Privacy policy

Privacy Policy

Giliarto LLC ("Giliarto," "we," "us") Last updated: September __, 2026

This Privacy Policy explains how we collect, use, share, and protect personal information when you visit or make a purchase from www.giliarto.com (the "Site"), and describes your privacy rights.

1. Information We Collect

Information you provide

Order and account information: name, billing and shipping address, email, phone number, payment details (processed by our payment providers — we do not store full card numbers).
Custom design information: ring sizes, design requests, engraving text, uploaded images, and communications with us.
Marketing sign-ups: email address and phone number when you subscribe.

Information collected automatically When you visit the Site, we and the third parties listed in Section 3 may collect, depending on your consent choices: IP address, device and browser type, operating system, time zone, referring URL, pages viewed, products viewed or added to cart, time spent on pages, and cookie or device identifiers. We collect this through cookies, pixels, tags, and similar technologies.

2. How We Use Information

To process and fulfill orders, arrange shipping, and provide receipts and order updates.
To communicate with you about orders, custom designs, repairs, and customer service.
To screen orders for fraud and protect the Site.
To operate, maintain, and improve the Site.
With your consent, to analyze how the Site is used and to show you advertising for our products on other websites and apps.
To send marketing emails or texts you have opted into. You may unsubscribe at any time.
To comply with legal obligations.

3. Cookies, Tracking Technologies, and Third Parties

We use the following categories of technologies. Non-essential technologies do not run until you click "Accept" in our cookie banner. You can change your choices at any time via the "Cookie Preferences" link in the footer.

Category	Purpose	Providers
Strictly necessary	Cart, checkout, login, security, fraud prevention, consent storage	Shopify, Shopify Payments, PayPal, Affirm, our consent management provider
Analytics (consent required)	Understand Site usage and ad-click quality	Google Analytics, ClickCease
Advertising / Marketing (consent required)	Measure ad performance and show you ads on other platforms	Meta (Facebook/Instagram), TikTok, X (Twitter), Google Ads, Pinterest, Quora, Microsoft/Bing

Advertising providers may combine information collected on our Site with information from other websites and use it for their own purposes. Their practices are governed by their own privacy policies: Meta — facebook.com/privacy/policy · TikTok — tiktok.com/legal/privacy-policy · X — x.com/privacy · Google — policies.google.com/privacy · Pinterest — policy.pinterest.com/privacy-policy · Quora — quora.com/about/privacy · ClickCease — clickcease.com/privacy-policy

We also share information with service providers that help us operate: Shopify (store platform), payment processors, shipping carriers, email/SMS providers, customer support tools, and review platforms. These providers may only use the information to perform services for us.

4. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights:

Right to know what personal information we collect, use, disclose, and sell or share.
Right to delete personal information we hold about you, subject to legal exceptions.
Right to correct inaccurate personal information.
Right to opt out of sale or sharing. Advertising cookies and pixels (Section 3) may constitute "sharing" for cross-context behavioral advertising under California law. We do not sell personal information for money. To opt out of sharing, click "Do Not Sell or Share My Personal Information" in the footer, or reject advertising cookies in the banner.
Right to limit use of sensitive personal information. We do not use sensitive personal information for purposes beyond those permitted by law.
Right to non-discrimination for exercising your rights.

Global Privacy Control. We honor GPC and similar opt-out preference signals. If your browser sends a GPC signal, we treat it as a request to opt out of sale/sharing and disable advertising and analytics cookies automatically.

Categories of personal information collected in the last 12 months: identifiers (name, email, IP address, device ID); commercial information (orders, products viewed); internet activity (browsing and interaction data); geolocation (approximate, from IP); payment information. We collect these from you directly, from your device, and from our service providers.

Categories disclosed for a business purpose: all of the above, to service providers listed in Section 3. Categories shared for cross-context behavioral advertising (with consent): identifiers, commercial information, internet activity — with the advertising providers listed in Section 3.

Retention: Order records are kept for 7 years for tax and warranty purposes. Marketing and analytics data are kept no longer than 26 months. Account data is kept until you ask us to delete it.

To exercise your rights: email privacy@giliarto.com (or contact@giliarto.com), call +1 800-442-7170, or use the footer links. We will verify your request using the email or order information on file. You may designate an authorized agent with written permission. We respond within 45 days.

We have not received any requests in the prior calendar year that we were required to report. [Update annually.]

5. Other U.S. State Privacy Rights

Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws may have similar rights to access, correct, delete, and opt out of targeted advertising or sale. Use the methods in Section 4 to exercise them. If we deny a request, you may appeal by replying to our response email.

6. European and UK Visitors

If you are in the EEA, UK, or Switzerland, we process your data on the basis of contract (orders), consent (cookies and marketing), legitimate interests (fraud prevention, Site improvement), and legal obligation. You have rights to access, rectify, erase, restrict, port, and object, and to lodge a complaint with your supervisory authority. Data is transferred to the United States; we rely on Standard Contractual Clauses where required.

7. Do Not Track

We honor Global Privacy Control signals as described in Section 4. Browser "Do Not Track" signals that are not GPC are treated the same way — as an opt-out of advertising and analytics cookies.

8. Security

We use TLS encryption, Shopify's PCI-compliant checkout, and access controls to protect personal information. No system is perfectly secure; contact us immediately if you suspect unauthorized access to your account.

9. Children

The Site is not intended for anyone under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us information, contact us and we will delete it.