What we collect, why we collect it, and what you can ask us to do about it.
Last updated August 26, 2026
JOLIEAR STUDIO designs and makes lab-grown diamond rings to order and sells them directly to customers in the United States. We are responsible for the personal information collected through this site.
To confirm before launch confirm the legal entity name and registered address.
Information you give us: your name and email address, a password (stored only as a salted one-way hash and never retrievable), your shipping address, the ring size and configuration you choose, appointment enquiry details, and any message you send us.
Information collected automatically: IP address, browser and device type, the pages you view and the page that referred you.
Information from our providers: payment confirmation, card brand and the last four digits from our payment processor, and email delivery status from our email provider. We never receive or store full card numbers.
To produce and fulfil your made-to-order ring; to keep you informed at each production stage; to provide after-sales service including returns, resizing and warranty; to operate and secure your account; to answer appointment and support enquiries; to send studio letters where you have opted in; and to meet our tax, accounting and anti-fraud obligations.
Checkout and payment are handled by Stripe, Inc. Card details are submitted directly to Stripe and never pass through or rest on our servers. We receive a payment confirmation, the card brand and the last four digits, which we display on your order for identification only.
Stripe processes payment information as an independent controller under its own privacy policy, and also uses it for fraud prevention.
Transactional email — account, password reset, order confirmation, production, shipping and delivery notices — is sent through Resend, which processes your name and email address on our instructions as a service provider.
Transactional email relating to an order or your account is not marketing and cannot be unsubscribed from while an order is open. Studio letters are separate and can be unsubscribed from at any time.
We set one strictly necessary cookie, joliear_session, so that you stay signed in. It is HTTP-only, cannot be read by scripts, and expires after 30 days.
We do not currently set advertising or cross-site tracking cookies, and we do not currently run analytics tags.
To confirm before launch if analytics or an advertising pixel is added before launch, this section and section 11 must be rewritten and a consent mechanism added. The statement above is only true while no such tags exist.
With service providers acting on our instructions, including payment processing, email delivery, shipping carriers and hosting; with the independent diamond grading laboratory in connection with your stone’s report; with professional advisers; where required by law or to protect our rights; and in connection with a merger or sale of assets, subject to this policy.
We do not sell personal information.
Order records, including line specification, totals and certificate details, are retained for seven years for tax and warranty purposes. Account records are kept until you ask us to close the account. Session records are deleted at expiry. Enquiry correspondence is kept for two years.
To confirm before launch no retention job exists yet. This clause currently describes intent, not behaviour.
Traffic is encrypted in transit. Passwords are stored as salted one-way hashes and are never retrievable or viewable, including by us. Session tokens are stored hashed, never in plain text. Access is limited to staff who need it.
No system is perfectly secure and we cannot guarantee absolute security.
If you are a California resident, or a resident of another state with comparable law, you have the right to know what personal information we hold, to access it, to correct it, to delete it, to obtain a portable copy, to opt out of sale or sharing and of targeted advertising, to limit the use of sensitive personal information, and not to be treated differently for exercising these rights.
To make a request, contact us using the details at the end of this policy. We will verify your identity before acting, respond within the period required by law, and tell you how to appeal if we decline. You may use an authorised agent.
To confirm before launch confirm which state statutes apply given actual sales volume and customer residency.
We do not sell or share personal information for cross-context behavioural advertising. If that ever changes, an opt-out link will appear in the site footer and we will honour Global Privacy Control signals sent by your browser.
This site is not directed to children under 16 and we do not knowingly collect their personal information. If you believe a child has provided information to us, contact us and we will delete it.
We sell and ship within the United States only, and information collected through this site is processed in the United States.
If we change this policy we will post the updated version here and change the date shown above. Where the change is material we will notify account holders by email.
Questions about this policy, or a request to exercise your rights, can be sent to the studio using the contact details on our contact page.
To confirm before launch add a dedicated privacy contact address.