Privacy Policy

Privacy Policy Last Updated: February 26, 2026

Heritage Gemstones ("we," "us," or "our") operates the website heritagegemstones.com (or your actual domain) and any related mobile applications (collectively, the "Site"). We are committed to protecting your privacy and handling your personal information responsibly.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site, make a purchase, or interact with our services. By using the Site, you agree to the practices described in this Policy.

1. Information We Collect

We collect information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device ("Personal Information").

Categories of Personal Information we collect (per CCPA/CPRA categories where applicable):

  • Identifiers: Name, billing/shipping address, email address, phone number, IP address, unique device identifiers.
  • Commercial information: Products purchased, order history, payment details (processed securely via third-party providers—we do not store full card numbers).
  • Internet or electronic network activity: Browser type, operating system, pages viewed, time spent on Site, referring/exit pages, clickstream data.
  • Geolocation data: Approximate location from IP address (not precise GPS unless you enable it).
  • Audio/visual information: Photos or videos you submit (e.g., custom order requests or reviews with images).
  • Inferences: Preferences inferred from browsing/purchase behavior (e.g., interest in gemstone types).
  • Other: Any information you voluntarily provide (e.g., in contact forms, reviews, or customer support messages).

We do not collect sensitive personal information (e.g., Social Security numbers, precise geolocation, racial/ethnic origin) unless voluntarily provided and necessary for a specific service.

2. How We Collect Information

  • Directly from you: When you create an account, place an order, sign up for newsletters, contact us, post reviews, or fill out forms.
  • Automatically: Via cookies, web beacons, pixels, and similar technologies (see Cookies section below). This includes analytics from Shopify and third-party tools.
  • From third parties: Payment processors (e.g., Shopify Payments, Stripe, PayPal), shipping carriers (e.g., USPS, UPS), marketing platforms (e.g., Klaviyo for emails), review apps, or social media logins (if enabled).

3. How We Use Your Information

We use your Personal Information for:

  • Processing and fulfilling orders (including shipping and payment).
  • Communicating with you (order confirmations, shipping updates, customer service).
  • Providing personalized experiences (recommendations for jewelry based on past views/purchases).
  • Sending marketing emails/newsletters (you can unsubscribe anytime).
  • Improving our Site and services (analytics, bug fixes).
  • Preventing fraud and ensuring security.
  • Complying with legal obligations (e.g., tax records, responding to subpoenas).
  • For business purposes like auditing, research, or detecting security incidents.

4. Sharing and Disclosure of Information

We may share your Personal Information with:

  • Service providers (processors): Shopify (hosting), payment gateways, email services, shipping carriers, analytics providers (e.g., Google Analytics), marketing tools.
  • Business partners: Only with your consent (e.g., joint promotions).
  • Legal requirements: To comply with laws, respond to government requests, protect rights/safety.
  • Business transfers: In case of merger, acquisition, or sale of assets.

We do not sell your Personal Information as defined under CCPA/CPRA. We also do not "share" it for cross-context behavioral advertising in ways that require opt-out under current laws (but see "Your Rights" below if applicable).

5. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance functionality, analyze usage, and deliver targeted ads.

  • Essential cookies: Required for Site operation (cart, login).
  • Performance/Analytics: Track usage (e.g., Google Analytics).
  • Advertising: Show relevant ads (may involve third-party networks).

You can manage preferences via your browser settings or our cookie banner (if implemented). Note: Disabling cookies may limit Site features.

For more details, see our Cookie Policy (link if separate) or browser help.

6. Your Privacy Rights (Especially for California Residents – CCPA/CPRA)

California residents have rights under the California Consumer Privacy Act (CCPA, as amended by CPRA):

  • Right to Know: Request details about categories/types of Personal Information collected, sources, purposes, and third parties shared with (up to twice per 12 months).
  • Right to Access: Request specific pieces of Personal Information.
  • Right to Delete: Request deletion of Personal Information (with exceptions, e.g., for transaction fulfillment or legal compliance).
  • Right to Correct: Request correction of inaccurate Personal Information.
  • Right to Opt-Out of Sale/Sharing: We do not sell or share Personal Information for cross-context behavioral advertising. If practices change, we will provide a "Do Not Sell or Share My Personal Information" link.
  • Right to Limit Use of Sensitive Information: We do not use sensitive info for non-essential purposes.
  • Non-Discrimination: We will not discriminate against you for exercising rights.

Authorized agents may submit on your behalf with proof.

7. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your information from unauthorized access, loss, or misuse. However, no system is 100% secure—use strong passwords and report suspicious activity.

8. Data Retention

We retain Personal Information as long as necessary for the purposes outlined (e.g., order records for 7+ years for tax/legal reasons) or as required by law. After that, we delete or anonymize it.

9. International Users and Data Transfers

Our Site is hosted in the US. If you access from outside the US (e.g., EU), your information transfers to and is processed in the US (which may have different privacy standards). By using the Site, you consent to this transfer.

10. Children's Privacy

Our Site is not directed to children under 13 (or 16 in some jurisdictions). We do not knowingly collect data from children. If we learn we have, we will delete it.

11. Changes to This Policy

We may update this Policy. Changes will be posted here with an updated "Last Updated" date. Significant changes may include notice via email or Site banner.