Privacy Policy
Your privacy is important to us. This policy explains how we collect, use, and protect your personal information when you use our services.
Last updated: June 12, 2026
Quick Navigation
🔒Privacy Overview
At Grown Gem, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, make purchases, or interact with our services.
We believe in transparency about our data practices and your rights. This policy applies to all information collected through our website, mobile applications, customer service interactions, and related services.
Our Commitment
We never sell your personal information to third parties. We use your data only to provide better service, process your orders, and improve your shopping experience.
📋Information We Collect
Personal Information You Provide
Account Information
- • Full name
- • Email address
- • Password (encrypted)
- • Phone number
- • Date of birth (optional)
Billing & Shipping
- • Billing address
- • Shipping address
- • Payment information
- • Purchase history
- • Order preferences
Communication Data
- • Customer service inquiries
- • Live chat conversations
- • Survey responses
- • Product reviews
- • Marketing preferences
Bespoke Orders
- • Design specifications
- • Uploaded files (CAD, images)
- • Project requirements
- • Budget information
- • Timeline preferences
Information Automatically Collected
- Device Information: IP address, browser type, operating system, device identifiers
- Usage Data: Pages viewed, time spent, click patterns, search queries
- Location Data: General location based on IP address (not precise GPS)
- Shopping Behavior: Cart contents, wishlist items, browsing history
- Performance Data: Website loading times, error reports, feature usage
Information from Third Parties
- Payment Processors: Transaction verification and fraud prevention data
- Shipping Partners: Delivery status and tracking information
- Social Media: Profile information when you connect social accounts
- Analytics Providers: Aggregated usage statistics and trends
- Marketing Platforms: Campaign performance and engagement metrics
⚙️How We Use Your Information
Primary Uses
Order Processing
- • Process and fulfill orders
- • Handle payments securely
- • Arrange shipping and delivery
- • Send order confirmations
- • Provide customer support
Account Management
- • Create and maintain accounts
- • Authenticate users
- • Store preferences
- • Manage wishlists
- • Track order history
Service Improvement
- • Analyze usage patterns
- • Improve website functionality
- • Develop new features
- • Optimize user experience
- • Fix technical issues
Communication
- • Send transactional emails
- • Provide customer support
- • Send marketing messages
- • Share product updates
- • Conduct surveys
Legal Basis for Processing (GDPR)
Contractual Necessity
Processing required to fulfill your orders and provide services
Legitimate Interest
Improving services, fraud prevention, and security
Consent
Marketing communications and optional features
Legal Compliance
Meeting legal and regulatory requirements
🤝Information Sharing
We Never Sell Your Data
We do not sell, rent, or trade your personal information to third parties for their marketing purposes. Your data is used solely to provide and improve our services.
When We Share Information
Service Providers
We share information with trusted partners who help us operate our business:
- • Payment Processors: Stripe, PayPal for secure transactions
- • Shipping Companies: FedEx, UPS for order fulfillment
- • Email Services: Automated transactional emails
- • Analytics: Google Analytics for website optimization
- • Customer Support: Help desk and chat platforms
- • Cloud Storage: Secure data hosting and backup
Legal Requirements
We may disclose information when required by law or to protect our rights:
- • Compliance with legal processes (subpoenas, court orders)
- • Government requests for law enforcement purposes
- • Protection against fraud, security threats, or illegal activity
- • Enforcement of our Terms and Conditions
- • Protection of rights, property, or safety of users
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity. We will notify you before your information becomes subject to a different privacy policy.
Data Protection Measures
- All service providers sign strict data processing agreements
- Regular audits of third-party security practices
- Minimal data sharing - only what's necessary for the service
- Encryption in transit and at rest for sensitive information
- Regular review and termination of unnecessary data sharing relationships
🛡️Data Security
Security Measures
Technical Safeguards
- • SSL/TLS encryption for all data transmission
- • Advanced firewall protection
- • Regular security scans and penetration testing
- • Secure cloud infrastructure
- • Encrypted data storage
Administrative Controls
- • Limited access to personal information
- • Employee background checks
- • Regular security training
- • Incident response procedures
- • Data access logging and monitoring
Physical Security
- • Secure data center facilities
- • Restricted access controls
- • 24/7 monitoring and surveillance
- • Environmental controls
- • Backup and disaster recovery
Payment Security
- • PCI DSS compliance
- • Tokenized payment processing
- • No storage of full credit card numbers
- • Fraud detection systems
- • Secure payment gateways
Security Incident Response
In the unlikely event of a security incident, we have procedures in place to:
- • Immediately contain and assess the incident
- • Notify affected users within 72 hours
- • Work with law enforcement if necessary
- • Implement additional safeguards to prevent recurrence
- • Provide support and resources to affected users
Your Role in Security
- Use strong, unique passwords for your account
- Enable two-factor authentication when available
- Keep your contact information updated
- Report suspicious activity immediately
- Log out of shared or public computers
- Keep your devices and browsers updated
📧Marketing Communications
Types of Communications
Transactional Emails
Essential communications about your orders:
- • Order confirmations
- • Shipping notifications
- • Account updates
- • Password resets
- • Customer service responses
*These cannot be unsubscribed from as they're essential for service
Marketing Emails
Promotional content you can opt into:
- • New product announcements
- • Special offers and discounts
- • Jewelry care tips
- • Industry news and trends
- • Personalized recommendations
*Easy unsubscribe option in every email
Consent and Preferences
How We Obtain Consent
- Account Registration: Opt-in checkbox for marketing communications
- Checkout Process: Optional newsletter subscription
- Website Forms: Explicit consent for specific communications
- Double Opt-In: Email confirmation for newsletter subscriptions
Personalization
We use your purchase history, browsing behavior, and preferences to send relevant content. This includes:
- Product recommendations based on your interests
- Special offers for items in your wishlist
- Birthday and anniversary reminders
- Size-specific promotions based on past purchases
- Styling tips for your jewelry collection
Opting Out
Multiple Ways to Unsubscribe
- • Email Links: One-click unsubscribe in every marketing email
- • Account Settings: Manage preferences in your account dashboard
- • Customer Service: Contact us to update your preferences
- • Preference Center: Choose specific types of communications
Processing opt-out requests may take up to 48 hours. You may still receive transactional emails related to your orders.
CAN-SPAM Compliance
- Clear identification of emails as advertisements
- Truthful subject lines and sender information
- Valid physical business address in every email
- Honor opt-out requests within 10 business days
- Monitor third-party marketing on our behalf
⚖️Your Rights & Choices
Your Privacy Rights
Access & Transparency
- • Right to Know: What personal information we collect
- • Data Access: Request a copy of your personal data
- • Processing Purposes: Understand how we use your information
- • Third Parties: Know who we share data with
Control & Correction
- • Data Correction: Update inaccurate information
- • Preference Management: Control marketing communications
- • Account Settings: Modify privacy preferences
- • Consent Withdrawal: Revoke previously given consent
Deletion & Portability
- • Right to Delete: Request removal of personal data
- • Data Portability: Export your data in a readable format
- • Account Closure: Delete your account and associated data
- • Processing Restriction: Limit how we use your data
Objection & Complaints
- • Processing Objection: Object to certain data uses
- • Automated Decisions: Request human review
- • File Complaints: Contact supervisory authorities
- • Legal Remedies: Seek compensation for damages
How to Exercise Your Rights
Contact Methods
Live Chat
Available on our website
Account Settings
Manage preferences online
Response Timeline
- • Standard Requests: Response within 30 days
- • Complex Requests: May require up to 60 days with notification
- • Urgent Matters: Priority handling for security concerns
- • Verification Process: Identity confirmation may be required
Limitations and Exceptions
While we honor your privacy rights, some limitations may apply:
- Legal obligations may prevent deletion of certain records
- Legitimate business interests may require data retention
- Technical limitations may affect immediate data removal
- Security measures may require identity verification
- Some requests may incur reasonable administrative fees
🏛️California Privacy Rights (CCPA/CPRA)
California Consumer Privacy Act (CCPA)
California residents have additional privacy rights under the California Consumer Privacy Act and California Privacy Rights Act (CPRA). These rights are in addition to any other rights you may have.
California-Specific Rights
Information Rights
- • Right to know what personal information is collected
- • Right to know if personal information is sold or shared
- • Right to know business purposes for collection
- • Right to access personal information
Control Rights
- • Right to delete personal information
- • Right to opt-out of the sale of personal information
- • Right to limit use of sensitive personal information
- • Right to non-discrimination for exercising rights
Categories of Personal Information
We Collect:
- • Identifiers (name, email, phone)
- • Commercial information (purchase history)
- • Internet activity (browsing behavior)
- • Geolocation data (general location)
- • Audio/visual data (customer service calls)
Sensitive Information:
- • Payment information (tokenized)
- • Account login credentials
- • Personal communications
- • Precise geolocation (with consent)
Do We "Sell" Personal Information?
No, We Do Not Sell Personal Information
We do not sell personal information as traditionally understood. However, under the broad CCPA definition, some data sharing activities might be considered "sales":
- • Advertising Cookies: Some marketing cookies may be considered data sharing
- • Analytics: Sharing with analytics providers for website optimization
- • Social Media: Pixels and plugins for social media advertising
You can opt-out of these activities using our "Do Not Sell My Personal Information" link or cookie settings.
Exercising California Rights
How to Submit Requests
- • Email: privacy@growngem.com with "California Privacy Request" in subject
- • Phone: (954) 278-6000 (ask for privacy team)
- • Online Form: Privacy request form on our website
- • Mail: 10120 South Eastern Ave, Suite 200, Henderson, NV 89052
Verification Process
To protect your privacy, we verify the identity of individuals making privacy requests:
- Matching at least two data points we have on file
- Additional verification for sensitive information requests
- Authorized agents must provide written authorization
- Response provided to verified email address or phone number
Non-Discrimination
We will not discriminate against you for exercising your California privacy rights. We will not:
- Deny goods or services to you
- Charge different prices or rates
- Provide different levels or quality of service
- Suggest that you will receive different treatment
📞Contact Us About Privacy
Privacy Team Contact
📧 Email Support
Privacy Inquiries:
privacy@growngem.com
General Support:
support@growngem.com
Response within 24-48 hours
📱 Phone Support
Monday - Friday: 9 AM - 6 PM PST
Saturday: 10 AM - 4 PM PST
Ask for "Privacy Team"
Mailing Address
📍 Privacy Officer
Grown Gem - Privacy Department10120 South Eastern Ave, Suite 200
Henderson, NV 89052
United States
Data Protection Officer
For EU residents or complex privacy matters, you can contact our Data Protection Officer directly:
Email: dpo@growngem.com
Subject Line: "DPO - [Your Privacy Concern]"
What to Include in Your Privacy Request
- Clear Request: Specify what privacy right you're exercising
- Identity Information: Name and email address associated with your account
- Account Details: Order numbers or account information for verification
- Specific Details: What information you want accessed, corrected, or deleted
- Preferred Response: How you'd like to receive our response
Supervisory Authorities
If you're not satisfied with our privacy practices, you have the right to file a complaint with relevant supervisory authorities:
EU Residents
Contact your local Data Protection Authority or the lead supervisory authority in your country.
California Residents
California Attorney General's Office Privacy Unit
We're Here to Help
We take your privacy seriously and are committed to addressing your concerns promptly and thoroughly. Don't hesitate to reach out with any questions about our privacy practices or your data rights.