Paula James Custom Jewelry

Privacy Policy

​

This Privacy Policy ("Policy") is provided by Paula James Custom Jewelry ("we," "us," or "our"), a custom jewelry design business dedicated to crafting one-of-a-kind, handcrafted pieces for our clients. We are deeply committed to protecting the privacy and personal information of every individual who visits our website, places a custom order, or contacts us in any capacity.

This Policy describes the types of personal information we collect, how we use and protect that information, under what circumstances we may share it, and the rights available to you regarding your personal data. It applies to all website visitors, prospective customers, active clients, newsletter subscribers, and anyone who contacts Paula James Custom Jewelry through any channel, including our website, email, telephone, or social media.

By using our website or engaging with our services, you acknowledge that you have read and understood this Privacy Policy and agree to its terms. If you do not agree with any part of this Policy, please discontinue use of our website and services.

 

INTRODUCTION

 

Paula James Custom Jewelry is a luxury custom jewelry design business offering bespoke, handcrafted jewelry pieces tailored to the individual preferences, specifications, and life moments of each client. Our business operates through our website and accepts custom orders, inquiries, and purchases from clients throughout the United States and internationally.

We recognize that when you engage with our services — whether browsing our website, placing a custom order, or simply reaching out with a question — you may share personal information with us. We take that trust seriously. This Policy is our commitment to being transparent about how we handle your data, and to ensuring that your personal information is collected, used, and protected in a manner consistent with applicable privacy laws, including the California Consumer Privacy Act (CCPA/CPRA), the Children's Online Privacy Protection Act (COPPA), and, where applicable, the General Data Protection Regulation (GDPR) of the European Union and United Kingdom.

We reserve the right to update this Policy periodically to reflect changes in our practices, technology, or applicable law. When we do, we will revise the "Last Updated" date at the top of this document and, where appropriate, notify affected users directly.

INFORMATION WE COLLECT

We collect personal information in two primary ways: directly from you when you interact with us, and automatically through your use of our website. The specific information we collect depends on how you engage with our business.

​

Information You Provide Directly

When you visit our website, create an account, place a custom order, contact us, or sign up for our newsletter, you may provide us with the following categories of personal information:

• Identification Information: Your full legal name and any preferred name you wish us to use in correspondence.

• Contact Information: Email address, mailing address, shipping address, and telephone number.

• Payment Information: Credit card numbers, billing addresses, and other payment details. Please note that payment information is processed exclusively by secure, third-party payment processors (such as Stripe or PayPal) and is not stored on our servers. We receive only a transaction confirmation and, where applicable, the last four digits of a payment card.

• Custom Order Details: Any specifications you provide to facilitate the creation of your bespoke jewelry piece, including ring sizes, gemstone preferences, metal type, engraving text, design sketches or inspiration, and other design preferences or notes.

• Account Credentials: Username and password if you choose to create an account on our website. Passwords are stored in encrypted form and are never accessible to our staff in plain text.

• Communications: The content of any email messages, contact form submissions, social media messages, or other correspondence you send to us, including inquiries, feedback, and service requests.

• Marketing Preferences: Your stated preferences regarding promotional communications, including newsletter subscriptions.

 

Information Collected Automatically

When you visit our website, certain information is collected automatically through cookies, web beacons, log files, and similar tracking technologies. This information includes, but may not be limited to:

• Device and Technical Information: IP address, browser type and version, operating system, device type (desktop, mobile, or tablet), and screen resolution.

• Usage Data: Pages visited on our website, time and duration of visits, links clicked, items viewed or added to a shopping cart, and the sequence of pages browsed.

• Referral Information: The URL of the website from which you arrived at our site, and the search terms used if you arrived via a search engine.

• Purchase Behavior: Product categories browsed, items purchased, and frequency of purchases, used to understand general customer trends and improve the shopping experience.

• Location Data: General geographic location (such as city and state) inferred from your IP address. We do not collect precise real-time GPS location data.

HOW WE USE YOUR INFORMATION

 

We use the personal information we collect for legitimate business purposes only. Specifically, we use your information for the following purposes:

• Order Processing and Fulfillment: To receive, process, confirm, and fulfill your custom jewelry orders, including coordinating production timelines, sourcing materials, and managing custom design specifications.

• Order Communications: To communicate with you about the status of your order, production milestones, shipping confirmations, tracking information, and delivery updates.

• Customer Service: To respond to your questions, inquiries, complaints, and service requests in a timely and effective manner.

• Promotional Communications: To send you email newsletters, promotional offers, new collection announcements, and other marketing materials, but only where you have provided explicit consent to receive such communications. You may withdraw this consent at any time (see Section 8).

• Website Improvement: To analyze website traffic, usage patterns, and user behavior in order to improve the functionality, content, navigation, and overall experience of our website.

• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, and other potentially illegal or harmful activities.

• Legal Compliance: To fulfill our obligations under applicable federal, state, and international laws, including tax reporting requirements, record-keeping obligations, and responses to lawful legal process.

• Personalization: To tailor the browsing and shopping experience to your preferences, including displaying product recommendations based on prior purchases or browsing history.

• Business Operations: For internal administrative purposes, including accounting, auditing, and maintaining records of business transactions.

We will not use your personal information for purposes that are incompatible with those described above without providing you with prior notice and, where required, obtaining your consent.

COOKIES AND TRACKING TECHNOLOGIES

Our website uses cookies and similar tracking technologies to enhance your experience and gather information about how visitors use our site. A cookie is a small text file placed on your device by a website, which helps the site recognize your device on subsequent visits and remember certain preferences or actions.

​

Types of Cookies We Use

• Essential Cookies: These cookies are strictly necessary for the operation of our website. They enable core functions such as session management, shopping cart functionality, and secure login. Without these cookies, our website cannot function properly. These cookies cannot be disabled without affecting site performance.

• Analytics Cookies: We use analytics tools, including Google Analytics, to collect information about how visitors interact with our website — such as which pages are most visited and how long visitors remain on the site. This data is aggregated and used solely to improve website performance and content. You may opt out of Google Analytics by using the Google Analytics Opt-Out Browser Add-on, available at tools.google.com/dlpage/gaoptout.

• Marketing and Advertising Cookies: These cookies track your browsing activity across websites to enable us and our advertising partners to deliver targeted advertisements relevant to your interests. They may also be used to measure the effectiveness of advertising campaigns. These cookies are only placed with your consent, where required by law.

 

Third-Party Cookies

Our website may include content, plugins, or features from third-party platforms — such as social media "share" or "like" buttons from platforms including Meta (Instagram/Facebook), Pinterest, or Google — that may set their own cookies on your device. We do not control these third-party cookies, and their use is governed by the respective privacy policies of those third parties. We encourage you to review the privacy settings and policies of any third-party platform you interact with.

 

Managing Cookies

You may control and manage cookies through your web browser settings. Most browsers allow you to view, delete, or block cookies from specific or all websites. Please note that disabling certain cookies — particularly essential cookies — may impair your ability to use some features of our website, including completing a purchase or maintaining a logged-in session.

 

"Do Not Track" Signals

Some web browsers transmit "Do Not Track" (DNT) signals to websites. At this time, there is no universally accepted standard for how websites should respond to DNT signals, and our website does not currently alter its data collection practices in response to DNT browser settings. We will continue to monitor developments in this area and update our practices accordingly.

SECTION 5. HOW WE SHARE YOUR INFORMATION

Paula James Custom Jewelry does not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes. We share personal information only in the limited circumstances described below.

 

WE DO NOT SELL OR SHARE YOUR PERSONAL INFORMATION FOR CROSS-CONTEXT BEHAVIORAL ADVERTISING PURPOSES. (California Residents: See "Do Not Sell or Share My Personal Information" in Section 8.)

 

 Service Providers

We engage trusted third-party service providers to assist us in operating our business and delivering services to you. These providers are granted access to your personal information only to the extent necessary to perform their contracted functions and are contractually prohibited from using your information for any other purpose. Our service providers include:

• Shipping and Fulfillment Carriers: Carriers such as UPS, FedEx, and the United States Postal Service (USPS) receive your name, shipping address, and order details to facilitate delivery of your purchased items.

• Payment Processors: Third-party payment platforms such as Stripe, PayPal and all other credit card payment providers process your payment transactions securely. These processors are PCI DSS compliant and maintain their own privacy and security standards.

• Email Marketing Platforms: We use third-party email service providers to manage our newsletter list and deliver promotional communications to subscribers who have opted in. These platforms receive subscriber email addresses and first names only.

• Website Hosting and Technology Providers: Our website is hosted on third-party infrastructure. These providers may have incidental access to data transmitted through the site as part of their technical operations.

• Analytics Providers: As described in Section 4, we use analytics services such as Google Analytics to understand website usage.

 

Legal Requirements and Law Enforcement

We may disclose your personal information if we are required to do so by applicable law, regulation, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to: (a) comply with a legal obligation; (b) protect and defend the rights or property of Paula James Custom Jewelry; (c) prevent or investigate possible wrongdoing in connection with our services; or (d) protect the personal safety of users or the public.

 

Business Transfers

In the event that Paula James Custom Jewelry undergoes a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of its assets, your personal information may be transferred to the acquiring entity as part of that transaction. We will provide notice of any such transfer and any resulting changes to this Privacy Policy as required by applicable law.

 

With Your Consent

We may share your personal information with other parties in circumstances not described above, but only with your prior express consent.

 

DATA RETENTION

 

We retain personal information only for as long as is necessary to fulfill the purposes for which it was collected, to comply with our legal and regulatory obligations, and to resolve any disputes that may arise. Our general retention practices are as follows:

• Order and Transaction Records: Records related to purchases, custom orders, and financial transactions are retained for a minimum of seven (7) years from the date of the transaction, as required by applicable tax and accounting laws.

• Customer Account Data: If you maintain an account with us, your account information is retained for as long as your account remains active. Upon your request to close or delete your account, we will delete or anonymize your account data within a reasonable time, subject to any legal retention obligations.

• Marketing and Communication Data: Email addresses and marketing preferences collected for promotional communications are retained until you opt out of such communications or request deletion of your data.

• Correspondence and Inquiry Records: Records of communications you have had with our customer service team may be retained for up to three (3) years to assist in responding to future inquiries and to maintain service quality.

• Automatically Collected Data: Log files and analytics data collected automatically through cookies and tracking technologies are typically retained for no longer than twenty-six (26) months, after which they are aggregated or deleted.

You have the right to request deletion of your personal information at any time (subject to applicable legal retention requirements). See Section 8 for instructions on how to submit such a request.

 

SECURITY

Paula James Custom Jewelry takes the security of your personal information seriously and implements a range of technical and organizational measures designed to protect your data from unauthorized access, disclosure, alteration, or destruction. Our security practices include, but are not limited to:

• SSL/TLS Encryption: Our website uses Secure Sockets Layer (SSL) / Transport Layer Security (TLS) encryption to protect data transmitted between your browser and our web servers. You can verify this by confirming that our website URL begins with "https://".

• Secure Payment Processing: All payment card transactions are processed through PCI DSS-compliant payment processors. We do not store full payment card numbers on our servers.

• Access Controls: Access to personal information within our business is limited to employees and contractors who require such access to perform their legitimate job functions. All personnel with access to personal data are subject to confidentiality obligations.

• Password Protection: Customer account passwords are stored using industry-standard one-way cryptographic hashing. We do not have access to your password in its plain-text form.

• Regular Security Reviews: We periodically review and update our security practices to address evolving threats and vulnerabilities.

However, no method of electronic transmission or storage is completely secure, and we cannot guarantee the absolute security of your personal information. In the unlikely event of a data breach that affects your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law.

You can help protect your account by using a strong, unique password for your Paula James Custom Jewelry account, by not sharing your login credentials with others, and by logging out of your account when using a shared or public device. If you suspect any unauthorized access to your account or believe your personal information has been compromised, please contact us immediately at privacy@paulajamescustomjewelry.com.

YOUR PRIVACY RIGHTS

Depending on your jurisdiction of residence, you may have certain rights with respect to the personal information we hold about you. We are committed to honoring these rights. The following describes the rights available to various categories of users.

 

 Rights Available to All Users

Regardless of your location, all individuals who interact with Paula James Custom Jewelry are entitled to the following:

• Right to Access: You may request a copy of the personal information we hold about you.

• Right to Correction: You may request that we correct any inaccurate or incomplete personal information we hold about you.

• Right to Deletion: You may request that we delete your personal information, subject to applicable legal retention obligations.

• Right to Opt Out of Marketing: You may unsubscribe from our marketing emails at any time by clicking the "unsubscribe" link in any promotional email, or by contacting us directly. Opting out of marketing communications does not affect transactional communications related to active orders.

 

California Residents — CCPA / CPRA Rights

If you are a resident of the State of California, you are entitled to the following additional rights under the California Consumer Privacy Act of 2018 (CCPA) and the California Privacy Rights Act of 2020 (CPRA):

• Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the purposes for which it was collected, and the categories of third parties with whom it has been shared.

• Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions permitted by law.

• Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.

• Right to Opt Out of Sale or Sharing: You have the right to opt out of the sale of your personal information or the sharing of your personal information for cross-context behavioral advertising. As stated in Section 5, we do not sell or share your personal information for these purposes. No affirmative opt-out action is currently required; however, you may submit a request to confirm this at any time.

• Right to Limit Use of Sensitive Personal Information: Under the CPRA, you have the right to direct us to limit our use and disclosure of sensitive personal information to those uses that are necessary to provide the services you request. We use sensitive personal information (such as payment data and custom order specifications) only for the purposes described in this Policy and as necessary to fulfill your orders.

• Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising any of your CCPA/CPRA rights. We will not deny services, charge different prices, or provide a lesser quality of service as a result of your exercising these rights.

 

European Union and United Kingdom Residents — GDPR Rights

If you are located in the European Union, the European Economic Area, or the United Kingdom, the General Data Protection Regulation (GDPR) and/or applicable UK data protection law grants you the following rights with respect to your personal data:

• Right of Access: You have the right to obtain confirmation of whether we process personal data about you and to receive a copy of that data.

• Right to Rectification: You have the right to request correction of inaccurate personal data and completion of incomplete personal data.

• Right to Erasure ("Right to Be Forgotten"): You have the right to request deletion of your personal data where there is no compelling reason for us to continue processing it.

• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, such as while a correction request is pending.

• Right to Data Portability: You have the right to receive personal data you have provided to us in a structured, commonly used, and machine-readable format, and to transmit it to another controller where technically feasible.

• Right to Object: You have the right to object to our processing of your personal data where that processing is based on our legitimate interests, including processing for direct marketing purposes.

• Right to Lodge a Complaint: You have the right to lodge a complaint with the data protection supervisory authority in your country or region if you believe our processing of your personal data violates applicable law. In the EU, your national supervisory authority can be found via the European Data Protection Board. In the UK, the relevant authority is the Information Commissioner's Office (ICO).

Our legal bases for processing personal data under the GDPR include: performance of a contract (to fulfill your orders), compliance with a legal obligation, our legitimate interests (to improve our services and prevent fraud), and, where applicable, your consent (for marketing communications).

 

How to Submit a Privacy Rights Request

To exercise any of the rights described above, please contact us using the information in Section 12 of this Policy. When submitting a request, please identify yourself clearly and describe your request with sufficient detail to allow us to respond appropriately. We will acknowledge receipt of your request within ten (10) business days and fulfill verifiable requests within forty-five (45) days, or within thirty (30) days where required by applicable law. If additional time is needed, we will notify you of the extension and the reason for the delay.

We may ask you to verify your identity before processing your request to protect the security of your information. Requests may be submitted by authorized agents where permitted by law, provided that the agent provides written proof of authorization.

CHILDREN'S PRIVACY

Paula James Custom Jewelry does not knowingly collect, solicit, or maintain personal information from children under the age of thirteen (13). Our website and services are intended for adult consumers and are not directed toward children. We do not knowingly allow children under 13 to create accounts, place orders, or subscribe to our communications.

We are committed to complying with the Children's Online Privacy Protection Act (COPPA) and all other applicable laws governing the collection of children's data. We do not knowingly collect personal information from children under 13 without verifiable parental consent.

If you are a parent or legal guardian and believe that your child under the age of 13 has provided us with personal information without your consent, please contact us immediately at privacy@paulajamescustomjewelry.com. Upon verification, we will promptly delete any such information from our records. If we discover that we have inadvertently collected personal information from a child under 13, we will take immediate steps to delete that information.

THIRD-PARTY LINKS

Our website may contain hyperlinks to third-party websites, social media platforms, blogs, partner retailers, or other external online resources. These links are provided for your convenience and informational purposes only. Paula James Custom Jewelry does not own, operate, or control these third-party websites and is not responsible for their content, privacy practices, terms of service, or data security measures.

The inclusion of a link to a third-party website on our site does not constitute an endorsement, sponsorship, or recommendation of that website or its operator. When you click on a link and leave our website, this Privacy Policy no longer applies to your activities on the third-party site. We strongly encourage you to review the privacy policy of any external website you visit before submitting personal information.

If you have concerns about how a third-party site collects or uses your information, please contact that site directly or consult its posted privacy policy.

SECTION 11. CHANGES TO THIS POLICY

 

We reserve the right to update, modify, or replace this Privacy Policy at any time in our sole discretion, in order to reflect changes in our business practices, the services we offer, applicable law, or technological developments. All such changes are effective immediately upon posting the revised Policy to our website, unless a later effective date is specified.

When we make material changes to this Policy, we will make reasonable efforts to notify affected users by one or more of the following methods: (a) prominently posting a notice on our website homepage; (b) sending an email notification to registered account holders or newsletter subscribers using the email address associated with your account; or (c) displaying an in-site banner or pop-up notice drawing your attention to the changes.

Your continued use of our website or services following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you should discontinue your use of our website and services and may submit a data deletion request in accordance with Section 8.

We encourage you to review this Privacy Policy periodically to remain informed about how we are protecting your information. The "Last Updated" date at the top of this document indicates when the most recent revisions were made.

SECTION 12. CONTACT INFORMATION

 

If you have any questions, concerns, or requests relating to this Privacy Policy or our privacy practices, or if you wish to exercise any of your privacy rights as described in Section 8, please contact us using the following information. We are committed to responding to all privacy-related inquiries and rights requests within thirty (30) days of receipt.

 

Paula James Custom Jewelry

Privacy and Data Inquiries

Email: privacy@pjnyusa@gmail.com

Mailing Address:
Paula James Custom Jewelry
Attn: Paula James
1500 Fifth Avenue
New York, NY 10026

Response Time Commitment: We will acknowledge all privacy rights requests within ten (10) business days of receipt and will respond fully within thirty (30) days, unless an extension is required and communicated to you in advance.

If your inquiry concerns a data breach, urgent security concern, or you believe your personal information has been unlawfully accessed, please mark your communication as urgent and we will prioritize our response accordingly.

This Privacy Policy is effective as of July 8, 2026. © 2026 Paula James Custom Jewelry. All rights reserved.
Unauthorized reproduction of this document is prohibited.