What we collect, why we collect it, and what you can ask us to do about it.
Last updated September 8, 2026
JOLIEAR STUDIO designs and makes lab-grown diamond rings to order and sells them directly to customers in the United States and a number of other countries, listed in section 13. We are responsible for the personal information collected through this site.
To confirm before launch confirm the legal entity name and registered address.
Information you give us: your name and email address, an optional password (stored only as a salted one-way hash and never retrievable), your shipping address, the ring size and configuration you choose, appointment enquiry details, and any message you send us.
Information collected automatically: IP address, approximate location, browser and device type, the pages you view and the page that referred you. If you accept analytics, we also record interactions with product lists, product details, the shopping bag and checkout.
Information from our providers: payment confirmation, card brand and the last four digits from our payment processor, and email delivery status from our email provider. We never receive or store full card numbers.
To produce and fulfil your made-to-order ring; to keep you informed at each production stage; to provide after-sales service including adjustments, resizing and warranty; to operate and secure your account; to answer appointment and support enquiries; to send studio letters where you have opted in; and to meet our tax, accounting and anti-fraud obligations.
Checkout and payment are handled by Stripe, Inc. Card details are submitted directly to Stripe and never pass through or rest on our servers. We receive a payment confirmation, the card brand and the last four digits, which we display on your order for identification only.
Stripe processes payment information as an independent controller under its own privacy policy, and also uses it for fraud prevention.
Transactional email — account, password reset, order confirmation, production, shipping and delivery notices — is sent through Resend, which processes your name and email address on our instructions as a service provider.
Transactional email relating to an order or your account is not marketing and cannot be unsubscribed from while an order is open. Studio letters are separate and can be unsubscribed from at any time.
We set one strictly necessary cookie, joliear_session, so that you stay signed in. It is HTTP-only, cannot be read by scripts, and expires after 30 days.
Google Analytics 4 is optional. Its tag does not load until you accept analytics. When accepted, it uses first-party _ga cookies to distinguish browsers and sessions and measures site and ecommerce activity. You can reject it or withdraw consent at any time from Cookie preferences.
We disable Google signals and advertising-personalization signals in the site tag. We do not currently use analytics data for remarketing or cross-site targeted advertising.
With service providers acting on our instructions, including Google Analytics for visitors who consent, payment processing, email delivery, shipping carriers and hosting; with the independent diamond grading laboratory in connection with your stone’s report; with professional advisers; where required by law or to protect our rights; and in connection with a merger or sale of assets, subject to this policy.
We do not sell personal information.
Order records, including line specification, totals and certificate details, are retained for seven years for tax and warranty purposes. Account records are kept until you ask us to close the account. Session records are deleted at expiry. Enquiry correspondence is kept for two years.
To confirm before launch no retention job exists yet. This clause currently describes intent, not behaviour.
Traffic is encrypted in transit. Passwords are stored as salted one-way hashes and are never retrievable or viewable, including by us. Session tokens are stored hashed, never in plain text. Access is limited to staff who need it.
No system is perfectly secure and we cannot guarantee absolute security.
If you are a California resident, or a resident of another state with comparable law, you have the right to know what personal information we hold, to access it, to correct it, to delete it, to obtain a portable copy, to opt out of sale or sharing and of targeted advertising, to limit the use of sensitive personal information, and not to be treated differently for exercising these rights.
To make a request, contact us using the details at the end of this policy. We will verify your identity before acting, respond within the period required by law, and tell you how to appeal if we decline. You may use an authorised agent.
To confirm before launch confirm which state statutes apply given actual sales volume and customer residency.
We do not sell or share personal information for cross-context behavioural advertising. If that ever changes, an opt-out link will appear in the site footer and we will honour Global Privacy Control signals sent by your browser.
This site is not directed to children under 16 and we do not knowingly collect their personal information. If you believe a child has provided information to us, contact us and we will delete it.
We ship to Australia, France, Germany, Hong Kong SAR, Singapore, Sweden, Switzerland, the United Kingdom and the United States.
The studio operates from the United States, and information collected through this site is stored and processed there. If you order from outside the United States, placing an order means your personal information is transferred to a country whose privacy laws may differ from your own.
Your shipping address, name and phone number are also passed to the carrier and, for shipments crossing a border, declared to the destination’s customs authority. That disclosure is a legal requirement of importing the parcel, not a choice we make.
To confirm before launch the sections above describe practice. The obligations that follow from selling to consumers in the EU and the UK have not been addressed and need counsel: the lawful mechanism for transferring personal data to the US, whether an Article 27 representative in the EU or UK is required, how data-subject requests are received and answered within the statutory deadline, and whether the retention periods in section 8 satisfy storage limitation.
If we change this policy we will post the updated version here and change the date shown above. Where the change is material we will notify account holders by email.
Questions about this policy, or a request to exercise your rights, can be sent to the studio using the contact details on our contact page.
To confirm before launch add a dedicated privacy contact address.