Privacy policy

Privacy Policy

Last updated: September 2026

Sana Jewels ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you visit sanajewels.com or make a purchase from us. By using our website, you agree to the terms of this policy.

Information We Collect

We collect the following types of information when you interact with our store:

• Personal identifiers: name, email address, phone number, billing and shipping address.
• Payment information: credit or debit card details processed securely through our payment provider. We do not store your full card number.
• Order information: purchase history, order status, and communications related to your orders.
• Device and usage data: IP address, browser type, pages visited, referring URLs, and time spent on the site, collected via cookies and analytics tools.
• Communications: any messages you send us via email or contact forms.

How We Use Your Information

• To process and fulfill your orders.
• To send order confirmations, shipping updates, and customer service communications.
• To send marketing emails if you have opted in (you may unsubscribe at any time).
• To improve our website and customer experience.
• To prevent fraud and protect the security of our store.
• To comply with applicable laws and legal obligations.

Sharing Your Information

We do not sell your personal information for money. We may share your information with trusted third parties solely to operate our business, including:

• Shopify — our e-commerce platform provider.
• Payment processors — to securely handle transactions.
• Shipping partners — to fulfill and deliver your orders safely.
• Email service providers — to send transactional and marketing communications.
• AI and hosting providers — Anthropic generates replies for our on-site advisor, and Cloudflare hosts the advisor and Drop Hint services (see "Sana Advisor & Drop Hint" below).
• Analytics and advertising providers — to understand how our website is used and, where enabled, to deliver relevant advertising. Sharing information with advertising partners for cross-context behavioral advertising may be considered a "sale" or "share" of information under some state privacy laws, as described below.

All third parties are contractually required to protect your information and use it only for the purposes we specify.

Sana Advisor & Drop Hint

Sana Advisor (chat). Messages you type into our on-site advisor are sent to Anthropic, our AI provider, to generate a reply, and pass through Cloudflare, which hosts the service. We do not use chat messages to train models, and we do not link them to your account or order history. If you choose to leave your name and email so our team can follow up, we use them only to answer that question. Please don't share payment details or passwords in the chat.

Drop Hint. If you use Drop Hint to tell someone about a piece, we send a single email to the address you enter, containing the product, your optional note, and a line explaining that a visitor asked us to share it. The email is delivered by Resend, our email service provider. We do not store the recipient's address after the email is sent, we do not add them to any list, and we will not contact them again. Please only use Drop Hint for people you know.

Both features rely on Cloudflare for delivery and basic abuse protection. Request records (such as IP address and timestamp) are retained briefly for security and troubleshooting and are then deleted.

Your Privacy Rights

Depending on where you live, you may have rights under state privacy laws such as the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and similar laws in states including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and others. These rights may include:

• Right to know / access: request information about the personal data we have collected about you and how it is used or disclosed.
• Right to delete: request that we delete personal information we hold about you, subject to certain exceptions.
• Right to correct: request that we correct inaccurate personal information we hold about you.
• Right to opt out of sale or sharing: opt out of the sale of your personal information, or the sharing of your information for cross-context behavioral advertising.
• Right to limit use of sensitive personal information: where applicable, request that we limit the use of sensitive personal information to what is necessary to provide our products and services.
• Right to non-discrimination: we will not discriminate against you for exercising any of your privacy rights.

To exercise any of these rights, email us at support@sanajewels.com. We will verify your request and respond within the timeframe required by applicable law (generally within 45 days). You may also designate an authorized agent to submit a request on your behalf; we may require the agent to provide proof of authorization and may still need to verify your identity directly.

Global Privacy Control (GPC): We honor opt-out preference signals, such as the Global Privacy Control, sent by your browser as a valid request to opt out of the sale or sharing of your personal information where required by applicable law.

International Visitors

Our website is operated from, and governed by the laws of, the United States. If you are visiting our site or placing an order from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where our servers and central database are located. By using our website, you consent to this transfer.

Cookies

We use cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and personalize content. You may disable cookies in your browser settings, though some features of our website may not function properly as a result.

Data Retention

We retain order and account information for as long as reasonably necessary to fulfill the purposes described in this policy, including maintaining business and tax records, resolving disputes, and complying with our legal obligations — generally for the duration of your relationship with us plus a period afterward as required by applicable law (typically up to 7 years for financial and tax-related records). Marketing communication preferences and related data are retained until you unsubscribe or request deletion.

Data Security

We use industry-standard security measures, including SSL encryption, to protect your personal information during transmission and storage. While we take reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. In the event of a data breach affecting your personal information, we will notify affected individuals and relevant authorities as required by applicable law.

Third-Party Links

Our website may contain links to third-party sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

Children's Privacy

Our website is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Your continued use of our website after any changes constitutes your acceptance of the revised policy.