Privacy

I'm one person making jewelry, not a data company. Here's everywhere your information goes, and how to get it back out.

Last updated 12 September 2026

What I collect

When you buy something: Stripe runs the checkout, so your card number goes straight to them and never touches this site — I never see it. What comes back to me is your email, your name, your shipping address, which pieces you bought and what you paid. That gets saved as an order, along with the tracking number once it ships.
When you join the mailing list: Your email address, plus a short note of how you first landed here — a tag on a link from a market card, the site that referred you, the first page you opened. That's so I know whether the QR codes at shows are worth printing. If you choose to, you can also give me the month and day of your birthday, so I can write to you when your sign's season comes round — I don't ask for the year and there's nowhere to store one. All of it is optional except the address itself, and none of it is saved unless you typed it in.
When you send a custom request: Your name and email, what you told me about the piece — type, size, timeline, materials, notes — and any photos you upload. The photos sit in private storage and open only through a signed link in my own inbox.
When you're just looking around: Nothing. There's no analytics, no tracking pixel, no advertising cookie, nobody watching you browse. Your cart and that first-touch note live in your own browser's storage, on your device. They only reach me if you actually check out or sign up, and clearing your site data wipes both.

Stripe: Takes the payment and collects your shipping address at checkout. Card details are theirs to hold, not mine, and what they do with them is covered by their own privacy policy.
Supabase: The database behind the site. Orders, the mailing list, custom requests and uploaded photos all live there.
Resend: Sends the email — order confirmations, shipping notices, the welcome note, mailing-list letters. They handle your address and whatever's in the message.
Cloudflare: The site itself runs on Cloudflare's network, which serves the pages and passes the requests along.
Etsy, if that's where you bought: Orders placed through my Etsy shop live in Etsy's system under Etsy's policies. This page covers divinewire.co.

The whole list of uses: Making and shipping your order, emailing you about it, answering you when you write, and sending mailing-list emails to people who asked for them. That's it.
What I don't do: I don't sell your information. I don't rent it, trade it, or hand it to advertisers. There's no ad network on this site and I'm not planning on one.
How long it sticks around: Mailing list: until you unsubscribe or ask me to delete it. Custom requests and their photos: while we're figuring out a piece, and I'm glad to clear them once it's done. Records of an actual sale I keep, because a business has to be able to account for what it sold.

Getting off the mailing list: Every mailing-list email has an unsubscribe link at the bottom. One click, no confirmation screen, no “are you sure”. The unsubscribe button built into Gmail and Yahoo works too. Emails about an order you actually placed aren't marketing and don't stop — a shipping notice shouldn't vanish because you left the list.
Asking me to delete it: Email me at divinewirejewelryusa@gmail.com and say so. I'll take you off the list, delete a custom request and its photos, and write back when it's done. The one thing I can't wipe is the record of a sale that already happened — I need those to keep the books straight.
Seeing it, or fixing something wrong in it: Same door: divinewirejewelryusa@gmail.com. I'll tell you exactly what I've got and correct anything that's off.
If you're in the UK or the EU: The parts of GDPR that touch a shop this size are already how this works: you're on the mailing list only because you typed your address in, the unsubscribe link genuinely works, and I delete on request. Ask, and you get an answer from me — not a ticket number.

Keeping it safe: I keep the number of places your details live as small as I can. Cards stay with Stripe. Everything else sits in one database only I can reach, and custom-request photos open only through private signed links. I'm one person, not a security department, so I won't promise anything is unbreakable — but I'm not collecting things I don't need, which helps.
If this page changes: The date at the top changes with it. If something meaningful changes for people already on the mailing list, I'll say so in an email instead of hoping you come back and re-read this.
Getting hold of me: divinewirejewelryusa@gmail.com is the fastest way, and it comes to me. By post: BUSINESS_ADDRESS_PLACEHOLDER. The terms cover the buying side.