1. Who We Are

This Privacy Policy applies to Ambra Jewels LLC ("Ambra Jewels," "we," "us," or "our"), a limited liability company registered in the State of New York.

Business address:
Ambra Jewels LLC
New York, NY, United States

Privacy contact:
hello@ambrajewels.com

Our website is ambrajewels.com, operated on Shopify. We sell handcrafted sterling silver gemstone jewelry to customers in the United States.

---

2. What This Policy Covers

This policy explains:

• What personal information we collect and why
• How we use and share that information
• How long we keep it
• Your rights regarding your data
• How to contact us with questions or requests

By visiting ambrajewels.com, placing an order, or signing up for our emails, you agree to the practices described in this policy.

---

3. Information We Collect

A. Information you give us directly

When you browse, create an account, place an order, or contact us, we may collect:

• Name
• Email address
• Shipping and billing address
• Phone number
• Payment information (processed securely — we never store full card details)
• Order history and preferences
• Communications you send us (emails, chat messages, DMs)
• Reviews or feedback you submit

B. Information collected automatically

When you visit our website, our systems and third-party tools automatically collect:

• IP address and approximate location
• Browser type and device information
• Pages visited and time spent on each page
• Referring website or search term that brought you to us
• Cart activity and browsing behavior
• Cookies and similar tracking technologies

C. Information from third parties

We may receive information about you from:

• Shopify (our e-commerce platform)
• Meta (Facebook and Instagram) — if you interact with our ads or pages
• Google — if you interact with our ads or arrive via Google search
• Klaviyo — our email marketing platform
• Judge.me and Trustpilot — our review platforms
• Smile.io — our loyalty program (when active)

---

4. How We Use Your Information

We use your personal information for the following purposes:

To fulfill your order:
Processing payments, arranging shipment, sending order confirmations and tracking updates, handling returns and exchanges.

To communicate with you:
Responding to your questions, providing customer support, sending transactional emails related to your order.

To send marketing communications:
If you have opted in, we send emails about new products, promotions, and brand updates. You can unsubscribe at any time using the link in any email.

To improve our website and products:
Analyzing how customers use our site, which products perform well, and where we can improve the shopping experience.

To run advertising:
We use Meta Pixel and Google Analytics to measure the performance of our advertising campaigns and to show relevant ads to people who have visited our website. This may involve sharing certain browsing data with Meta and Google. See Section 7 for details.

To comply with legal obligations:
Maintaining records for tax, accounting, and regulatory purposes. Responding to lawful requests from authorities.

To protect against fraud:
Detecting and preventing fraudulent transactions and unauthorized access.

---

5. Legal Basis for Processing (for customers in the EU/EEA or UK)

If you are located in the European Union, European Economic Area, or United Kingdom, we process your personal data under the following legal bases:

• Contract performance: To fulfill your order and provide customer support
• Legitimate interests: To improve our website, prevent fraud, and send you relevant communications where you would reasonably expect to receive them
• Consent: To send marketing emails — you can withdraw consent at any time
• Legal obligation: To comply with applicable laws and regulations

---

6. Cookies and Tracking Technologies

Our website uses cookies and similar technologies. Here is what they do:

Essential cookies: Required for the website to function. These include session cookies, cart cookies, and checkout cookies. You cannot opt out of these without disabling our site.

Analytics cookies: We use Google Analytics to understand how visitors use our site. This helps us improve the experience. You can opt out of Google Analytics at tools.google.com/dlpage/gaoptout.

Advertising cookies: We use Meta Pixel to measure ad performance and serve relevant advertising. These cookies track your browsing activity across websites. You can manage your Meta ad preferences at facebook.com/ads/preferences.

Third-party cookies: Klaviyo, Judge.me, Trustpilot, and Smile.io may set their own cookies. Each has its own cookie policy.

You can manage cookie preferences using our cookie consent banner or by adjusting your browser settings. Note that disabling some cookies may affect your shopping experience.

---

7. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

Service providers who help us operate:

All third-party service providers are contractually required to protect your information and use it only for the purposes we specify.

Legal requirements:
We may disclose your information if required by law, court order, or government authority, or where necessary to protect the rights, property, or safety of Ambra Jewels, our customers, or others.

Business transfers:
If Ambra Jewels is acquired, merged, or undergoes a change of ownership, your information may be transferred as part of that transaction. We will notify you if this occurs.

---

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy.

Specifically:

• Order data: 7 years (for tax and accounting compliance)
• Account data: For the duration of your account, plus 2 years after last activity
• Email marketing data: Until you unsubscribe or request deletion
• Analytics data: 26 months (Google Analytics default)
• Support communications: 3 years

You may request deletion of your data at any time (see Section 10).

---

9. Data Security

We take reasonable measures to protect your personal information against unauthorized access, disclosure, alteration, and destruction.

These measures include:

• SSL/TLS encryption on all pages (the padlock in your browser)
• Shopify's PCI-DSS compliant payment infrastructure
• Restricted internal access to customer data
• Regular review of our data handling practices

No method of transmission over the internet is 100% secure. If you have reason to believe your interaction with us is no longer secure, please contact us immediately at hello@ambrajewels.com.

---

10. Your Rights

Depending on where you live, you have the following rights regarding your personal information:

All customers:

• Access: Request a copy of the personal information we hold about you
• Correction: Request that we correct inaccurate information
• Deletion: Request that we delete your personal information (subject to legal retention requirements)
• Portability: Request your data in a portable, machine-readable format
• Opt out of marketing: Unsubscribe from marketing emails at any time via the link in any email, or by emailing hello@ambrajewels.com

California residents (CCPA/CPRA):
You have additional rights under California law:

• Right to know: What personal information we collect, use, share, or sell
• Right to delete: Request deletion of your personal information
• Right to correct: Request correction of inaccurate personal information
• Right to opt out: Opt out of the sale or sharing of your personal information for cross-context behavioral advertising. Note: our use of Meta Pixel and Google Ads may constitute "sharing" under CCPA. You can opt out via our cookie consent banner or the "Do Not Sell or Share My Personal Information" link in our website footer.
• Right to limit use of sensitive personal information: We do not collect sensitive personal information as defined by CCPA beyond what is necessary to process your order.
• Right to non-discrimination: We will not discriminate against you for exercising any of your privacy rights.

EU/EEA and UK residents (GDPR/UK GDPR):
You have the right to access, rectify, erase, restrict, or object to processing of your personal data. You also have the right to lodge a complaint with your local supervisory authority.

How to exercise your rights:
Email us at hello@ambrajewels.com with the subject line "Privacy Request." We will respond within 45 days (CCPA) or 30 days (GDPR) of receiving your request. We may need to verify your identity before processing your request.

---

11. Children's Privacy

Our website is not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected information from a child, please contact us immediately at hello@ambrajewels.com and we will delete it promptly.

---

12. Links to Other Websites

Our website may contain links to third-party websites (such as Instagram, Pinterest, and our review platforms). We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal information.

---

13. International Data Transfers

Ambra Jewels LLC is based in the United States. If you are located outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

If you are in the EU/EEA, we ensure appropriate safeguards are in place for international transfers in accordance with GDPR requirements, including standard contractual clauses where applicable.

---

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email.

We encourage you to review this policy periodically.

---

15. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

Email: hello@ambrajewels.com
Subject line: Privacy Inquiry or Privacy Request
Response time: Within 2 business days for general inquiries; within 30–45 days for formal privacy rights requests

Ambra Jewels LLC
New York, NY, United States
ambrajewels.com