How we protect your information
This page is maintained by SS Handmade Jewelry to answer common security and privacy questions about how the store works. It describes the controls currently in place — it is not an independent certification.
Accounts & Authentication
Customer accounts are protected by email + password or Google sign-in. Sessions are managed by our authentication provider; we never see or store your password.
Data we collect
When you place an order or submit a custom design request we collect the information you provide: name, email, phone, shipping address, and any references or notes you attach. Payment card details are handled by Shopify and never touch our servers.
Payments
All checkouts are completed on Shopify's hosted checkout, which is PCI-DSS compliant. We do not store credit card numbers, CVVs, or full bank details.
Access controls
Order, profile, and custom-design data is protected by row-level security: by default each customer can only read and modify their own records. Admin access is limited to authorised staff accounts.
Subprocessors
We rely on a small number of trusted providers to run the store: Shopify (commerce & payments), our hosting and database provider for the storefront and customer accounts, and an email delivery provider for order and account notifications.
Data retention & deletion
Order and design records are retained while your account is active and for as long as needed to meet legal and accounting obligations. To request deletion of your account or a copy of your data, contact us at the address below.
Reporting a security issue
If you believe you have found a vulnerability, please email us so we can investigate. We appreciate responsible disclosure and will respond as quickly as we can.