Privacy policy

Effective Date: June 5, 2026. Last Updated: June 5, 2026.

This Policy supersedes and replaces all prior versions of this Policy and any prior return, refund, exchange, shipping, purchase, privacy, or terms-of-service policy published by Efemera, including without limitation any version dated March 25, 2026 or earlier. This Policy applies to all Orders placed and all access to or use of the Site on or after the Effective Date. Orders placed prior to the Effective Date are governed by the policy in effect at the time of Order placement.

Privacy Policy

This Privacy Policy (the "Policy") describes how Efemera Jewelry collects, uses, discloses, retains, and otherwise processes information in connection with our handcrafted jewelry and related goods and services. Version 2026.06.05-A. By accessing or using the Site, by submitting an Order, by communicating with us, or by otherwise providing information to us, you acknowledge that you have read, understood, and agreed to the practices described in this Policy. If you do not agree, you must discontinue use of the Site and refrain from submitting an Order.

This Policy should be read together with our Terms of Service, Cookie Policy, Shipping Policy, Refund & Return Policy, Purchase Policy, Customer Service information, and FAQ, each of which is incorporated by reference. Where a topic is addressed more fully in one of those documents, the more specific document controls as to that topic only.

1. Defined Terms

In this Policy, the following capitalized terms have the meanings set forth below. "Efemera" or "we," "us," or "our" means Efemera Jewelry, a New York-based business operating from New York, New York. "Site" means the website located at efemerajewelry.com, together with any related subdomains, mobile experiences, and digital storefronts operated by Efemera. "Product" or "Products" means any item of jewelry or related merchandise offered for sale by Efemera through the Site, including without limitation pieces from the Echoes and Draped in Time collections and any custom, bespoke, or made-to-size pieces. "Order" means any submitted request to purchase one or more Products through the Site. "Customer" or "you" or "your" means the individual or entity placing an Order or otherwise accessing or using the Site. Capitalized terms not defined herein have the meanings given in the Terms of Service.

2. Notice at Collection (CCPA/CPRA Summary)

For California residents and others entitled to a notice at or before the point of collection, the following summarizes our practices in plain form, with full detail in the sections that follow:

• Categories collected: identifiers; commercial information; financial information (limited, as described in Section 4.3); internet and network activity; geolocation; demographic and inferred information; audio, visual, and communications content; and limited sensitive personal information (account credentials and, where you choose to enable it, precise geolocation).
• Purposes: to operate the Site, process and fulfill Orders, communicate with you, deliver marketing, personalize and improve our Products, secure our systems, detect and prevent fraud, comply with law, and the other purposes set forth in Section 5.
• Sold or shared: we do not knowingly sell personal information for monetary consideration; certain disclosures to advertising partners may constitute a "sale" or "sharing" as those terms are defined under applicable U.S. state law. You may opt out as described in Section 9.
• Retention: retained for the criteria-based periods described in Section 11.

3. Scope and Application

This Policy applies to personal information that we collect, receive, generate, infer, or otherwise process in any format, whether online or offline, in our sole discretion and in accordance with applicable law. This Policy does not apply to information processed by third parties whose services, platforms, sites, plug-ins, integrations, or applications may be accessible through or linked from the Site. We are not responsible for, and make no representation regarding, the privacy practices of any third party, including payment processors, financing providers (including Shopify Payments and Shop Pay Installments), advertising networks, social media platforms, shipping carriers, analytics vendors, or any operator of a linked site. You access third-party properties at your own risk and are encouraged to review their privacy notices independently.

4. Information We Collect

We collect, and have collected within the preceding twelve (12) months, the following categories of information. The specific items we collect from you depend on how you interact with the Site, the nature of any Order, and other factors we deem relevant in our sole discretion.

4.1 Identifiers and Contact Information

Including without limitation: full name, billing and shipping address, email address, telephone number, account username and password (in hashed form), order number, customer reference number, and similar identifiers.

4.2 Commercial Information

Including without limitation: Order history, purchase history and patterns, returns and exchange history, cart contents, abandoned carts, wishlists, registry entries, product viewing behavior, sizing selections, customization or engraving instructions, gift messaging, and considerations of additional Products or services.

4.3 Financial Information

Including without limitation: billing address, payment method type, last four digits of a payment instrument, expiration date, authorization tokens, and information collected by our payment processors and financing providers. We are not designed to, and do not knowingly retain on our own systems, full payment card numbers, CVV codes, or full bank account numbers; such data is handled by our PCI-compliant payment processors and financing providers under their own terms and security controls.

4.4 Internet and Network Activity Information

Including without limitation: IP address, browser type and version, operating system, device identifiers, mobile advertising identifiers, referring and exit URLs, pages and Products viewed, clickstream data, search queries, time on Site, session duration, session replay information, and information collected via cookies, web beacons, pixel tags, software development kits (SDKs), local storage, server logs, fingerprinting techniques, and similar technologies. Where session-replay technology is deployed, it is configured to mask fields we designate as sensitive (such as password and payment fields) and is retained for the period described in our Cookie Policy.

4.5 Geolocation Information

Including without limitation: approximate location derived from IP address, ZIP or postal code, and (where you have enabled the relevant device permission) more precise location data.

4.6 Demographic and Inferred Information

Including without limitation: age range, gender (where voluntarily disclosed), language preference, jewelry preferences inferred from browsing, predicted lifetime value, and audience segment classifications we generate or receive.

4.7 Audio, Visual, and Communications Content

Including without limitation: photographs you submit for sizing or customization consultation, photographs you submit in connection with a damage or defect claim, customer service recordings, chat transcripts, email correspondence, and social media tags or mentions of our brands. We do not knowingly collect, capture, or use biometric identifiers or biometric information (as those terms are defined under the Illinois Biometric Information Privacy Act, 740 ILCS 14/1 et seq., or comparable state biometric-privacy statutes) from photographs or session-replay data, and we do not knowingly use facial-geometry, voiceprint, or fingerprint scanning. Where such data would be incidentally captured, we do not use it for identification.

4.8 Sensitive Personal Information

To the extent we collect any category designated as "sensitive personal information" under the California Privacy Rights Act (Cal. Civ. Code § 1798.121) or other applicable U.S. state privacy law, we limit our use and disclosure of such information for purposes of inferring characteristics about California residents (or other residents whose state law imposes such a limit) to the extent and only to the extent required by such law. This limitation does not apply to information that is not "sensitive personal information" under the applicable statute or to processing that falls within statutory exceptions.

5. Sources From Which Information Is Collected

We may collect, receive, or generate the foregoing information from any of the following sources, in any combination, as we determine appropriate: (i) directly from you, including when you create an account, place an Order, request a consultation, sign up for marketing communications, participate in a giveaway, contact customer service, complete a survey, or otherwise interact with the Site; (ii) automatically through cookies, pixels, web beacons, session replay, SDKs, server logs, fingerprinting, and similar technologies operating on the Site and in our marketing communications; (iii) from third parties, including without limitation our hosting platform, payment processors, financing providers (including Shopify Payments and Shop Pay Installments), fraud-prevention services, identity-verification services, shipping carriers, customer service platforms, advertising and analytics partners, social media platforms, affiliates, referral sources, lead-generation partners, and public sources; and (iv) from you indirectly, where a gift purchaser, registry owner, or other third party provides your information to us in order to deliver a Product or service.

6. How We Use Information

We may use the information described above for any purpose permitted by applicable law, including without limitation: to process, fulfill, ship, and service Orders, including customization, sizing, quality control, exchange, return, repair, and warranty handling; to create, maintain, secure, and authenticate Customer accounts; to communicate with you regarding Orders and account activity; to send marketing, promotional, and informational communications by email, SMS, push notification, postal mail, or other channels, subject to your communications preferences and applicable law; to personalize the Site, content, offers, recommendations, and advertising; to conduct analytics, research, A/B testing, market analysis, customer segmentation, modeling, and product development; to create and serve targeted advertising, including the creation of custom and lookalike audiences on third-party platforms; to detect, investigate, prevent, and respond to fraud, payment disputes, chargebacks, account takeover, abuse of returns or promotions, intellectual property infringement, and other unlawful or prohibited activity; to evaluate eligibility for financing offered by our third-party financing providers (including Shop Pay Installments), in which case the financing provider conducts the underwriting decision under its own terms and applicable financial-services laws, including without limitation the Fair Credit Reporting Act (15 U.S.C. § 1681 et seq.); to comply with applicable laws, regulations, court orders, subpoenas, governmental requests, and our legal, accounting, and tax obligations; to enforce our Terms of Service, this Policy, and any other agreement between you and us, and to protect our rights, property, employees, vendors, and other Customers; to facilitate corporate transactions, including any merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction; and for any other purpose disclosed to you at the time of collection or otherwise permitted by law.

7. Automated Decision-Making and Profiling

Efemera does not, on its own systems, make decisions producing legal or similarly significant effects concerning you based solely on automated processing without human involvement. Where you request financing through Shop Pay Installments or another third-party financing provider, that provider may use automated decision-making in its underwriting determination; the provider's own privacy notice and disclosures (including any adverse-action notice required under the Fair Credit Reporting Act) govern that determination, and you may seek information, human review, or recourse directly from the provider. Where required by Article 22 of the EU/U.K. GDPR, Article 185 of the Colorado Privacy Act, or analogous law, you may have the right to request that we explain or review profiling activity carried out by Efemera; submit such requests under Section 9.

8. Cookies, Pixels, and Tracking Technologies

We and our service providers use cookies, web beacons, pixel tags, session replay, SDKs, local and session storage, server-side tracking, and similar technologies to operate the Site, remember preferences, measure performance, deliver advertising, and support fraud prevention. Categories include strictly necessary, performance and analytics, functional, and targeting and advertising. Where required by applicable law, we present a cookie consent banner or comparable consent interface on first visit through which you may grant or withhold consent to non-essential categories. Additional detail is provided in our Cookie Policy.

You may also control certain cookies through your browser settings, the Network Advertising Initiative opt-out at optout.networkadvertising.org (or any successor URL), the Digital Advertising Alliance opt-out at optout.aboutads.info (or any successor URL), the Google Analytics opt-out, and your mobile device advertising controls. Disabling cookies may degrade Site functionality. Certain server-to-server transmissions (including server-side conversion APIs) operate independently of browser cookie settings and may not be controlled by browser-based opt-outs; to limit those transmissions, use the rights mechanisms in Section 9.

9. How We Disclose Information

We may disclose any of the categories of information described above to: (i) service providers and processors that perform services on our behalf, including hosting, e-commerce platform, payment processing, financing, fraud prevention, identity verification, shipping and logistics, warehousing, customer service, email and SMS delivery, marketing automation, analytics, advertising measurement, and session replay; (ii) advertising and marketing partners, including social media platforms and advertising networks, for measurement, audience creation, retargeting, and personalization; (iii) affiliated entities under common ownership or control, including any successor or assign; (iv) professional advisors, including attorneys, accountants, auditors, insurers, and consultants; (v) law enforcement, regulators, courts, and other governmental authorities, in response to subpoenas, warrants, court orders, regulatory inquiries, or other legal process, or where we believe in our sole discretion that disclosure is necessary or appropriate; (vi) counterparties and their advisors in connection with any actual or proposed merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar corporate transaction, and to acquirers in such transactions; (vii) other parties with your consent or at your direction; and (viii) any other party in aggregated, de-identified, or anonymized form that does not reasonably identify you.

We do not knowingly disclose personal information for monetary consideration. Certain disclosures of identifiers, commercial information, and internet activity information to advertising partners may constitute a "sale" or "sharing" as those terms are defined under the California Consumer Privacy Act, the Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, or comparable U.S. state laws. You may exercise opt-out rights as described in Section 10.

10. Your Choices and Rights

10.1 Marketing Communications

You may opt out of marketing emails by following the unsubscribe instructions in any such email. You may opt out of marketing SMS by replying STOP to any text message from us. Opting out of marketing communications does not affect transactional or service communications, including Order confirmations, production updates, shipping notifications, returns correspondence, account or security notices, and other non-promotional messages, which you may continue to receive while you have an active account or pending Order.

10.2 Account Information

You may review and update certain account information by signing into your account. You may request closure of your account by contacting us. We may retain residual information consistent with Section 11.

10.3 U.S. State Privacy Rights

Subject to verification and to the exceptions, exemptions, and limitations provided by applicable law, residents of U.S. states with comparable privacy laws (including without limitation California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Tennessee, Delaware, New Hampshire, New Jersey, Minnesota, Maryland, and Rhode Island) may have the right to: (i) confirm whether we process their personal information; (ii) access or receive a copy of certain personal information; (iii) request correction of inaccurate personal information; (iv) request deletion of certain personal information; (v) opt out of the "sale" or "sharing" of personal information and of targeted advertising; (vi) opt out of certain profiling that produces legal or similarly significant effects; and (vii) not be subject to unlawful discrimination for exercising any such right. California residents may also request the categories of personal information disclosed and the categories of recipients.

To submit a request, email privacy@efemerajewelry.com with the subject line "Privacy Rights Request" or use any portal we may make available. We may take an initial period of up to forty-five (45) days to respond, with an additional forty-five (45) day extension where reasonably necessary. We may require verification of your identity using information reasonably available to us before processing a request, and we may decline or modify any response as permitted by law. Authorized agents may submit requests on your behalf with proof of authorization and identity verification.

10.4 California "Shine the Light"

California residents may, once per calendar year, request information about Efemera's disclosure of personal information to third parties for those third parties' direct marketing purposes pursuant to California Civil Code § 1798.83. Submit such requests to privacy@efemerajewelry.com with the subject line "Shine the Light Request." We reserve the right not to respond to requests submitted other than through this address.

10.5 Nevada Opt-Out

Nevada residents may direct Efemera not to make certain sales of their covered personal information pursuant to Nevada Revised Statutes Chapter 603A. To submit such a request, email privacy@efemerajewelry.com with the subject line "Nevada Opt-Out."

10.6 Financial Incentives

From time to time we may offer financial incentives (such as discounts, promotional codes, or loyalty benefits) in exchange for the collection, retention, or use of certain personal information (such as an email or mobile telephone number). Material terms of any such program will be presented at the point of enrollment. The value of personal information to Efemera is reasonably related to the value of the offer, and you may withdraw from any such program at any time by following the program's stated opt-out instructions.

10.7 European Economic Area, United Kingdom, and Switzerland

If you are located in the EEA, the United Kingdom, or Switzerland, you may have the rights to access, rectify, erase, restrict processing of, port, or object to the processing of your personal data, and to withdraw any consent you have provided, in each case to the extent and subject to the exceptions provided by applicable law. Our legal bases for processing include performance of a contract (Article 6(1)(b) GDPR), legitimate interests (Article 6(1)(f) GDPR), compliance with legal obligations (Article 6(1)(c) GDPR), and your consent (Article 6(1)(a) GDPR), as applicable. You may lodge a complaint with the U.K. Information Commissioner's Office or your local supervisory authority. Where required by Article 27 of the EU GDPR or U.K. GDPR, Efemera will designate and identify an EU/U.K. representative; the current designation, if any, is available on request to privacy@efemerajewelry.com.

10.8 Global Privacy Control

Where required by applicable law, we recognize the Global Privacy Control signal as a valid opt-out of "sale" or "sharing" for the browser that transmits it.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, subject to the criteria described below, and thereafter we delete, anonymize, aggregate, or de-identify it. The actual retention period for a given record depends on the longest applicable of the following criteria: (i) Account records — for the duration of the account plus a tail period of up to seven (7) years following closure for dispute, fraud, and tax purposes; (ii) Transaction and Order records — at least seven (7) years following the Order to comply with U.S. federal and state tax, accounting, and consumer-protection recordkeeping rules; (iii) Marketing records — until you opt out, plus a tail period reasonably necessary to honor and document the opt-out; (iv) Session-replay and analytics records — for the period stated in our Cookie Policy; (v) Fraud-prevention and security records — for as long as reasonably necessary to detect, investigate, and remediate fraud or unlawful activity; (vi) Customer service records — for a period reasonably necessary to address recurring inquiries and to evidence the resolution; and (vii) Legal-hold records — for the duration of any actual or reasonably anticipated litigation, regulatory inquiry, audit, or legal obligation, plus the applicable statute of limitations.

12. International Data Transfers

We are based in the United States and operate from facilities located in the United States. Information that you provide to us, or that we collect through the Site, will be transferred to, processed in, and stored in the United States and in other jurisdictions in which we, our affiliates, or our service providers operate. These jurisdictions may have data protection laws different from those of your country of residence. Where required by applicable law, we rely on appropriate transfer mechanisms, including the European Commission's Standard Contractual Clauses, the U.K. International Data Transfer Addendum, the EU-U.S. Data Privacy Framework, the U.K. Extension to the EU-U.S. Data Privacy Framework, the Swiss-U.S. Data Privacy Framework, and equivalent safeguards. By using the Site or providing information to us, you acknowledge such transfers to the extent permitted by applicable law.

13. Security and Breach Notification

Security and Breach Notification. Efemera maintains reasonable administrative, technical, and physical safeguards designed to protect the personal information we process, consistent with our obligations under the New York Stop Hacks and Improve Electronic Data Security Act (N.Y. Gen. Bus. Law § 899-aa et seq., the "SHIELD Act") and other applicable data-security laws. No method of transmission over the Internet or method of electronic storage is one hundred percent secure, and we cannot guarantee absolute security. In the event of a breach of the security of the system involving personal information of a kind regulated by the SHIELD Act or comparable applicable law, Efemera will provide notice to affected individuals and to any required regulatory authorities in the most expedient time possible and without unreasonable delay, consistent with (i) the legitimate needs of law enforcement, (ii) any measures necessary to determine the scope of the breach and restore the reasonable integrity of the system, and (iii) the timing and content requirements of the SHIELD Act, applicable U.S. state breach-notification statutes, the EU General Data Protection Regulation (Articles 33–34), the U.K. GDPR, and any other applicable law. Notice will be provided by the methods permitted by the applicable statute, which may include written notice, electronic notice, telephone notice, or substitute notice.

You provide information to us at your own risk and are responsible for maintaining the confidentiality of your account credentials and for all activity conducted under your account.

14. Children's Privacy

The Site is not directed to children under the age of thirteen (13) (or such higher age as may apply under local law). We do not knowingly collect personal information from children under such age. If we become aware that we have collected personal information from a child without verified parental consent, we will take steps to delete such information as required by applicable law. If you believe a child has provided personal information to us, please contact us at privacy@efemerajewelry.com.

15. SMS and Mobile Messaging

By providing a mobile telephone number and opting into our SMS program through a designated affirmative-consent mechanism, you provide your prior express written consent under the Telephone Consumer Protection Act (47 U.S.C. § 227) to receive recurring autodialed marketing and transactional text messages from or on behalf of Efemera at that number, including messages sent using an automatic telephone dialing system or pre-recorded or artificial voice. Consent is not a condition of any Product purchase. Message frequency varies (typically up to a small number of messages per month, as disclosed at the point of opt-in); message and data rates may apply; we are not responsible for any carrier charges, delays, errors, or failed deliveries. You may opt out at any time by replying STOP. For help, reply HELP. Our SMS program is further governed by our SMS Terms and the Mobile Marketing Association's guidelines, each as incorporated by reference.

16. Do Not Track

The Site does not respond to "Do Not Track" browser signals at this time. Where required by applicable law, we recognize the Global Privacy Control signal as described in Section 10.8.

17. Third-Party Links and Platforms

The Site may contain links to, and integrates with, third-party sites, applications, and services that are not operated or controlled by us. This Policy does not apply to those third-party properties, and we are not responsible for their content, privacy practices, or security. Your use of any third-party service is governed by that party's privacy notice and terms.

18. Changes to This Policy

We reserve the right to modify, amend, supplement, or replace this Policy at any time, in our sole discretion. The "Last Updated" date and version number at the top of this Policy reflect the date of the most recent revision. We may, but are not required to, provide additional notice of material changes. Your continued use of the Site following any change constitutes your acceptance of the revised Policy. If you do not agree to the revised Policy, you must discontinue use of the Site.

19. Statutory Rights Preserved

Statutory Rights Preserved. Nothing in this Policy is intended to exclude, restrict, modify, or waive any right or remedy that, under applicable mandatory law, cannot be excluded, restricted, modified, or waived by contract. This expressly includes, without limitation, rights available to consumers under the Magnuson-Moss Warranty Act (15 U.S.C. § 2301 et seq.), the U.S. Federal Trade Commission's Mail, Internet, or Telephone Order Merchandise Rule (16 C.F.R. Part 435), applicable U.S. state consumer-protection, lemon-law, and implied-warranty statutes, the U.K. Consumer Rights Act 2015, the EU Consumer Sales and Guarantees Directive and member-state implementations thereof, and the Australian Consumer Law. Where any provision of this Policy conflicts with such mandatory law, that provision shall apply only to the maximum extent permitted, and the balance of this Policy shall remain in full force and effect.

20. Trademarks

"Efemera," "Efemera Jewelry," "Echoes," "Draped in Time," and associated logos, designs, and trade dress are trademarks of Efemera Jewelry, each of which may be designated with ™ or ® as applicable. All rights are reserved. No license is granted under this Policy.

21. Governing Law and Dispute Resolution

This Policy is governed by and construed in accordance with the laws of the State of New York and applicable federal law of the United States, without regard to conflict-of-laws principles; the United Nations Convention on Contracts for the International Sale of Goods is expressly excluded. Any dispute, controversy, or claim arising out of or relating to this Policy shall be resolved as set forth in our Terms of Service, including the binding individual arbitration provisions, class-action waiver, and jury-trial waiver contained therein. Without limiting the Terms of Service, the parties acknowledge that arbitrable disputes will be administered by the American Arbitration Association (AAA) under the AAA Consumer Arbitration Rules then in effect, before a single neutral arbitrator, with the arbitration seated in New York County, New York, and governed by the Federal Arbitration Act (9 U.S.C. § 1 et seq.); Customer has the right to opt out of arbitration within thirty (30) calendar days from the earlier of (i) the date Customer first accepts the Terms of Service by any means or (ii) the date Customer places a first Order on or after the Effective Date, as described in the Terms of Service. For matters not subject to arbitration, the parties consent to the exclusive jurisdiction and venue of the state and federal courts located in New York County, New York and waive any objection based on forum non conveniens.

22. Reservation of Rights

To the maximum extent permitted by law, all rights, privileges, and protections in our favor under this Policy are reserved. We may exercise, decline to exercise, or delay exercise of any right, in our sole discretion, without waiver of such right.

23. Contact Us

For questions about this Policy, to exercise any rights described above, or to request the identity of any designated EU/U.K. Article 27 representative, please contact us at:

Efemera Jewelry
Attn: Privacy / Data Protection
New York, New York, USA
Data rights and privacy: privacy@efemerajewelry.com
General inquiries: hello@efemerajewelry.com
Order support and returns: support@efemerajewelry.com
Order changes and cancellations: orders@efemerajewelry.com