Privacy Policy

Last Updated and Effective: August 3, 2026

1. Scope and Our Commitment to Privacy

This Privacy Policy explains how Birthstone, LLC (“Birthstone,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects personal information when you visit or interact with our website and related online services (collectively, the “Site”), purchase or own a Birthstone product, register or use a warranty, request a repair, replacement, trade-up, or other service, communicate with us, attend or express interest in an event, or apply for employment.

For purposes of this Privacy Policy, “personal information” or “personal data” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with an individual or household. It does not include information that has been deidentified or aggregated so that it cannot reasonably be linked to an individual.

This Privacy Policy applies to information controlled by Birthstone. Authorized retailers, service centers, social media platforms, payment processors, Shopify, and other third parties may have their own privacy policies and may independently determine how they process personal information.

This Privacy Policy is a notice of our practices, not a request for consent to every use of personal information. Where applicable law requires consent, we will seek it separately and provide a method to withdraw it.

2. Personal Information We Collect

Depending on how you interact with us, we may collect the following categories of personal information:

Identifiers and contact information. Name, postal address, billing and shipping addresses, email address, telephone number, IP address, customer or warranty number, and similar identifiers.
Customer records and commercial information. Products purchased or owned, item and tag information, purchase date and location, authorized retailer, warranty registration, repair or replacement history, trade-up information, order details, transaction history, service requests, and jewelry preferences.
Payment and financial information. Billing information, payment card or gift card information, transaction data, and fraud-prevention information. Payment information may be processed by payment service providers. We do not use sensitive financial information to infer characteristics about you.
Internet, device, and online activity information. Browser type, device type, operating system, device identifiers, cookie and similar technology identifiers, pages viewed, links clicked, referring and exit pages, dates and times of visits, interactions with emails or advertisements, and information about how you use the Site.
Approximate location information. General location derived from an IP address or similar information. We do not request precise geolocation through the Site unless we provide a separate notice and obtain any consent required by law.
Communications and submitted content. Emails, contact-form submissions, customer-service communications, survey responses, event inquiries, reviews, photographs or other content you choose to provide, and records of your requests and preferences.
Preferences and inferences. Jewelry interests, product preferences, marketing preferences, likely interests, and inferences derived from purchase, service, website, or advertising interactions.
Professional and employment information. Resume, work history, education, professional qualifications, references, and other information submitted in connection with an employment application.
Sensitive personal information. Certain payment credentials or account-access information may be considered sensitive personal information under applicable law. We do not knowingly collect or use sensitive personal information to infer characteristics about consumers, and we do not request biometric, genetic, health, racial or ethnic, religious, sexual orientation, citizenship or immigration, neural, or precise geolocation information in ordinary customer interactions unless specifically disclosed and permitted by law.

3. Sources of Personal Information

We may collect personal information from:

You, including when you submit a form, contact us, register a warranty, request a service, make a purchase directly from us, subscribe to marketing, enter an event, or apply for a position.
Authorized retailers, service centers, affiliates, and business partners, including information relating to a product purchase, warranty registration, repair, replacement, service request, event, or marketing preference.
Your browser, device, cookies, pixels, software development kits, server logs, and similar technologies when you use the Site or interact with our communications.
Shopify and service providers that support website hosting, website functionality, analytics, security, payment processing, customer service, warranty administration, email delivery, advertising, and other business operations.
Advertising, social media, and analytics partners, to the extent permitted by law and consistent with your privacy choices.
Publicly available sources and information that you make publicly available.

4. How We Use Personal Information

We may use personal information for the following purposes:

Provide, administer, and improve the Site, products, warranties, repairs, replacements, trade-up services, orders, events, and customer support.
Verify product and purchase information, authenticate requests, locate service records, and communicate about transactions, warranties, repairs, replacements, or other services.
Process payments, prevent fraud, protect accounts and systems, investigate security incidents, and maintain the safety and integrity of our operations.
Respond to questions, requests, comments, complaints, and other communications.
Personalize content, understand customer interests, conduct analytics, measure Site and campaign performance, and improve products, services, and user experience.
Send marketing and promotional communications about products, trunk shows, special events, service locations, and other information that may be of interest, subject to your choices and applicable law.
Conduct advertising, including targeted advertising where permitted, and measure the effectiveness of advertising.
Maintain records, enforce agreements and policies, exercise or defend legal claims, comply with legal obligations, and respond to lawful government requests.
Evaluate employment applications and administer recruiting activities.
Carry out any other purpose disclosed to you at the time of collection or with your consent.

We limit the collection, use, retention, and disclosure of personal information to what is reasonably necessary and proportionate for the disclosed purposes, or to another purpose that is compatible with the context in which the information was collected. If we wish to use personal information for a materially different purpose that is not compatible with the original purpose, we will provide additional notice and obtain consent where required.

5. Shopify and Our Service Providers

Our Site is hosted by Shopify. Shopify processes personal information when you visit or interact with the Site and as needed to provide Shopify-powered services to us and to you. Shopify may process your information in countries other than the country where you live. To learn more about how Shopify processes personal information and the rights available to you, review the Shopify Consumer Privacy Policy.

We use Shopify Network Intelligence and related enhanced services. In connection with these services, information about your activity on the Site may be shared with Shopify and other parties, including parties located in other countries. Shopify may combine information from your interactions with our Site, other merchants, and Shopify to help provide a more customized experience, deliver more relevant advertising, understand customer and advertising interactions, and improve services. Your applicable consent and opt-out choices are described below.

6. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients:

Service providers and processors. Companies that perform services on our behalf, such as Shopify, website hosting providers, cloud storage providers, analytics providers, payment processors, email delivery services, customer-support providers, warranty administrators, repair and logistics providers, security and fraud-prevention providers, marketing providers, and professional advisers. These parties are permitted to use personal information only as authorized by contract and applicable law.
Authorized retailers and service centers. Retailers and service centers that help verify purchases, administer warranties, complete repairs or replacements, provide requested services, coordinate events, or support customer relationships.
Affiliates and business partners. Affiliated companies and selected partners with whom we jointly offer products, services, events, or marketing. Where these parties use personal information for their own purposes, their privacy policies also apply.
Advertising, social media, and analytics partners. Companies that help deliver, personalize, measure, and analyze advertising and Site activity. These disclosures may be considered a sale, sharing, or targeted advertising under certain state privacy laws, as explained below.
Professional advisers. Lawyers, accountants, auditors, insurers, consultants, and other professional advisers when reasonably necessary for their services.
Government authorities and other parties for legal, safety, and security purposes. We may disclose information when we reasonably believe it is necessary to comply with law or legal process; respond to a lawful request; protect rights, property, safety, or security; detect or prevent fraud or illegal activity; enforce agreements; or establish, exercise, or defend legal claims.
Parties to a corporate transaction. We may disclose personal information in connection with a proposed or completed merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar corporate transaction, subject to appropriate safeguards.
Other parties at your direction or with your consent. We may disclose personal information when you direct us to do so or provide consent.

7. Sale, Sharing, and Targeted Advertising

Birthstone does not sell personal information for money. However, some disclosures to Shopify, advertising, analytics, social media, authorized retailer, or marketing partners may be considered a “sale” or “sharing” of personal information, or processing for “targeted advertising,” under certain state privacy laws even when no money is exchanged.

The categories of personal information that may be sold, shared, or processed for targeted advertising include identifiers, commercial information, internet or other electronic network activity, approximate location information, and preferences or inferences. The categories of recipients may include advertising networks, analytics providers, social media platforms, authorized retailers, Shopify, and marketing partners.

You may opt out of the sale or sharing of personal information and targeted advertising through our Your Privacy Choices page or by emailing marketing@birthstone.com.

Where required by applicable law, we recognize browser-based universal opt-out preference signals, including the Global Privacy Control, as a request to opt out of the sale or sharing of personal information and targeted advertising for the browser or device that sends the signal. Your choice may be specific to the browser and device you use.

We do not knowingly sell or share the personal information of children under 16, or process their personal information for targeted advertising, without any consent required by applicable law. Because the Site is intended for adults, we do not knowingly engage in these activities with individuals under 18.

Rhode Island disclosure: Birthstone does not sell customers’ personally identifiable information to third parties.

8. Cookies and Similar Technologies

We and our partners, including Shopify, may use cookies, pixels, tags, local storage, server logs, and similar technologies to operate the Site, remember preferences, maintain security, understand Site usage, measure communications, personalize your experience, and support advertising.

These technologies may include:

Strictly necessary technologies that support Site functions, security, fraud prevention, and requested services.
Functional technologies that remember choices and improve features.
Analytics technologies that help us understand traffic, performance, and use of the Site.
Advertising technologies that help select, deliver, personalize, and measure advertisements.

You can manage nonessential cookies and similar technologies through the cookie banner or preference controls available on the Site.

Browser controls may also allow you to delete or block cookies, although doing so may affect Site functionality. Your cookie choices may be specific to the browser and device you use.

9. Data Retention

We retain personal information only for as long as reasonably necessary and proportionate to fulfill the purposes described in this Privacy Policy, unless a longer period is required or permitted by law. The criteria we use to determine retention periods include the length of our relationship with you; the duration of a warranty, repair, replacement, order, or service; the sensitivity and volume of the information; operational and security needs; legal, accounting, tax, reporting, and recordkeeping requirements; limitation periods; and the need to establish, exercise, or defend legal claims.

In general:

Warranty, product, transaction, repair, replacement, and service records are retained for the applicable service or warranty period and for an additional period needed for legal, accounting, fraud-prevention, and recordkeeping purposes.
Payment information is retained only as needed to process transactions, prevent fraud, resolve disputes, and comply with legal obligations. Payment processors may retain information under their own policies.
Marketing information is retained until you opt out or until it is no longer needed, except that we may retain limited suppression-list information to honor your opt-out.
Website, cookie, analytics, and advertising information is retained according to the applicable technology, consent settings, business need, and provider configuration.
Communications are retained for as long as reasonably necessary to respond, provide services, maintain records, or protect legal rights.
Employment-application information is retained for the recruiting process and for a period reasonably necessary to comply with employment and recordkeeping laws.

When personal information is no longer needed, we take reasonable steps to delete, destroy, or deidentify it. Information in backups may remain until the backup is overwritten or deleted in the ordinary course, subject to appropriate safeguards.

10. Marketing Choices

You may unsubscribe from promotional emails by using the unsubscribe link in the message or by emailing marketing@birthstone.com. You may also contact us to opt out of other promotional communications. We may retain limited information necessary to honor your request.

Even after you opt out of marketing, we may continue to send nonpromotional communications relating to warranties, repairs, replacements, transactions, security, legal notices, or other services you requested.

11. U.S. State Privacy Rights

Depending on your state of residence and subject to applicable exceptions, you may have some or all of the following rights regarding your personal information:

Confirm and access. Confirm whether we process your personal information and obtain access to it, including specific pieces of information where required.
Correct. Correct inaccuracies in your personal information.
Delete. Request deletion of personal information we collected from or about you.
Portability. Receive a copy of certain personal information in a portable and, where technically feasible, readily usable format.
Opt out. Opt out of the sale of personal information, sharing for cross-context behavioral advertising, targeted advertising, or certain profiling used to make decisions that produce legal or similarly significant effects.
Limit sensitive personal information. Limit certain uses or disclosures of sensitive personal information where this right applies. Birthstone does not use sensitive personal information to infer characteristics about consumers.
Withdraw consent. Withdraw consent for processing when we rely on consent, using a method that is as easy as the method used to provide consent.
Obtain third-party information. Request a list of specific third parties or categories of third parties to which we disclosed or sold personal information where applicable law provides this right.
Appeal. Appeal our refusal to act on a privacy request.
Non-discrimination. Exercise your privacy rights without unlawful discrimination.

12. How to Exercise Your Privacy Rights

You may submit a privacy request through one of the following methods:

Email: marketing@birthstone.com
Mail: Birthstone, LLC, Attn: Privacy, 185 Great Neck Road, Great Neck, NY 11021
Sale, sharing, and targeted-advertising opt-out: Your Privacy Choices

Please describe the right you wish to exercise and provide information reasonably necessary for us to identify the relevant records and verify your identity. We will use personal information provided in connection with a request only to process, verify, document, and respond to the request. We may be unable to fulfill a request if we cannot reasonably verify your identity or if an exception applies.

We will respond within the period required by applicable law, generally within 45 days, and may extend that period where permitted. If we deny a request, we will explain the reason and, where applicable, provide instructions for appealing the decision. To appeal, reply to our decision or submit a new request marked “Privacy Appeal.”

Where permitted by law, you may designate an authorized agent to submit an opt-out or other request on your behalf. We may require proof of the agent’s authority and may ask you to verify your identity directly, except where law provides otherwise.

We do not charge a fee for processing a privacy request unless permitted by law, such as when a request is manifestly unfounded, excessive, or repetitive.

For accessibility assistance or to request this Privacy Policy in an alternative format, contact us using the information in Section 19.

13. California Privacy Notice

This section supplements the rest of this Privacy Policy for California residents and uses terms defined by the California Consumer Privacy Act, as amended, and its implementing regulations.

Categories collected. During the preceding 12 months, Birthstone may have collected the following categories of personal information: identifiers; customer-record information; commercial information; internet or other electronic network activity; approximate geolocation information; audio, electronic, or similar information contained in communications; professional or employment-related information; inferences; and sensitive personal information limited primarily to payment or account-access information.

Sources and purposes. We collect these categories from the sources described in Section 3 and use them for the business and commercial purposes described in Section 4.

Disclosures for business purposes. During the preceding 12 months, we may have disclosed the categories described above to Shopify, service providers, contractors, authorized retailers, service centers, affiliates, professional advisers, and other parties described in Section 6 for business purposes.

Sale or sharing. During the preceding 12 months, we may have sold or shared, as those terms are defined by California law, identifiers, commercial information, internet or other electronic network activity, approximate geolocation information, and inferences to advertising, analytics, social media, authorized retailer, Shopify, or marketing partners. We do not sell personal information for money. You may opt out as described in Sections 7 and 12.

Sensitive personal information. We use or disclose sensitive personal information only for purposes reasonably necessary to provide requested goods or services, process payments, prevent fraud, maintain security, comply with law, and perform other purposes permitted without a right to limit. We do not use sensitive personal information to infer characteristics about you.

California rights. California residents may have the right to know, access, correct, delete, and obtain information about the categories of sources, purposes, and third parties involved in our processing; to opt out of sale or sharing; to limit certain uses of sensitive personal information; and to be free from unlawful discrimination. California residents may also use an authorized agent, subject to verification requirements.

California “Shine the Light.” California residents may request information regarding certain disclosures of personal information to third parties for their direct marketing purposes. Submit a request to marketing@birthstone.com with “California Shine the Light Request” in the subject line.

14. Children’s Privacy

The Site is intended for adults and is not directed to children under 13. We do not knowingly collect personal information online from children under 13. If we learn that we have collected such information without the authorization required by law, we will take reasonable steps to delete it.

We require users who submit warranty, order, service, or employment information through the Site to be at least 18 years old. Parents or legal guardians who believe a child provided personal information may contact us using the information in Section 19.

If Birthstone operates any online service directed to children under 13 or has actual knowledge that it collects personal information from a child under 13, Birthstone will provide any additional notices, parental choices, consent mechanisms, security measures, and retention disclosures required by the Children’s Online Privacy Protection Act and its regulations.

15. Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of personal information and to reduce reasonably foreseeable risks of unauthorized access, acquisition, destruction, use, modification, or disclosure. Our safeguards are intended to be appropriate to the nature, volume, and sensitivity of the information and our business operations.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a security incident requires notification under applicable law, we will provide notice in the manner and within the time required by law.

16. Third-Party Links and Services

The Site may link to websites, platforms, applications, or services operated by third parties. We do not control and are not responsible for their privacy or security practices. We encourage you to review the privacy notices of third parties before providing personal information.

17. Deidentified and Aggregated Information

We may create or use deidentified or aggregated information for analytics, research, product and service improvement, security, and other lawful purposes. Where required by law, we will take reasonable measures to ensure that deidentified information cannot be associated with an individual, publicly commit to maintaining it in deidentified form, and not attempt to reidentify it.

18. Visitors from Outside the United States

Birthstone is based in the United States, and personal information may be transferred to, stored in, or processed in the United States and other countries where we, Shopify, or our other service providers operate. Privacy laws in those jurisdictions may differ from the laws where you live. Where required, we will use appropriate safeguards for international transfers and provide additional regional notices. This Privacy Policy is primarily intended to describe our U.S. privacy practices.

19. Contact Us

For questions, concerns, privacy requests, or accessibility assistance, contact:

Birthstone, LLC
Attn: Privacy
185 Great Neck Road
Great Neck, NY 11021
Email: marketing@birthstone.com

20. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, technologies, legal requirements, or other factors. When we update it, we will revise the “Last Updated” date. If changes are material, we will provide additional notice as required by applicable law, which may include a prominent notice on the Site, an email, or another appropriate method.