Privacy Policy

Last updated: July 26, 2026

Who we are and how to reach us

JeweLayer is a brand of Flarko LLC ("JeweLayer", "we", "us", "our"). We sell made-to-order message-card jewelry at https://jewelayer.com.

This policy explains what personal information we collect when you visit our site, buy from us, or contact us; why we collect it; who we share it with; and the choices and rights you have. We are the business responsible for the personal information described here.

You can reach us any time:

JeweLayer, a brand of Flarko LLC 2672 Ridgetop Lane, Clermont, FL, United States support@jewelayer.com · +1 307 430 1855 Monday – Friday, 9 AM – 6 PM PST

We are a United States business and this policy is written around United States privacy law. We ship to seven countries: the United States, Canada, France, the Netherlands, Spain, the United Kingdom and India. Nothing in this policy limits any statutory rights you may have under the consumer-protection law of the country you live in.

The short version

We collect what we need to take your order, make it, ship it, and support you afterward.
We record browsing sessions on this site using Microsoft Clarity. This is explained in its own section below, and you can opt out.
We use analytics and advertising tools from Google, Meta, TikTok, and Pinterest. These share information about your visit with those companies. Under California law and several other state laws, that counts as "selling" or "sharing" your information — and you can opt out.
We do not sell your information for money, and we do not share the message you write on a card with anyone except the manufacturer who prints it.
You can ask us for a copy of your information, ask us to correct or delete it, or opt out of advertising uses, by emailing support@jewelayer.com.

Information we collect

Information you give us

Contact and delivery details — your name, email address, billing address, shipping address, and phone number if you give one.
Order details — the products you buy, the options you choose, order value, discount codes used, and your order history.
Payment information — your card is processed by our payment providers, not by us. We receive confirmation that payment succeeded, the card type, the last four digits, and the billing address. We never see or store your full card number.
The message you write on the card, and any personalization such as a name or a date. These are often personal and sometimes emotional. We treat them as part of your order. We do not use them for marketing, we do not publish them, and we do not use them to train anything.
Account information — if you sign in, Shopify's customer accounts system verifies you with a one-time code sent to your email. There is no password for us to hold.
Messages you send us — email, chat, and anything you choose to tell us in them.
Newsletter signups — your email address, if you subscribe.
Reviews — if you submit a product review, we collect the name you enter, your email address, your rating, your review text, and any photo you upload.

Information about the person you are sending a gift to. Most of our customers are buying for someone else. When you give us a recipient's name and address, we hold it to fulfill your order and we pass it to the manufacturer and the delivery carrier. We do not market to gift recipients and we do not add them to any mailing list. If you received a gift from us and want to know what we hold about you, or want it deleted, email support@jewelayer.com.

Information collected automatically when you visit

Device and connection information — IP address, browser type and version, operating system, device type, screen size, and the language and country your browser reports. Your IP address tells us your approximate area, such as a city or region. We do not collect precise location.
Usage information — the pages you view, the products you look at, what you add to your cart, how you arrived at the site (including the ad, search result, or link you came from), and the dates and times of your visits.
Cookies and similar identifiers — see "Cookies and similar tracking" below.
Session recordings — see "Session recording with Microsoft Clarity" below.

Information we get from other companies

Our payment providers tell us whether a payment succeeded and flag suspected fraud.
Our advertising and analytics partners tell us which ads and campaigns led to visits and orders.
If you buy from us on an online marketplace, that marketplace passes us the information we need to fulfill and support your order.

What we do not want. We do not ask for Social Security numbers, government ID numbers, health information, precise location, or account passwords. Please do not send them to us in a message, a review, or a card.

Why we use your information

We use personal information to:

take, make, and deliver your order, and handle returns, exchanges, and refunds;
send order confirmations, shipping notices, and delivery updates;
answer your questions and provide customer support;
detect, prevent, and investigate fraud, abuse, and security incidents;
understand how the site is used and fix what is broken or confusing;
advertise to you on other platforms and measure whether our ads work;
send marketing emails you asked for, which you can stop at any time;
publish reviews you submit;
keep accounting and tax records, and respond to lawful requests and legal claims.

Session recording with Microsoft Clarity

Please read this section. It describes something more intrusive than an ordinary cookie, and we want you to know about it.

We use Microsoft Clarity on this website (Clarity project x7s5qdngxu). Clarity records what happens in your browser while you are on our site, including:

the pages you open and how long you stay on each one;
where you move your mouse or place your finger;
what you click and tap;
how far and how fast you scroll;
the timing and rhythm of your keystrokes as you type into a field;
errors the page throws and how your device and browser are set up.

Clarity assembles these signals into a session replay — a video-like reconstruction of your visit that we can play back — and into heatmaps that show which parts of a page people use. We use this only to find broken pages, confusing layouts, and checkout drop-off. We do not use it to build advertising profiles, and we do not try to identify you from a recording.

What is masked. Clarity's default masking hides the text you type into form fields, so a replay shows that you typed in a field and when, but not the characters you entered. Password fields are always masked by Clarity. Your card number is never captured, because payment is taken on Shopify's hosted checkout pages, where card details are entered inside Shopify's own secure payment fields. We do not turn masking off. Even so, no masking is perfect — please do not type Social Security numbers, government ID numbers, or health details into any field on our site.

Microsoft's role. Clarity is Microsoft's service, not ours. Microsoft processes and stores this data on its own systems, under its own terms, and keeps it under Microsoft's own retention schedule. Microsoft's handling of it is described in the Microsoft Privacy Statement at https://privacy.microsoft.com/privacystatement.

How to opt out. Any one of these works:

Use Microsoft's Clarity opt-out page at https://clarity.microsoft.com/optout, which sets an opt-out for the browser you are using.
Browse with Global Privacy Control enabled — we treat that signal as an opt-out (see below).
Use our Your Privacy Choices page at https://jewelayer.com/pages/data-sharing-opt-out.
Email us at support@jewelayer.com and ask us to exclude you.

Opting out through your browser is per browser and per device, so you will need to do it again on a different device, in a different browser, or after clearing your cookies.

Cookies and similar tracking

We and our partners use cookies, pixels, tags, local storage, and similar technologies. They fall into four groups:

Strictly necessary — cart contents, checkout, sign-in, security, and load balancing. The site cannot work without these.
Analytics — Google Analytics and Microsoft Clarity, which tell us how the site is used and, in Clarity's case, record sessions as described above.
Advertising — Google, Meta, TikTok, and Pinterest tags, which let us show ads to people who visited the site and measure which ads produce sales.
Preferences — remembering things like your currency, country, or recently viewed items.

Your choices. You can block or delete cookies in your browser settings, though strictly necessary cookies are required for the store to function. You can opt out of advertising and analytics uses using the routes in the next two sections.

Global Privacy Control. If you visit us with the Global Privacy Control (GPC) signal enabled in your browser or extension, we treat it as a request to opt out of the sale and sharing of your personal information for that browser and device, and we apply it without asking you for anything else. You can learn more at https://globalprivacycontrol.org. We do not respond to older "Do Not Track" browser settings, because no common standard for them was ever agreed.

Advertising and analytics partners

These are the companies whose analytics and advertising technology runs on our site:

Google — Google Analytics, Google Ads and the Google tag, and Google's shopping and product-listing services. Used for site analytics, ad delivery, conversion measurement, and listing our products.
Microsoft — Microsoft Clarity, for session replay and heatmaps as described above, and Microsoft's search and product-listing services.
Meta (Facebook and Instagram) — ad delivery and conversion measurement.
TikTok — ad delivery and conversion measurement.
Pinterest — ad delivery and conversion measurement.

You can limit ad targeting directly with these companies:

Google — https://myadcenter.google.com and https://tools.google.com/dlpage/gaoptout
Microsoft — https://account.microsoft.com/privacy/ad-settings and https://clarity.microsoft.com/optout
Meta — https://www.facebook.com/adpreferences
TikTok — in your TikTok app privacy settings
Pinterest — https://www.pinterest.com/settings/privacy

Industry-wide opt-out tools are also available at https://optout.aboutads.info and https://optout.networkadvertising.org.

Whether we "sell" or "share" your information

We do not sell your personal information for money, and we never will.

But we have to be straight with you about something. California's privacy law defines "sale" and "sharing" very broadly — broadly enough that no money needs to change hands. When our advertising and analytics tags pass information about your visit to Google, Meta, TikTok, and Pinterest so those companies can show you relevant ads and measure results, that activity is treated as a "sale" and a "share" of personal information for cross-context behavioral advertising under the California Consumer Privacy Act as amended by the CPRA, and as "targeted advertising" under the comparable laws in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states.

So rather than argue about the label, we treat it as a sale and a share, and we give you a way out.

How to opt out of sale, sharing, and targeted advertising:

Use our Your Privacy Choices page: https://jewelayer.com/pages/data-sharing-opt-out
Browse with Global Privacy Control enabled, which we honor automatically.
Email support@jewelayer.com and ask us to opt you out.
Opt out directly with each advertising company using the links in the section above.

Opting out does not stop you from seeing ads. It stops us from using your activity on this site to target them. Options 1, 2, and 4 apply to the browser and device you are using, so repeat them on each browser and device you use.

We do not knowingly sell or share the personal information of anyone under 16 years old.

Who we share your information with

We share personal information only with companies that help us run the store, and only what each one needs. Service providers are bound by contract to use it for us and not for their own purposes. Advertising platforms act for their own purposes as well, which is why we treat those disclosures as a sale or share.

Our e-commerce platform (Shopify) — hosts our store, checkout, and customer accounts, and provides order and analytics tooling. Shopify receives essentially everything you submit to the site. Shopify also acts for its own purposes in some respects; see https://www.shopify.com/legal/privacy/consumers
Payment processors (Shopify Payments — including Shop Pay, Apple Pay, and Google Pay — and PayPal) — receive your payment and billing details directly to take payment and screen for fraud. Each has its own privacy policy.
Our print-on-demand manufacturer (ShineOn) — receives your name, the recipient's name and shipping address, the item ordered, and the message-card text, in order to manufacture, print, and dispatch your order.
Shipping carriers — receive the recipient's name, address, and contact details to deliver the parcel and provide tracking.
Analytics and advertising platforms (Google, Microsoft, Meta, TikTok, Pinterest) — receive device and usage data, session recordings in Microsoft's case, and conversion events. See the two sections above.
Our email marketing platform — receives your email address and basic order information to send the marketing emails you signed up for.
Our product review system — receives the name, email address, rating, review text, and photo you submit with a review.
Online marketplaces — if you bought from us on a marketplace such as Amazon, we exchange order and contact details with that marketplace to fulfill and support your order.
Professional advisers and authorities — accountants and lawyers, and law enforcement or regulators where the law requires it or to protect our legal rights.

If our business is sold, merged, or reorganized, personal information may transfer to the buyer, who would remain bound by this policy until it is properly updated.

We do not otherwise disclose your personal information, and we do not disclose your message-card text to anyone beyond the manufacturer who prints it.

How long we keep your information

Information	How long we keep it
Order and transaction records, including the message-card text	Up to 7 years, to meet tax, accounting, and legal record-keeping requirements
Customer account details	Until you close the account or ask us to delete it, apart from records we are required to keep
Support emails and chat transcripts	Up to 3 years after your last message, or longer if tied to a dispute or claim
Marketing subscriber list	Until you unsubscribe. We then keep a minimal suppression record so we do not email you again
Reviews and review photos	For as long as the review is published, or until you ask us to remove it
Session recordings (Microsoft Clarity)	Under Microsoft's own retention schedule for Clarity data
Analytics data (Google)	Under the retention setting in our Google Analytics account, after which Google deletes or aggregates it
Advertising identifiers held by ad platforms	Under each platform's own retention policy

When we no longer need information, we delete it or anonymize it so it can no longer identify you.

Your privacy rights in California

If you live in California, the CCPA as amended by the CPRA gives you specific rights. This section is also our notice at collection.

Categories of personal information we collect, where it comes from, and who we disclose it to

Category	Examples we collect	Sources	Disclosed to
Identifiers	Name, email, postal address, phone number, IP address, device and cookie IDs, order number	You; automatically from your device; marketplaces	Platform, payment processors, manufacturer, carriers, email platform, analytics and advertising platforms
Customer records	Name, billing and shipping address, phone number, payment card type and last four digits	You; payment processors	Platform, payment processors, manufacturer, carriers
Commercial information	Products bought and viewed, cart contents, order history, discount codes, message-card text and personalization	You; automatically from your device	Platform, manufacturer, carriers, analytics and advertising platforms (browsing only, never the card message)
Internet and network activity	Pages viewed, clicks, scrolling, mouse movement, keystroke timing, session recordings, referral source, ad interactions	Automatically from your device	Analytics and advertising platforms, platform
Approximate location	City or region derived from your IP address	Automatically from your device	Analytics and advertising platforms, platform
Visual information	Photos you upload with a product review	You	Review system, platform
Inferences	Product and advertising preferences drawn from the above	Derived by us and our partners	Advertising platforms

We do not collect biometric information, precise geolocation, protected classifications, professional or education records, or genetic data.

Business purposes for collecting and disclosing. Fulfilling and delivering your order; customer service; processing payments; preventing fraud and securing the site; analytics and site improvement, including session replay; advertising and measuring advertising; sending marketing you asked for; and legal, tax, and accounting compliance.

Sensitive personal information. We do not collect sensitive personal information in order to infer characteristics about you, and we do not use or disclose it for any purpose beyond those the CCPA permits without a right to limit. If you write something sensitive into a message card or a support email, we use it only to fulfill your order or answer you. Because of this, there is nothing for the right to limit the use of sensitive personal information to restrict — but you can still contact us and we will confirm that in writing.

Sale and sharing. As explained above, we treat our use of advertising and analytics tags as a sale and a share of the internet-activity, identifier, approximate-location, and inference categories. We do not sell or share any other category, and we do not sell or share the message-card text at all.

Your California rights

Know and access — what we collect, the sources, the purposes, the categories we disclose or sell or share, and the specific pieces we hold about you.
Delete — ask us to delete your personal information, except what we must keep by law or to complete a transaction.
Correct — ask us to fix inaccurate personal information.
Opt out of sale and sharing — including cross-context behavioral advertising, using the routes above.
Limit the use of sensitive personal information — as described above.
No discrimination or retaliation — we will not deny you products, charge you a different price, give you a lower level of service, or treat you worse in any way for exercising a privacy right.

You may make a request twice in a 12-month period, free of charge.

Your privacy rights in other US states

If you live in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, or another state with a comprehensive consumer privacy law — including Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, and Rhode Island as their laws take effect — you have broadly equivalent rights:

Confirm and access the personal information we process about you.
Correct inaccuracies in it.
Delete personal information we hold about you.
Obtain a portable copy of it in a usable format.
Opt out of targeted advertising, of the sale of personal information, and of profiling that produces legal or similarly significant effects. We do not carry out that kind of profiling.
Appeal if we refuse your request — see below.

Where your state's law requires opt-in consent before processing sensitive data, we do not process sensitive data for those purposes at all.

Appeals. If we deny your request, we will tell you why in writing, and you may appeal by replying to that email or writing to support@jewelayer.com with the word "Appeal" in the subject line. We will review the appeal and give you a written decision, with our reasoning, within the time your state's law allows — generally 45 to 60 days. If we deny the appeal, we will tell you how to contact your state attorney general to submit a complaint.

How to submit a privacy request, and how we verify you

To make any request in the two sections above, email support@jewelayer.com with what you want. You can also call us at +1 307 430 1855 or write to the postal address at the top of this policy. There is no charge.

Verifying who you are. Before we act, we have to be reasonably sure the request is really from you — otherwise we would be handing your information to a stranger. Please write from the email address you used to order, and include your order number if you have one. For a request to access or delete specific pieces of information, we may ask you to confirm two or three details we already hold, such as the order date, the shipping ZIP code, or the last four digits of the card used. We ask only for what we need to match you to our records, we do not create an account to verify you, and we delete verification information afterward. If we cannot verify you, we will tell you why and, where the law allows, treat the request as one for categories rather than specific pieces.

Authorized agents. You can appoint someone else — including a business — to make a request for you. We will ask the agent for written permission signed by you, and we may also ask you to confirm directly with us that you authorized them and to verify your own identity. An agent acting under a valid power of attorney does not need to do this.

How quickly we respond. We confirm receipt of a request within 10 business days and respond substantively within 45 days. If a request is complex we may take up to another 45 days, and we will tell you before we do. Our support hours are Monday – Friday, 9 AM – 6 PM PST, so requests sent over a weekend are picked up the next business day.

Children

This store is not directed to children and we do not knowingly collect personal information from anyone under 13. In line with the Children's Online Privacy Protection Act (COPPA), if we learn that we have collected information from a child under 13, we delete it promptly.

We also do not knowingly sell or share the personal information of consumers under 16 years old, as California law requires.

If you believe a child has given us their information, email support@jewelayer.com and we will delete it. A gift ordered for a child is handled as ordinary order information given to us by the adult who placed the order.

Security

We use Shopify's hosted platform and checkout, which is PCI-DSS compliant, and we never handle full card numbers ourselves. Our site is served over encrypted connections, and we limit access to customer information to the people who need it to do their jobs.

No system is perfectly secure, and information sent over the internet is never completely safe in transit. Please do not send us card numbers, government ID numbers, or passwords by email or chat. We will never ask you for your full card number.

Where your information is handled

We are based in the United States, and your personal information is stored and processed here. Because we also ship to Canada, France, the Netherlands, Spain, the United Kingdom and India, and because our service providers operate in other countries, your information may also be handled outside the United States — for example when a shipping carrier or a customs authority needs delivery details to get your parcel to you, or when an analytics or advertising provider processes data on servers outside the United States.

Wherever it is handled, we require our service providers to protect it under contract and to use it only for the purposes described in this policy.

Other websites, and buying from us on marketplaces

Our site links to other websites and social platforms. We are not responsible for their privacy practices, and this policy does not cover them. Read their policies before giving them your information.

If you buy our products through an online marketplace such as Amazon, that purchase is governed by the marketplace's privacy policy as well as this one. The marketplace decides what it passes to us, and we receive only what we need to fulfill and support your order.

Changes to this policy

We may update this policy as our business, our tools, or the law changes. When we do, we will change the "Last updated" date at the top, and if the change is significant we will tell you more directly. The current version always lives at https://jewelayer.com/policies/privacy-policy.

Contact us

For any privacy question, or to make a privacy request, email support@jewelayer.com. We aim to reply within one business day.

JeweLayer, a brand of Flarko LLC 2672 Ridgetop Lane, Clermont, FL, United States support@jewelayer.com · +1 307 430 1855 Monday – Friday, 9 AM – 6 PM PST