Olertis Privacy Policy: How do we protect your personal and payment information when you order custom jewelry?
How Olertis Protects Client Data and Online Payments
Creating custom jewelry is a deeply personal experience; you weave your innermost feelings into gold and stone. As we navigate the digital age, privacy seems to be rapidly disappearing. Your trust is what truly matters to us. Safeguarding your data is one of the core principles of how we do business at Olertis. It’s a discipline that is deliberately embedded in all aspects of what we do; it is not merely a legal obligation.
This Privacy Policy describes how Olertis uses, collects, stores, and protects your personal and payment information in connection with Olertis’ Terms of Service.
Privacy Policy Sections
U.S. Privacy Law Obligations for Custom Jewelry Client Data
Olertis complies with applicable U.S. federal and state privacy laws to protect all personal and payment-related information provided by customers and website visitors. Olertis does not sell or share your personal information, as those terms are defined in applicable U.S. state privacy laws, including the California Consumer Privacy Act (CCPA/CPRA). This commitment applies from your initial inquiry and continues for as long as we retain your information in accordance with applicable laws.
We differentiate between personal data and payment data. Personal data relates to voluntary contact and identification details provided by the customer. Payment data is the card or account info used to pay for a transaction. Olertis never directly processes or stores payment credentials at any point during the creation of a piece of custom jewelry.
Our data collection follows the principle of “data minimization.” We only collect and process the information necessary to fulfill a custom jewelry order, assess a customer’s request, hold a consultation, and perform contractual obligations. This is the expectation of U.S. e-commerce consumers who expect high transparency, accountability, and responsible data management.
Personal data is only retained when there is a valid reason to do so. Design and project documentation may be kept for up to 15 years to enable servicing or reorders in the future. Financial and tax documents are retained for up to 5 years per U.S. tax and accounting regulations. Where permitted by law, customers have the right to limit or delete data that is no longer required. There are some documents that must be retained for a minimum period of time based on applicable laws and cannot be deleted until that minimum retention period has passed.
How Jewelry Website Personal Data Is Collected and Stored
When communicating with Olertis through the website, visitors voluntarily enter information that is relevant to their jewelry inquiry. This generally includes:
- first and last names, email addresses, and optional gender
- descriptions of the jewelry project via written message
- design reference photos or video attachments related to personalized jewelry
The information entered on our site is immediately sent to Olertis design specialists and is never available or transferred to third-party companies. Client data is stored as correspondence on Olertis’ secure servers with restricted access. All information entered through our official website is transmitted via HTTPS/TLS encryption and is stored on secure servers with role-based internal access controls and ongoing security monitoring. Client data is hosted in professional U.S.-based data centers and only Olertis authorized personnel can access it.
Olertis does not transfer, sell, or trade client personal data with outside entities. Any third-party service provider we hire for infrastructure or email services only acts as a technical processor on behalf of Olertis, and is contractually bound not to use any client personal data for their own advertising, reselling, or unrelated purposes.
This information is only accessible to Olertis employees who have a legitimate business reason to view client information, which is particularly important for high-end and private client work.
How Custom Jewelry Client Data Is Used Without Ads or Spam
Olertis does not use any client personal data for spam, mass marketing, or unsolicited communication.
Contact details are only used to respond to client inquiries, conduct consultations, and to coordinate the production and delivery of custom jewelry. We do not send unsolicited promotional emails or messages unless the individual explicitly opted-in to receive them. Our approach to client communication is consistent with the high privacy standards valued by American clients.
If a client chooses to receive informational updates or promotional messages, they may opt-out at any time. Opting out does not affect current or future custom jewelry orders.
We may use non-personalized cookies and privacy-focused analytics tools to monitor and improve the functionality and usability of the Olertis website, however we do not use client personal data to advertise or promote products without prior consent.
Jewelry Payment Security and PayPal Card Processing
Payment security is taken very seriously by Olertis. Olertis does not collect, store, or process card or account information.
Payments are processed solely at the time of checkout through PayPal, the exclusive payment processor on the Olertis website. All payment data is entered directly into PayPal’s secure system to complete a single invoice without any technical access by Olertis, and PayPal is responsible for protecting cardholder data in compliance with industry-wide standards for payment security. Additionally, Olertis never views or stores a customer’s full card number, CVV, or PayPal login details.
As a matter of security, Olertis never solicits or requires card information or PayPal login credentials from clients via email, phone call, or messaging apps. Clients are never asked to share payment information in correspondence. This policy helps to prevent clients from falling victim to phishing scams and payment scams.
Additional Privacy Policy Rights, Definitions, And Regulatory Disclosures
1. Contact Information for Privacy Requests
Website visitors and clients can make inquiries or requests regarding their personal data, privacy rights, or how we handle personal information by contacting us through the means listed on our website and contact page. This includes our dedicated privacy email at [email protected] and our customer support phone number +1 603 416 4448. All privacy-related requests are reviewed and processed by authorized personnel responsible for data protection and compliance.
2. Consumer Data Rights
Individuals in the United States may have specific rights concerning their personal data depending on applicable U.S. federal and state laws. Depending upon the applicable laws, some examples of rights you may have include: know and request access to personal data; correct inaccuracies in the data; request removal of personal data when no longer needed; or request a copy of your personal data in a portable form, if permitted by law. In all cases, your requests will be analyzed and fulfilled as allowed by applicable laws and in accordance with any retention obligations.
3. Definition of Personal Information
Personal information includes any type of information that either directly identifies, indirectly identifies, relates to, describes, or could be reasonably associated with an individual. Examples of personal information may include contact information, correspondence, design materials submitted on a voluntary basis, online identifiers (such as IP addresses), device or browser information, and limited usage data collected using cookies or analytics tools where applicable.
4. Cookies and Automatic Data Collection
To support website functionality, security, and performance, the Olertis website may utilize necessary cookies and privacy-focused analytics tools. None of these tools involve the sale of personal data or behavioral advertising. Users may opt-out of cookies or restrict cookies using their browser settings. Additionally, where applicable, the website will provide the user with a mechanism to manage or restrict their cookie preferences through website-based controls.
5. State-Specific Privacy Rights
Various U.S. state laws including but not limited to the California Consumer Privacy Act (CCPA/CPRA), Virginia Consumer Data Protection Act (VCDPA), and other similar regulatory bodies afford consumers residing within those states with additional rights related to their personal data. Where applicable by law, we honor applicable state-specific consumer privacy rights, including consumer rights to limit access to, deletion of, and limitations on data sharing, in accordance with our legal obligations. We will not discriminate against any person for exercising their consumer rights in the context of privacy, where such protections are mandated by law.
6. Children’s Privacy
The Olertis website and services are not intended for children under the age of 13 years old. As stated above, Olertis does not knowingly collect any type of personal information from children as defined under the Children’s Online Privacy Protection Act (COPPA). If any personal data from a child is identified, it will be addressed and removed consistent with applicable laws and regulations.
7. Do Not Track Signals
At this time, the Olertis website does not recognize browser-based “Do Not Track” (DNT) signals or similar automated privacy mechanisms. Olertis also does not permit third-party entities to collect personally identifiable information about users’ online activities over time and across multiple websites.
8. Changes to This Privacy Policy
Olertis reserves the right to modify this Privacy Policy at any time to reflect changes in applicable laws and regulations, changes in our business practices, or other data protection standards. Any revisions to the Privacy Policy will be posted on this webpage; therefore, continued use of the website after a revision constitutes acknowledgement of the revised Privacy Policy.
9. Effective Date
Effective Date: August 17, 2023
Last Updated: February 28, 2026
