Privacy policy

Lira Jewels (lirajewels.com) is operated by Sam LawCloud L.L.C. in California. This policy explains what we collect when you shop with us, why, and the choices you have. Questions go to [email protected].

Orders: your name, email, shipping address, phone number if you give one, what you bought, and any promo code you used. Payment is handled by Stripe on its own secure page or payment sheet; we never see or store your card number.

Accounts: your email, the name you add, saved addresses and your order history. You sign in with a one-time code sent to your email, or with Google or Apple, so there is no password for us to keep. If you use Google or Apple, we receive only your name, your email (or Apple's private relay address, if you choose to hide yours) and an account identifier.

Newsletter: your email, when and where you joined, and when you leave.

Our iPhone and Android app: your bag is stored on your device, and your sign-in is kept in your device's secure storage. If you allow notifications, we keep a notification token for your device so we can tell you when an order is paid and when it ships; turning notifications off in your phone's settings stops them. Notifications are only about your orders, never advertising, and the app works fully without them. If you choose to scan a card when paying, the camera is used by Stripe's payment sheet for that moment only, and no image is kept.

Stripe's payment software in the app collects your payment details and how you use its payment screen, to take the payment, prevent fraud and improve its service. Stripe doesn't use this for advertising or tracking. If you pay with Apple Pay or Google Pay, what your wallet passes on (such as your card, name and address) is used only to take and deliver your order.

Messages: anything you send us by email.

Technical: the address of your device and basic request details, kept in server logs for security and to stop abuse.

To take, ship and support your order, including returns and questions; to run your account; to send the newsletter if you joined it; to calculate sales tax and keep the records tax law requires; and to keep the shop secure.

We don't sell your personal information or share it for advertising across other sites. Stripe screens payments automatically to prevent fraud; apart from that, we don't use automated decisions about you.

Only the services that run the shop for us, and only what each needs: Stripe (payments, fraud prevention and sales tax), Brevo (sending email), Cloudflare (website delivery and email routing), our hosting provider, Apple and Google (delivering app notifications, through Expo, which runs our notification service), and the carrier that delivers your parcel. If you sign in with Google or Apple, that company handles the sign-in under its own privacy policy. We may also disclose information when the law requires it.

These services may use your information only to do that work for us, and must protect it at least as carefully as this policy describes. Stripe, Google and Apple also handle what they collect under their own privacy policies.

We use only what the shop needs to work: your bag (and any promo code you've added) is kept in your browser, and signing in sets a cookie that keeps you signed in. We don't run analytics of our own, use advertising or tracking cookies, or run advertising pixels. Stripe's checkout page uses its own cookies to process payment and prevent fraud, and the Google and Apple sign-in buttons load from those companies when you open the sign-in page.

Because we don't track you across sites, there is nothing for a Do Not Track or Global Privacy Control signal to switch off; we honor both by default.

Order records are kept for as long as tax and accounting rules require, usually several years. Account details stay until you delete the account (Account → Delete account) or ask us to. Newsletter records stay until you unsubscribe, after which we keep only enough to make sure you aren't added back by mistake. Sign-in codes expire after 10 minutes and are deleted within a day.

You can update your name and addresses in your account at any time, and leave the newsletter from any newsletter email or your account page.

You can take back permissions whenever you like: turn off notifications for Lira Jewels in your phone's settings, and stop using Sign in with Apple under Settings → your name → Sign in with Apple (or the Google equivalent in your Google account).

You can delete your account yourself, on the website or in the app, under Account → Delete account, which removes your saved details and takes you off the newsletter. You can also ask us to tell you what personal information we hold about you, correct it, or delete it, by writing to [email protected] from the email on your account or order. California residents have these rights under state law; we extend them to everyone. We'll answer within 30 days and won't treat you differently for asking. Records we must keep for tax purposes are kept for the required period.

The site is served over HTTPS, payments are handled by Stripe, and access to our records is limited to the people who run the shop. No system is perfectly secure, but we take care to protect what you share with us.

The shop is meant for adults. We don't knowingly collect information from children under 13. If you believe a child has given us information, write to [email protected] and we'll delete it.

We run the shop from the United States, and our records are kept on servers in the United States. If you contact us from elsewhere, your information is handled there under this policy.

If we change this policy, we'll update the date at the top of this page. Significant changes will be noted on the site.

Questions, requests or complaints about your privacy: [email protected]. Please write from the email on your account or order so we can find your records.