Privacy policy

The company behind this shop.

This site is operated by Privosa Fine Jewelry, 6222 Richmond Ave. Suite 799, Houston, TX 77057, United States. In this policy, "we" and "us" mean that company. To reach a person about anything below, email hello@privosa.com or call (281) 515-8180.

This policy applies to privosa.com and to any order or enquiry you place through it. It was last revised on 26 August 2026.

Four kinds of information — and one we never see.

When you place an order. Your name, email address, telephone number, shipping address, the pieces you bought and the amount you paid.

When you contact us or join the mailing list. Your name, email address, telephone number if you give one, and whatever you write to us. Messages sent through the contact form also record a one-way hashed form of your IP address and your browser's user-agent string, purely to stop automated abuse of the form.

When you create an account. Your email address and, if you sign in with Google, the basic profile information Google returns. We never receive or store your password for another service.

When you browse. Pages viewed, pieces viewed, items added to the basket, checkouts begun and orders completed — along with the site that referred you, your device type, your country, and the campaign that brought you here if you arrived from an advertisement. This is stamped with a first-party visitor and session identifier stored in your browser. It is not your name, and it is not connected to you unless you go on to buy something. Your IP address is stored only as a one-way hash; we do not keep the address itself.

What we never see: your card number. Card details are captured by our payment processor inside their own secure form and never reach our servers. All we are given, and all we store, is a reference to the payment and whether it succeeded.

The purposes, stated plainly.

• To take payment for your order, and to detect fraudulent orders.
• To pack, insure, ship and track your parcel, and to handle a return or a refund.
• To answer your questions and provide the concierge service.
• To send order confirmations, dispatch notices and other messages about an order you placed. These are not marketing, and you cannot unsubscribe from them while an order is open.
• To send marketing emails — but only if you asked us to.
• To understand how the shop is used, which pieces are looked at, and which advertisements lead to a sale, so that we spend less on advertising and show you fewer irrelevant ones.
• To meet our legal, tax and accounting obligations.

What is set in your browser, and by whom.

Strictly necessary. A small number of first-party cookies and browser storage entries keep your basket, keep you signed in, and remember the anonymous visitor and session identifiers described above. The shop does not work without these.

Google Analytics. We use Google Analytics to measure how the site is used. It sets its own cookies and receives the pages you view, the pieces you view, what you add to your basket, and the value of any order you complete.

Google Ads. We advertise on Google. The Google Ads tag records when a visit that came from one of our advertisements results in a purchase, and it enables remarketing — meaning you may later see Privosa advertisements on Google and on other sites. Google receives the order value and a transaction reference for a completed purchase.

Meta (Facebook and Instagram). Where enabled, the Meta pixel performs the same function for advertising we run on Meta's platforms.

You can control all of this. Most browsers let you block or delete cookies, and blocking third-party cookies will stop the advertising tags above without breaking the shop. You can switch off personalised Google advertising in your own Google account settings, and opt out of Google Analytics entirely using Google's browser add-on. Where your browser sends a Global Privacy Control signal, we treat it as an opt-out of advertising cookies.

The companies we rely on.

We do not sell your personal information for money. We share the minimum necessary with the companies that make the shop work, each of which is contractually limited to using it on our behalf:

• Square, our payment processor, which takes the card payment and holds the card details we never see.
• Amazon's Multi-Channel Fulfillment service, our fulfilment partner, which receives your name, address and the contents of the order so it can pick, pack and ship the parcel.
• The carriers that deliver the parcel and take your signature.
• Google, for the analytics and advertising described above.
• Meta, where the advertising pixel is enabled.
• Our email provider, which sends order confirmations and any newsletter you subscribed to.
• Our hosting and database provider, which stores this data on servers in the United States.
• Professional advisers, and any authority we are legally obliged to disclose to.

Using advertising cookies may count as “sharing” or a “sale” of personal information under some state laws, even though no money changes hands. Blocking third-party cookies, or writing to the address at the foot of this page, opts you out of it.

What you can ask us to do.

Wherever you live, you may ask us to tell you what personal information we hold about you, to correct it, to delete it, or to stop sending you marketing. Email the address at the foot of this page and we will act within the time the law allows. We will not treat you differently for asking.

If you are a California resident, the CCPA as amended gives you specific rights to know, to delete, to correct, to opt out of the sale or sharing of your personal information, and to limit the use of sensitive personal information. We do not knowingly collect sensitive personal information beyond what an order requires, and we do not use it to infer anything about you.

Marketing emails carry an unsubscribe link in every message, and it works immediately. Unsubscribing does not stop the messages about an order you have already placed.

One limit worth stating honestly: we cannot delete the record of a completed order for as long as tax and accounting law requires us to keep it. We will delete everything else.

Not indefinitely.

Order records are kept for as long as tax and accounting law requires. Contact messages are kept while they are useful to the service we gave you, and then deleted. Browsing analytics are kept in aggregate; the anonymous session records behind them are not needed indefinitely and are pruned.

How it is protected.

The whole site is served over an encrypted connection. Card details never reach our systems. IP addresses are stored only as one-way hashes. Access to the order database is limited to the people who need it to run the business.

No system is perfect, and we would rather say so than claim otherwise. If a breach ever affected your information, we would tell you and the relevant authorities as the law requires.

Not a shop for children.

This site is intended for adults. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, tell us and we will delete it.

When this policy moves.

We revise this policy when what we do changes — a new advertising platform, a new processor, a new kind of data. The revision date is the honest signal of when that last happened, and it currently reads 26 August 2026.

Where to send a request.

Privacy requests and questions: hello@privosa.com, or write to Privosa Fine Jewelry, 6222 Richmond Ave. Suite 799, Houston, TX 77057, United States. Telephone (281) 515-8180, Mon–Sat · 9am–7pm CT.