Privacy Policy

1. Status, scope and who is responsible.

This Privacy Policy explains how JACROS Paris, a jewelry brand owned and operated by Keystone Kustoms (“we,” “us” or “our”), handles personal information through this site, Stripe checkout and customer care. “Personal information” means information linked or reasonably linkable to an individual under applicable law.

Secure checkout accepts direct payments. Customer support requests and validated order records are stored privately on the Keystone Kustoms server. Shipping labels are manually reviewed before purchase.

2. What the current site does.

The site has no newsletter, analytics or advertising trackers. Checkout sends selected color, starting length and quantity to Stripe. Stripe processes the name, contact, payment and shipping details entered in checkout; payment credentials remain with Stripe. The shipping address and server-owned parcel measurements are sent to EasyPost to request the least expensive eligible USPS Ground Advantage quote. Labels are not purchased automatically.

The support form collects the name, email, optional order number, product, subject and message submitted by a customer. It creates a private ticket link and stores the conversation outside the public website directory.

Small records saved in this browser

Browser storage remembers the saved bag and privacy choice between visits. These records remain on this device, do not create an account, and can be removed through browser clear-site-data controls.

Standard hosting requests

Loading the site sends Hostinger information such as IP address, requested URL, date and time, browser or device information and error or security events. Hostinger handles those records under its applicable privacy and retention practices. The storefront uses locally hosted brand, product, image, video, style and script assets; it does not request a third-party webfont.

3. Information processed for direct orders.

The current storefront and connected providers process only the categories needed to accept, ship, support and protect a direct order:

Sources

Information comes from the customer, the browser or device, and the payment, fraud-prevention, shipping, hosting and support services used to complete the requested transaction. The site does not buy data-broker lists or run advertising trackers.

Sensitive information

Do not submit passwords, government identifiers, health information or full payment-card numbers through customer care. Accessibility requests may incidentally reveal disability information; provide only what is needed to request assistance.

4. Why information is used.

Subject to applicable law, personal information is used to:

• operate the storefront, remember requested choices and provide checkout;
• process, verify, fulfill, deliver, track, cancel, return and refund orders;
• authenticate requests, prevent fraud, enforce purchase limits and secure the service;
• answer product, order, privacy and accessibility inquiries;
• maintain records for accounting, tax, legal, dispute and compliance obligations;
• debug, measure and improve performance and accessibility using proportionate data;
• send transactional messages and, only with the required permission, marketing;
• personalize or advertise only when the necessary notice, consent and opt-out controls exist; and
• protect rights and safety or comply with lawful process.

We will not use information for a materially incompatible new purpose without the notice or permission required by law. We collect only what is reasonably necessary for each disclosed purpose.

Marketing email

A newsletter remains disabled until an approved provider, sender identity, physical postal address and unsubscribe process are configured. Commercial email must accurately identify the sender, avoid deceptive headers or subjects, include required disclosures, and honor opt-out requests. Transactional messages should remain limited to the order or relationship purpose.

5. When information may be disclosed.

Checkout uses Stripe for payment processing and fraud controls, and EasyPost for shipping-rate lookup and shipment records. Service providers may also perform hosting, fulfillment, carrier delivery, customer care, security, professional advice and recordkeeping. Each provider should receive only information reasonably needed for its role and be bound by appropriate contractual, confidentiality and security duties.

Information may also be disclosed in a business transfer; to comply with valid legal process; or when reasonably necessary to detect fraud, enforce terms, protect rights or prevent harm. A successor must handle the information consistently with applicable law and the notice provided.

Sale, sharing and targeted advertising

The site does not enable analytics or advertising and does not sell or share personal information for cross-context behavioral advertising. If the tools used by the site change that statement, this policy will be updated and any required “Do Not Sell or Share,” targeted-advertising opt-out and Global Privacy Control mechanism will be provided before activation.

Public content

No public review-submission feature is currently enabled. If one is added, explain which profile details, review text and photos become public before submission. Never publish an order number, full name, address or private support communication as a review.

6. Retention and security.

Retention

The saved bag and privacy-choice records remain in this browser until the visitor clears site data or the site replaces them. Order and support records are retained only as reasonably needed to fulfill an order, maintain tax and accounting records, handle returns and disputes, prevent fraud, secure the service and satisfy applicable law. Records are deleted or de-identified when those purposes no longer require them.

Security

We use reasonable administrative, technical and physical safeguards appropriate to the information and risk. Current controls include HTTPS, least-privilege administrative access, secure sessions, private server-side storage, provider signature verification, rate limiting and tested backups. No method is perfectly secure, and safeguards are reviewed as the service changes. Full payment-card details are handled by Stripe rather than stored by this storefront.

7. Your choices and privacy rights.

Browser controls

Use “Cookie settings” in the footer to revisit the site choice. The browser's clear-site-data control removes the saved bag and privacy choice from this device. If the browser sends a supported Global Privacy Control signal—an automatic privacy preference recognized in some places—the current tool keeps optional tools off. No optional tracking provider is active.

Marketing choices

If marketing is enabled, each commercial email must provide a working unsubscribe method. Opting out of marketing does not stop essential order, security or legal notices.

Privacy requests based on location

Depending on where a customer lives and which laws apply, rights may include access, confirmation, correction, deletion, portability, restriction, objection, withdrawal of consent, and opt-out of certain uses.

Submit a privacy request through Contact Support. We may verify identity using information proportionate to the request and may deny or limit a request only for a lawful reason, with any required explanation.

California and other U.S. state notices

If a comprehensive state privacy law applies, provide the required notice at collection and disclosures for the preceding reporting period, including categories collected, sources, purposes, retention, service-provider or third-party disclosures, and sale/sharing status. Do not label the business as covered by a particular statute until eligibility and thresholds are assessed. Honor browser-based opt-out signals where required.

Children

The storefront is not directed to children under 13, and we do not knowingly collect personal information from them. If we learn that such information was collected without legally valid authorization, we will take appropriate steps to delete it. Products and marketing must not be structured to evade laws protecting minors.

International visitors

Opening sales to another country may require a lawful basis, additional notices, data-transfer safeguards, local representatives or regulator rights. Do not target a new market until those requirements and provider data locations are assessed.

8. Changes and contact.

We may update this policy to reflect actual practices, providers or law. The “Last reviewed” date will change, and material changes will be communicated as required by law. We will not retroactively expand use in a way that requires consent without obtaining it.

Customer-facing seller: Keystone Kustoms
Brand: JACROS Paris
Privacy and support requests: secure Contact Support ticket