This website collects some personal data from its users.
Data controller and owner
Jewelry by Sarah Jordan
Fort Plain, NY 13339
Types of data collected
Among the types of personal data that this website collects by itself or through third parties are first name, last name, email address, cookies, and usage data.
Other personal data collected may be described in other sections of this privacy policy or by dedicated explanation text contextually with the data collection.
The personal data may be freely provided by the user or collected automatically when using this website.
Any use of cookies or of other tracking tools by this website or by the owners of third party services used by this website, unless stated otherwise, serves to identify users and remember their preferences for the sole purpose of providing the services required by the users.
Failure to provide certain personal data may make it impossible for this website to provide its services.
Users are responsible for any personal data of third parties obtained, published, or shared through this website and confirm that they have the third party’s consent to provide the data to the owner.
Methods and locations of data processing
Processing methods
The data controller processes user data in a proper manner and shall take appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of the data.
The data processing follows organizational procedures and modes strictly related to the purposes indicated and is carried out using computers and / or IT enabled tools. In addition to the data controller, in some cases, the data may be accessible to certain types of persons involved with the operation of the site (administration, sales, marketing, legal, system administration) or external parties (third party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as data processors by the owner. The updated list of these parties may be requested from the data controller at any time.
Processing locations
The data is processed at the data controller’s operating offices and in any other places where the parties involved with the processing are located. For further information, please contact the data controller.
Retention time
The data is kept for the time necessary to provide the services requested by the user or as stated by the purposes outlined in this document. The user can request that the data controller suspend or remove the data at any time.
Use of collected data
The data concerning the user is collected to allow this website to provide its services as well as for the following purposes: contacting the user, managing contacts and sending messages, displaying content from external platforms, accessing third party service accounts, interacting with external social networks, registration and authentication, platform services and hosting, analytics, and spam protection.
The personal data used for each purpose is outlined in the specific sections of this document.
Facebook permissions
This website may request some Facebook permissions to allow it to perform actions with the user’s Facebook account and to retrieve information, including personal data, from it. For more information about the permissions, refer to the Facebook permissions documentation and the Facebook privacy policy.
The permissions requested are as follows:
- Basic information — This includes certain user data such as ID, name, picture, gender, and locale. Certain connections of the user, such as his or her friends, are also available. If the user has made more data public, more information will be available.
- Email — Provides access to the user’s primary email address.
- Likes — Provides access to the list of pages the user has liked.
- Post likes to wall — Publishes stories about things the user likes to the wall.
- Publish to wall — Enables content, comments, and likes to be posted to the user’s wall and to the walls of the user’s friends.
- Share — Shares items on the user’s behalf.
Detailed data processing information
Personal data is collected for the following purposes and using the following services:
- Contacting the user
Contact form (this website)
By filling in the contact form with his or her data, the user authorizes this website to use these details to reply to requests for information, quotes, or any other kind of message as indicated by the form’s header.
Personal data collected: First name, last name, email address
Mailing list (this website)
By subscribing to the mailing list, the user’s email address will be added to the contact list of those who may receive email messages containing information of commercial or promotional nature concerning this website. The user’s email address may also be added to this list as a result of registering on this website or after making a purchase.
Personal data collected: First name, last name, email address
- Managing contacts and sending messages
These services allow this website to maintain a database of email contacts, phone contacts, and any other contact information to facilitate communication with the user. They may also collect data concerning the date and time that a message was viewed by the user, as well as when the user interacted with it.
MailChimp (The Rocket Science Group LLC)
MailChimp is an email address management and message sending service provided by The Rocket Science Group LLC.
Personal data collected: First name, last name, email address
Place of processing: United States — privacy policy
- Displaying content from external platforms
These services allow the user to view and interact with content hosted on external platforms directly from the pages of this website. Traffic data may be collected for pages where the services are installed even if users do not use the data.
Google Fonts (Google Inc.)
Google Fonts is a typeface visualization service provided by Google Inc. that allows this website to incorporate content of this kind on its pages.
Personal data collected: Usage data, various types of data as specified in the privacy policy of the service
Place of processing: United States — privacy policy
Gravatar (Automattic Inc.)
Gravatar is an image visualization service provided by Automattic Inc. that allows this website to incorporate content of this kind on its pages. Please note that if Gravatar images are used for comment forms, the commenter’s email address or parts of it may be sent to Gravatar even if the commenter has not signed up for that service.
Personal data collected: Email address, usage data
Place of processing: United States — privacy policy
Instagram (Instagram Inc.)
Instagram is an image visualization service provided by Instagram Inc. that allows this website to incorporate content of this kind on its pages.
Personal data collected: Cookies, usage data
Place of processing: United States — privacy policy
- Accessing third party service accounts
These services allow this website to access data from the user’s third party service account and perform actions with it. These services are not activated automatically; they require explicit authorization from the user.
Facebook account (this website)
This service allows this website to connect with the user’s account on the Facebook social network provided by Facebook Inc.
Permissions requested: Email, likes, post likes to wall, publish to wall, share
Place of processing: United States — privacy policy
Twitter account (Twitter Inc.)
This service allows this website to connect with the user’s account on the Twitter social network provided by Twitter Inc.
Personal data collected: Various types of data as specified in the privacy policy of the service
Place of processing: United States — privacy policy
- Interacting with external social networks
These services allow interaction with social networks or other external platforms directly from the pages of this website. The interaction and information obtained through this website are subject to the privacy settings of each social network. Traffic data may be collected for pages where the services are installed even if users do not use the data.
Facebook Like button and social widgets (Facebook Inc.)
The Facebook Like button and social widgets are services that allow interaction with the Facebook social network provided by Facebook Inc.
Personal data collected: Cookies, usage data
Place of processing: United States — privacy policy
Google+ +1 button and social widgets (Google Inc.)
The Google+ +1 button and social widgets are services that allow interaction with the Google+ social network provided by Google Inc.
Personal data collected: Cookies, usage data
Place of processing: United States — privacy policy
LinkedIn button and social widgets (LinkedIn Corporation)
The LinkedIn button and social widgets are services that allow interaction with the LinkedIn social network provided by LinkedIn Corporation.
Personal data collected: Cookies, usage data
Place of processing: United States — privacy policy
Pinterest Pin It button and social widgets (Pinterest Inc.)
The Pinterest Pin It button and social widgets are services that allow interaction with the Pinterest platform provided by Pinterest Inc.
Personal data collected: Cookies, usage data
Place of processing: United States — privacy policy
Tumblr sharing button and social widgets (Tumblr Inc.)
The Tumblr sharing button and social widgets are services that allow interaction with the Tumblr social network provided by Tumblr Inc.
Personal data collected: Cookies, usage data
Place of processing: United States — privacy policy
Twitter Tweet button and social widgets (Twitter Inc.)
The Twitter Tweet button and social widgets are services that allow interaction with the Twitter social network provided by Twitter Inc.
Personal data collected: Cookies, usage data
Place of processing: United States — privacy policy
- Registration and authentication
By registering or authenticating, users allow this website to identify them and give them access to dedicated services. Third parties may provide registration and authentication services as described below. In that case, this website will be able to access some data, stored by the third party services, for registration or identification purposes.
Facebook authentication (Facebook Inc.)
Facebook authentication is a registration and authentication service provided by Facebook Inc. and is connected to the Facebook social network.
Personal data collected: Various types of data as specified in the privacy policy of the service
Place of processing: United States — privacy policy
Instagram authentication (Instagram Inc.)
Instagram authentication is a registration and authentication service provided by Instagram Inc. and is connected to the Instagram social network.
Personal data collected: Various types of data as specified in the privacy policy of the service
Place of processing: United States — privacy policy
Google OAuth (Google Inc.)
Google OAuth is a registration and authentication service provided by Google Inc. and is connected to the Google network.
Personal data collected: Various types of data as specified in the privacy policy of the service
Place of processing: United States — privacy policy
LinkedIn OAuth (LinkedIn Corporation)
LinkedIn OAuth is a registration and authentication service provided by LinkedIn Corporation and is connected to the LinkedIn social network.
Personal data collected: Various types of data as specified in the privacy policy of the service
Place of processing: United States — privacy policy
Pinterest OAuth (Pinterest Inc.)
Pinterest OAuth is a registration and authentication service provided by Pinterest Inc. and is connected to the Pinterest platform.
Personal data collected: Various types of data as specified in the privacy policy of the service
Place of processing: United States — privacy policy
Twitter OAuth (Twitter Inc.)
Twitter OAuth is a registration and authentication service provided by Twitter Inc. and is connected to the Twitter social network.
Personal data collected: Various types of data as specified in the privacy policy of the service
Place of processing: United States — privacy policy
WordPress.com single sign on (Automattic Inc.)
WordPress.com single sign on is a registration and authentication service provided by Automattic Inc. and is connected to the WordPress.com network.
Personal data collected: Various types of data as specified in the privacy policy of the service
Place of processing: United States — privacy policy
- Platform services and hosting
These services host and run key components of this website, thereby allowing the provision of this website from within a unified platform. Such platforms provide a wide range of tools (analytics, user registration, commenting, database management, ecommerce, payment processing) that imply the collection and handling of personal data. Some of these services operate using geographically distributed servers, making it difficult to determine the actual storage location of the personal data.
WordPress.com (Automattic Inc.)
WordPress.com is a platform provided by Automattic Inc. that allows the owner to build, host, and run this website.
Personal data collected: Various types of data as specified in the privacy policy of the service
Place of processing: United States — privacy policy
- Analytics
These services enable the owner to monitor and analyze web traffic and can be used to examine user behavior.
Google Analytics (Google Inc.)
Google Analytics is a web analysis service provided by Google Inc. Google utilizes the collected data to track and examine the use of this website, to prepare reports on its activities, and to share the reports with other Google services. Google may use the collected data to contextualize and personalize the ads on its advertising network.
Personal data collected: Cookies, usage data
Place of processing: United States — privacy policy — opt out
WordPress Stats (Automattic Inc.)
WordPress Stats is an analytics service provided by Automattic Inc.
Personal data collected: Cookies, usage data
Place of processing: United States — privacy policy
- Spam protection
These services analyze the traffic of this website, potentially containing personal data, with the purpose of filtering it from traffic, messages, and content that are recognized as spam.
Akismet (Automattic Inc.)
Akismet is a spam protection service provided by Automattic Inc.
Personal data collected: Various types of data as specified in the privacy policy of the service
Place of processing: United States — privacy policy
Additional information
Legal action
The user’s personal data may be used for legal purposes by the data controller in court or in the stages leading to possible legal action arising from improper use of this website or its related services.
The user declares to be aware that the data controller may be required to reveal personal data upon request of public authorities.
Rights of users
Users have the right, at any time, to know whether or not their personal data has been stored and can consult the data controller to learn about the data contents and origin, to verify accuracy, to block any data held in violation of the law, or to ask for the data to be supplemented, cancelled, updated, corrected, or transformed into anonymous format, as well as to oppose their treatment for any and all legitimate reasons. Requests should be sent to the data controller at the contact information above.
This website does not support Do Not Track requests. To determine whether any of its third party services honor Do Not Track requests, please consult their privacy policies.
Additional information about personal data
In addition to the information contained in this privacy policy, this website may provide the user with additional and contextual information concerning particular services or the collection and processing of personal data upon request.
System logs and maintenance
For operation and maintenance purposes, this website and any third party services may collect files that record interaction with this website (system logs) or use for this purpose other personal data such as IP address.
Information not contained in this policy
More details concerning the collection or processing of personal data may be requested from the data controller at any time.
Changes to this policy
The data controller reserves the right to modify this privacy policy at any time by giving notice to the users on this page. It is strongly recommended to check this page often, referring to the date of the last modification displayed at the bottom. If a user objects to any of the changes to the policy, the user must cease using this website and can request that the data controller remove the personal data. Unless stated otherwise, the current privacy policy applies to all personal data managed by the data controller.
Information about this policy
This privacy policy was prepared by the data controller and is based upon modules provided by Iubenda.
Definitions and legal references
Cookies
Small pieces of data that are stored on the user’s device to identify the user and remember his or her preferences.
Data controller (or owner)
The natural person, legal person, public administration, or any other body, association, or organization with the right, either individually or jointly with another data controller, to make decisions regarding the purposes for and the methods and means of processing personal data, including security measures concerning the operation and use of this website. The data controller, unless otherwise specified, is the owner of this website.
Data processor (or data supervisor)
The natural person, legal person, public administration, or any other body, association, or organization authorized by the data controller to process the personal data in compliance with this privacy policy.
Data subject
The legal or natural person to whom the personal data refers.
Personal data (or data)
Any information regarding a natural person, legal person, institution, or association which is or can be identified, even indirectly, by reference to any other information including a personal identification number.
Usage data
Information collected automatically from this website or third party services employed by this website which may include the IP address or domain name of the computer utilized by the user of this website, the uniform resource identifier address, the time of the request, the method utilized to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server’s answer (successful outcome, error, etc.), the country of origin, the features of the browser and the operating system utilized by the user, the time details per visit (time spent on each page within the website, etc.), the details about the path followed within the website with special reference to the sequence of pages visited, and other parameters about the device operating system and / or the user’s IT environment.
User
The individual using this website, who must coincide with or be authorized by the data subject, to whom the personal data refers.
Website
The collection of computer software that is stored in a server based file archive, is publicly accessible over the internet using hypertext transfer protocol or any successor protocol, and through which the personal data of the user is collected.
Legal information
Notice to European users: This privacy statement has been prepared in fulfillment of the obligations under Article 10 of EC Directive 95/46/EC and under the provisions of Directive 2002/58/EC, as revised by Directive 2009/136/EC, on the subject of cookies.
This privacy policy relates solely to this website.
Last update: 30 September 2016