Privacy policy
PRIVACY POLICY
Set & Stones, LLC
Last Updated and Effective Date: October 6, 2026
1. Our Commitment to Your Privacy
At Set & Stones, your privacy matters to us. This Privacy Policy explains what information we collect when you visit our website or shop with us, how we use it, who we share it with, and what choices you have.
We are committed to complying with California privacy law, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA). If you are a California resident, Section 9 of this policy explains your specific rights.
We update this policy from time to time. When we make changes, we will let you know by posting a notice on our Website or sending you an email before the changes take effect.
2. What Information We Collect
Information You Give Us Directly
When you shop with us, create an account, or get in touch, we may collect:
-
Your name, email address, phone number, and shipping and billing address.
-
Payment information, which is handled securely by our payment processor, we never see or store your card number.
-
Any messages or questions you send us.
-
Your phone number if you sign up for our SMS marketing program.
Information We Collect Automatically
When you visit our Website, we and our partners automatically collect certain information about your visit, including:
-
Your IP address and approximate location based on your IP.
-
The pages you visit, how you got to our site, and how you interact with our content.
-
Your browser type, device type, and device identifiers.
-
Session and cookie identifiers that help us remember you between visits.
-
Behavioral data that may be used to build a profile of your interests for advertising purposes.
A note about advertising data: When you have given us your consent or have not opted out, some of this information may be shared with advertising partners like Meta (Facebook/Instagram) and TikTok in real time, both through tracking pixels in your browser and through direct server-to-server connections that your browser settings alone cannot block. If you would like to stop this, you can use the Do Not Sell or Share My Personal Information link in our footer or decline advertising cookies on our consent banner.
Sensitive Information
We do not intentionally collect sensitive personal information such as health data, financial account credentials, or biometric data. If you believe we have collected something we should not have, please reach out to us at orders@setandstones.com.
3. Cookies and Tracking Technologies
When you first visit our Website, a cookie consent banner will appear before any non-essential tracking tools activate. You can accept all cookies, reject non-essential ones, or choose your own preferences. We will not activate advertising or analytics cookies until you give us your consent.
You can update your preferences at any time using the Cookie Settings link in our footer. If you close the banner without making a choice, we treat that as a decline, no advertising tools will activate.
We also honor Global Privacy Control (GPC) signals. If your browser is set to send a GPC signal, we will automatically treat that as an opt-out of data sharing for advertising purposes, no extra steps needed on your end.
|
Type of Cookie |
Examples |
What It Does |
|
Strictly Necessary |
Shopify session, cart, checkout cookies |
These keep our Website working, things like your shopping cart and checkout. They are always on and cannot be turned off. |
|
Analytics |
Shopify Analytics |
Help us understand how visitors use our site so we can improve it. Only active with your consent. |
|
Advertising |
Meta pixel and Conversions API; TikTok pixel and Events API |
Allow our advertising partners to show you relevant ads on other platforms. Only active when we are running ad campaigns and only with your consent. |
4. Who We Share Your Information With
We only share your information when we need to in order to run our business and serve you well. Here is who may receive your data and why:
|
Partner |
What They Receive |
Why |
Their Privacy Policy |
|
Meta (Facebook / Instagram) |
IP address, page visits, device data, behavioral events, via pixel and server-side Conversions API |
To run targeted ads and measure their performance. Only when Meta campaigns are active and you have consented. |
facebook.com/privacy/policy |
|
TikTok |
IP address, page visits, device data, behavioral events, via pixel and server-side Events API |
To run targeted ads and measure their performance. Only when TikTok campaigns are active and you have consented. |
tiktok.com/legal/page/us/privacy-policy |
|
Klaviyo |
Email address, phone number, purchase history, browsing behavior |
To power our email and SMS marketing programs. |
klaviyo.com/legal/privacy |
|
Shopify |
Name, contact details, order history, payment transaction data |
Our e-commerce platform that powers the Website. |
shopify.com/legal/privacy |
|
Shopify Payments |
Payment transaction data |
To securely process your payment. We never store your card details. |
shopify.com/legal/privacy |
If we add new advertising platforms in the future, we will update this table before activating them.
5. How We Use Your Information
We use the information we collect to:
-
Process your orders, handle payments, and arrange delivery.
-
Send you order confirmations, shipping updates, and account notices.
-
Respond to your questions and provide customer support.
-
Send you marketing emails and texts, but only if you have signed up for them.
-
Show you relevant ads on platforms like Meta and TikTok, when you have consented and we are running active campaigns.
-
Understand how people use our Website so we can make it better.
-
Detect and prevent fraud and keep our Website secure.
-
Meet our legal obligations.
About advertising: when we run ad campaigns, and only where you have consented through our cookie banner or have not opted out, we may share your data with Meta and TikTok for targeted advertising based on your activity across other websites and apps. This is called cross-context behavioral advertising under California law and you have the right to opt out at any time.
6. Our SMS Program
We run an SMS marketing program through Klaviyo. We will only text you if you have specifically opted in. By signing up, you agree to receive recurring automated marketing texts from Set & Stones at the number you provide. Consent is never required to make a purchase. Message and data rates may apply.
To stop receiving texts at any time, just reply STOP. Reply HELP if you need assistance. You can also reach us at orders@setandstones.com. We do not sell your phone number to third parties.
7. How Long We Keep Your Information
We only keep your information for as long as we need it. Here is a general guide:
|
Type of Information |
How Long We Keep It |
Why |
|
Order and purchase records |
7 years |
Tax and legal compliance |
|
Account information |
While your account is active, plus 3 years after closure |
Customer relationship |
|
Browsing and behavioral data |
Up to 2 years |
Analytics and personalization |
|
Marketing consent records |
3 years after our relationship ends |
Legal compliance |
|
Cookie consent records |
3 years |
Legal compliance |
|
Customer service records |
3 years from last contact |
Business operations |
Our partners listed in Section 4 have their own retention policies, check their privacy policies for details.
8. Keeping Your Information Safe
We take reasonable steps to protect your personal information from unauthorized access, disclosure, or loss. No system is completely secure, and we cannot guarantee absolute protection, but we take this seriously and review our practices regularly.
If there is ever a security incident involving your personal information, we will notify you as required by California law.
9. Children's Privacy
Our Website is for adults. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us with their information, please contact us at orders@setandstones.com and we will take steps to remove it.
10. Your California Privacy Rights
If you are a California resident, you have meaningful rights under California law. Here is what you can ask us to do:
|
Your Right |
What It Means |
|
Right to Know |
Ask us what personal information we have collected about you, where it came from, and who we have shared it with. |
|
Right to Access |
Get a copy of the specific personal information we hold about you. |
|
Right to Delete |
Ask us to delete your personal information, with some exceptions. |
|
Right to Correct |
Ask us to fix any inaccurate information we have about you. |
|
Right to Opt Out |
Tell us to stop sharing your information with advertising partners for targeted ads. |
|
Right to Non-Discrimination |
We will never treat you differently for exercising any of these rights. |
Opting Out of Data Sharing
To opt out of having your data shared with Meta and TikTok for advertising purposes, click the Do Not Sell or Share My Personal Information link in the footer of our Website. This will stop both the browser-side pixels and the server-to-server connections from transmitting your data.
If your browser sends a Global Privacy Control (GPC) signal, we will automatically treat that as an opt-out, no extra steps needed.
The Data We Collect, California Categories
|
Cat. |
Category |
Examples |
Collected? |
|
A |
Identifiers |
Name, email, IP address, device identifiers |
Yes |
|
B |
Customer Records |
Name, address, phone, financial information |
Yes |
|
C |
Protected Characteristics |
Age |
Limited |
|
D |
Commercial Information |
Purchase history, products considered |
Yes |
|
E |
Biometric Information |
Fingerprints, voiceprints |
No |
|
F |
Internet Activity |
Browsing history, ad interactions, session data |
Yes |
|
G |
Geolocation Data |
Approximate location from IP address |
Yes |
|
H |
Sensory Data |
Audio, visual data |
No |
|
I |
Employment Information |
Job history |
No |
|
J |
Education Information |
Student records |
No |
|
K |
Inferences |
Behavioral profiles, purchasing tendencies |
Yes |
How to Submit a Request
To exercise any of these rights, please reach out to us:
-
Email: orders@setandstones.com, subject line: "California Privacy Rights Request"
-
Mail: Set & Stones, LLC, 4540 Kearny Villa Road, Suite 207, San Diego, California 92123
We will respond within 45 days. If we need a little more time, we will let you know. You can also designate someone to submit a request on your behalf, we will just need written proof of their authorization.
Shine the Light
California residents can also request information about personal data we have shared with third parties for direct marketing purposes in the prior calendar year. Email us at orders@setandstones.com to make this request.
11. Payment Processing
Your payment information is handled entirely by our trusted payment processors. We never see or store your card number, CVV, or account credentials. Each processor has its own privacy policy explaining how they protect your payment data.
12. Links to Other Websites
Our Website may link to other sites. We are not responsible for those sites' privacy practices. We encourage you to read their privacy policies before sharing any information with them.
13. Get in Touch
If you have any questions about this Privacy Policy or want to exercise your privacy rights, we would love to hear from you:
-
Email: orders@setandstones.com
-
Mail: Set & Stones, LLC, 4540 Kearny Villa Road, Suite 207, San Diego, California 92123