Privacy policy

Your trust, kept with care

We collect only what we need to serve you well, and we treat your information with the same care we put into our jewelry. This policy explains, plainly and completely, what we gather, why, and the choices you have.

Effective & last updated: July 23, 2026

Vona Fine Jewels (“Vona,” “we,” “us,” or “our”) operates this website, online store, and the related content, products, and services (the “Services”). We are based in Southern California, United States, and our store is powered by Shopify, which provides the technology to display products, accept orders, process payments, and manage our shop.

This policy applies when you visit our site, place or return an order, create an account, contact us, subscribe to marketing, enter a promotion, or otherwise interact with us. If it ever conflicts with our Terms of Service about personal information, this Privacy Policy controls. By using the Services, you acknowledge you have read and understood it.

What “Personal Information” Means

Personal information is anything that identifies, relates to, or could reasonably be linked with you or your household. It does not include information that is lawfully public, or that has been aggregated or de-identified so it can’t reasonably be tied to you. What we collect depends on how you interact with us, your device, our Shopify settings, and the laws where you live.

Information We May Collect

Depending on how you use the Services, we may collect:

• Contact & identification — your name, email, phone number, and billing and shipping addresses.
• Order & transaction — items viewed and purchased, cart activity, discount codes, order numbers, dates and values, delivery details, returns, refunds, exchanges, gift information, customer-service history, and fraud-screening details.
• Payment — handled by Shopify Payments or another provider at checkout. They collect your full card and billing details; we receive only limited information such as payment status, card brand, the last four digits, and verification results. Please never email us a full card number or other sensitive credentials.
• Account — if accounts are available, your account name, login details, saved addresses, order history, and preferences (often via Shopify’s customer-account features). Please keep your login private.
• Device & technical — IP address, device and browser type, operating system, identifiers, pages and products viewed, cart and checkout activity, referring site, and session and cookie information, collected automatically.
• General location — inferred from your IP address, shipping address, or device settings. We don’t collect precise GPS location unless a feature clearly requests it with appropriate notice.
• Communications & content — the contents of your messages, photos, or videos when you contact us, submit a claim, respond to a survey, or post a review. Please don’t include sensitive details in a public review.
• Marketing preferences & inferences — your email and text preferences, product interests, cookie choices, and limited inferences (like likely interests) used to recommend products and measure advertising where permitted.

Some information, such as login credentials and payment details, may be treated as “sensitive” under certain laws. We use it only as reasonably necessary to provide the service, protect accounts, prevent fraud, comply with law, and maintain security, never to infer characteristics about you.

Where It Comes From

We collect information directly from you (when you order, create an account, subscribe, or contact us), automatically from your device (through cookies, pixels, and server logs), and from Shopify and our service providers, such as payment processors, shipping carriers, analytics and marketing platforms, and fraud-prevention services. Where permitted, we may also receive limited information from advertising and business partners, and from publicly available sources when needed for fraud prevention or legal compliance.

How We Use It

We use personal information to:

• Sell our products, process payments, and fulfill, ship, and track your orders
• Manage accounts and handle cancellations, returns, refunds, and warranty claims
• Provide customer support and respond to your questions
• Personalize and improve the store, remember preferences, and recommend products
• Send marketing you’ve consented to, and measure advertising, where permitted by law
• Verify transactions, prevent fraud, and protect the security of our site and customers
• Comply with law, keep records, resolve disputes, and defend legal claims

Operational messages about your order, shipping, or security aren’t promotional and may still be sent even if you’ve unsubscribed from marketing. Consent to marketing is never a condition of purchase.

How We Share It

We do not sell customer lists for money. We share information only as needed for the purposes above, with these kinds of recipients: Shopify (which hosts and powers our store); payment providers; shipping and fulfillment partners; technology and business providers (hosting, customer service, email and text delivery, reviews, analytics, fraud detection, accounting); and, where enabled, analytics and advertising providers.

We may also share with professional advisers, with government or legal recipients when reasonably necessary, as part of a business transaction (such as a merger or sale), at your direction, or within our corporate group. Some advertising-related sharing may count as a “sale” or “sharing” under certain state laws even when no money changes hands, see “Sale, Sharing & Targeted Advertising” below.

Our Relationship With Shopify

Our store runs on Shopify, so information you enter is transmitted to and processed by Shopify and its authorized providers to deliver hosting, product pages, cart and checkout, order management, accounts, payments, security, fraud prevention, analytics, shipping, and marketing tools. Your purchase agreement is with Vona, not Shopify, we’re responsible for our products, service, shipping, returns, and refunds.

For most core services, Shopify acts as our service provider. For certain consumer-facing features, such as Shop, Shop Pay, Shopify accounts, Shopify Network Intelligence, and other Enhanced Services, Shopify may process information for its own purposes as an independent controller under its own privacy notices. Those services may support fraud prevention, search, recommendations, personalization, marketing measurement, and analytics.

You can review the Shopify Consumer Privacy Policy and use the Shopify Privacy Portal to exercise rights over information Shopify processes independently. Certain Shopify services may involve advertising or personalization practices that are described further in the Sale, Sharing & Targeted Advertising section below. You can review the Shopify Consumer Privacy Policy and use the Shopify Privacy Portal to exercise rights concerning information Shopify processes independently.

Cookies & Similar Technologies

Cookies are small files placed on your browser or device. We and our providers use cookies, pixels, tags, and local storage that are necessary (security, cart, checkout, payments, login), functional (remembering language, region, and preferences), analytics (understanding visits and performance), and, where enabled, advertising (measuring campaigns and showing more relevant ads).

Where available, you can manage nonessential cookies through our cookie tool, and you can adjust cookies in your browser at any time. Blocking cookies may affect store functions, saved preferences, or checkout.

Sale, Sharing & Targeted Advertising

Vona does not sell your personal information for money. However, certain advertising, analytics, or Shopify Enhanced Services may be defined as “selling,” “sharing,” or targeted advertising under some U.S. state laws. Where that happens, the categories involved may include identifiers, cookie and device identifiers, internet activity, product and cart activity, purchases, general location, and preference inferences, shared with providers such as Shopify, advertising networks, social platforms, and analytics providers.

Where applicable, you can opt out through the “Your Privacy Choices” or “Do Not Sell or Share My Personal Information” link in our footer. We do not knowingly sell or share the information of anyone under 16. [Insert or activate Shopify’s data-sharing opt-out page.]

Global Privacy Control & Do Not Track

Global Privacy Control (GPC) is a browser signal that communicates a privacy preference. Where required by law and supported by our tools, we treat a valid GPC signal as a request to opt out of the sale or sharing of information for that browser or device. Because there’s no universal standard for general “Do Not Track” signals, we don’t currently respond to those beyond recognized signals like GPC. Third parties may still collect activity across sites through their own technologies.

Marketing Choices

You can unsubscribe from promotional email anytime using the link in any marketing message; we may keep your address on a suppression list so we can honor that request. Unsubscribing doesn’t stop necessary messages about your order, shipping, returns, security, or policy changes. If text marketing is offered, follow the opt-out instructions in the message. Cookie and ad preferences are managed separately through our privacy tools.

How Long We Keep It

We keep personal information only as long as reasonably necessary for the purposes in this policy. In general, order and transaction records are kept to fulfill orders, manage returns and warranties, prevent fraud, and meet tax and accounting requirements; account information is kept while your account is active and for a reasonable period after; support messages are kept to resolve requests and disputes; and marketing information is kept until you unsubscribe (aside from a limited suppression record). When information is no longer needed, we delete, de-identify, or securely isolate it, subject to law. Shopify and other providers may keep their own retention schedules.

Security

We use reasonable administrative, technical, and organizational safeguards, such as access controls, secure ecommerce and payment technology, fraud detection, and staff-access limits, and work with reputable providers who do the same. No system is ever completely secure, so please don’t send highly sensitive information over unsecured channels. If you believe your account or information has been compromised, contact us promptly at info.vonajewels@gmail.com.

Children’s Privacy

The Services are for a general audience and not directed to children under 13, and we don’t knowingly collect their information without legally required parental consent. If you believe a child under 13 has provided information, contact us at info.vonajewels@gmail.com and we’ll take appropriate steps to delete it. We also don’t knowingly sell or share for advertising the information of anyone under 16.

Your Privacy Rights & Choices

Depending on where you live, you may have the right to:

• Access the information we hold and learn how it’s collected, used, or disclosed
• Correct inaccurate information or request its deletion
• Receive a portable copy of certain information
• Opt out of the sale or sharing of information and of targeted advertising
• Limit certain uses of sensitive information and withdraw consent where processing relies on it
• Appeal a decision, and receive equal service for exercising your rights

These rights aren’t absolute, exceptions apply when information is needed to complete a transaction, maintain records, prevent fraud, comply with law, or defend legal claims. To submit a request, email info.vonajewels@gmail.com with “Privacy Request” in the subject line and include your name, the email tied to your order or account, your state or country, and the type of request. Please don’t include unnecessary sensitive details.

We may need to verify your identity before completing certain requests, and, where allowed, you may use an authorized agent. We respond within the time the law requires, and won’t unlawfully discriminate against you for exercising a right. If we decline and the law provides an appeal, email us with “Privacy Request Appeal” in the subject line.

California Privacy Notice

This supplements the rest of the policy for California residents. Under the CCPA (as amended), and where it applies to us, you may have rights to know the categories and specific pieces of information collected and their sources and purposes, to delete or correct information, to opt out of sale or sharing, to limit sensitive-information use, and to equal treatment.

In the past 12 months we may have collected these categories: identifiers; customer-record information; commercial information; internet or network activity; general geolocation; account and payment-related information; audio or visual content voluntarily submitted for support or reviews; preference inferences; and communications and user content. We don’t intentionally collect protected classifications, biometric identifiers, precise geolocation, or health information through ordinary store operations. We use these for the business purposes described in “How We Use It” above.

We don’t sell information for money, though some advertising or Enhanced Services may count as a sale or sharing, use the “Your Privacy Choices” footer link to opt out. We use sensitive information only for permitted purposes and never to infer characteristics. We don’t offer financial incentives in exchange for information unless separately disclosed. For a California “Shine the Light” request, email us with “California Direct Marketing Request” in the subject line.

EEA, UK & Switzerland

Where we offer Services to individuals in the EEA, UK, or Switzerland and that law applies, we process information based on performing our contract with you (such as fulfilling an order), complying with legal obligations, our legitimate interests (like fraud prevention, service, and security), and your consent (such as for certain marketing or nonessential cookies).

You may have rights to access, correct, delete, restrict, or object to processing, to portability, to withdraw consent (without affecting prior processing), and to complain to your local data-protection authority. Information may be transferred to and processed in the United States, Canada, and other countries, and where required we use recognized transfer protections. To exercise a right, email info.vonajewels@gmail.com.

International Data Transfers

Vona is located in the United States, and Shopify and other providers may process information in the United States, Canada, and other countries where they operate. Privacy laws in those places may differ from your own, and where legally required we use appropriate transfer safeguards.

Other Websites & Services

The Services may link to websites, social platforms, payment options, or apps run by others. We don’t control their privacy, security, or content, and this policy doesn’t cover information they collect independently. Please review a third party’s own policy before sharing information; a link from us isn’t necessarily an endorsement.

Changes to This Policy

We may update this policy to reflect changes to our store, new Shopify features or integrations, new data practices, or legal requirements. When we do, we’ll change the “Last updated” date above, and, when required, provide additional notice of material changes. The version posted here is always the current one.

Complaints

If you have a concern about how we handle your information, please contact us first, we’ll review it and respond as the law requires. Depending on where you live, you may also have the right to complain to a state attorney general, privacy regulator, or data-protection authority.

Contact Us

For questions about this policy or to submit a privacy request, reach us at:

Vona Fine JewelsEmail: info.vonajewels@gmail.com

Please write “Privacy Request” in the subject line for requests involving access, correction, deletion, portability, or opting out of sale or sharing.