on legitimate interests or direct marketing.
Withdraw Consent: Withdraw consent for marketing at any time.
CCPA Opt-Out: Request we do not sell your personal data (we do not sell data).

To exercise rights: Contact us at [[email protected]]. We will respond within 30–45 days (per law). We may verify your identity to protect security.

6. Data Security

We implement industry-standard measures to protect your data:

SSL/TLS encryption for data in transit
Restricted access, firewalls, and regular security updates
Secure third-party platforms for payments and hosting
No storage of full credit card details

7. Cookies & Tracking

We use cookies and similar technologies to improve your experience, analyze traffic, and for marketing. You may disable cookies via your browser settings. For details, see our Cookie Policy [link].

8. International Data Transfers

Your data may be transferred to and processed in countries outside your jurisdiction (e.g., United States, China). We use Standard Contractual Clauses (SCCs) or rely on adequacy decisions to protect your data.

9. Children’s Privacy (COPPA)

Our Site is not directed to users under 13 years old. We do not knowingly collect data from children. If you become aware of such collection, contact us to delete the data.

10. Third-Party Links

Our Site may contain links to third-party websites. We have no control over their privacy practices and are not liable for their actions.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you via email or a prominent notice on our Site 30 days before changes take effect. The “Effective Date” will be revised.

12. Contact Us

For questions, concerns, or to exercise your rights:

Email: [[email protected]]