Privacy policy
Effective date: September 20, 2026
Who we are and how to contact us
Breathe Autumn Rain Jewelry ("we," "us," "our") sells handmade jewelry at breatheautumnrain.com (the "Site"). This policy explains what personal information we collect when you visit the Site, buy from us, or contact us, how we use and share it, and the choices you have. By using the Site you agree to this policy.
You can reach us at:
Breathe Autumn Rain Jewelry
15642 Sand Canyon Ave, Unit 54841
Irvine, CA 92619-5467
support@breatheautumnrain.com
Information we collect
Information you give us. When you place an order, create an account, sign up for our emails, write a review, or contact us, we collect your name, email address, shipping and billing addresses, phone number, order details, and the content of any message you send us. Payments are handled by Shopify and our payment partners. We do not see or store your full card number.
Information collected automatically. When you visit the Site, we and our service providers collect your IP address, browser and device type, the pages you view, the page that referred you, the date and time of your visit, and an approximate location based on your IP address. We collect this through cookies and similar technologies, and, for some visitors, through session recording (see "Cookies, analytics and session recording" below).
Information from other sources. Shopify and Shop Pay may share order and fraud-screening information with us. If you pay with Afterpay, Afterpay tells us whether your payment was approved. Advertising platforms tell us in aggregate how our ads perform.
Sensitive information. We do not ask for government IDs, health information, or precise location, and please do not send them to us.
How we use and share information
We use personal information to process and ship your order, take payment and prevent fraud, answer your questions, send order updates, send marketing emails if you signed up, understand how the Site is used and fix problems, measure and improve our advertising, and meet legal obligations such as tax and accounting rules.
We share information with the service providers below, who process it for us or, in the case of advertising tools, for their own measurement purposes. We also share information when the law requires it, to protect our rights or prevent fraud, and if the business is sold or transferred.
We do not sell your personal information for money. Some advertising and analytics tools can count as "sharing" or "selling" under certain state laws because they receive cookie identifiers and browsing activity. See "Your choices and privacy rights" for how to opt out.
| Service provider | What it does for us | Information it receives |
|---|---|---|
| Shopify (including Shop Pay and Shopify Payments) | Runs the Site, checkout, payments, and fraud screening | Contact, order, payment, and device information |
| Afterpay | Optional buy-now-pay-later payments | Contact, order, and payment information |
| Shipping carriers (such as USPS and UPS) | Deliver your order | Name, address, phone, email |
| Klaviyo | Email marketing and order or cart reminder emails | Email, name, browsing and purchase activity |
| Mailchimp | Email marketing | Email and name |
| Google Analytics, Tag Manager, Merchant Center | Site analytics and product listings | Cookie identifiers, IP address, pages viewed |
| Meta and Pinterest | Ad measurement and retargeting | Cookie identifiers, pages viewed, purchases |
| FullStory | Session recording to fix problems and improve the Site | Interaction data (see below) |
| Accessibly | Accessibility tools for the Site | Browser and device information |
| Instafeed and Instagram | Shows our Instagram posts on the Site | IP address and device information when the feed loads |
| Hextom | Announcement and promotional bars | Page and cart information needed to show messages |
| Klaviyo Reviews | Collects and displays product reviews | Name, email, and review content |
Cookies, analytics and session recording
Cookies. Cookies are small files a website stores in your browser. We use them to keep your cart and checkout working, remember your currency and region, and recognize you when you return (Shopify sets these). We also use them for analytics and advertising, described below. Most browsers let you block or delete cookies, though the cart and checkout may not work without the essential ones.
Analytics. We use Google Analytics to see how visitors find and use the Site, such as which pages are popular and which countries visitors come from.
Advertising. Pinterest and Meta place cookies or pixels that let us measure whether ads led to a purchase and show our products to people who visited the Site. These tools may combine what they learn from our Site with other information they hold about you.
Session recording. We use FullStory, a service provided by FullStory, Inc., to understand how visitors use the Site and to find and fix problems, such as a button that does not work. FullStory records how you interact with our pages, including mouse movements, clicks, taps, scrolling, and the pages you visit, and plays it back to us as a replay of your visit. Our checkout is hosted by Shopify, and FullStory does not run there. We do not use FullStory to identify you by name or email, and we do not link a recording to your order or account. FullStory processes this data on our behalf and only for the purposes described here.
Do Not Track. We do not change how the Site works in response to "Do Not Track" browser signals, because there is no common standard for them.
Your choices and privacy rights
Cookies and advertising. Where our cookie banner is shown, you can accept or decline non-essential cookies. You can also block or delete cookies in your browser settings, and browser extensions that block trackers will limit our analytics and advertising tools.
Emails. Every marketing email has an unsubscribe link. You can also email us and we will remove you.
Your rights. Depending on where you live, including California and many other U.S. states, you may have the right to know what personal information we hold about you, get a copy of it, correct it, delete it, and opt out of the sale or sharing of your information and of targeted advertising. We will honor these requests from any U.S. resident, wherever you live. We will not treat you differently for using any of these rights.
How to make a request. Email support@breatheautumnrain.com with the subject "Privacy request" and tell us what you would like us to do. We will confirm your identity by matching details to your order or account, and respond within 45 days. If you would like someone to make the request for you, they should send us your written permission. If we deny a request, you can appeal by replying to our response, and we will review it within 45 days.
California "Shine the Light." We do not share your personal information with third parties for their own direct marketing purposes. The advertising cookies and pixels described above are a separate matter, and you can opt out of them as explained in this section.
Email marketing, retention, security, children, and international visitors
Email marketing. We send marketing emails only to people who signed up or bought from us and left the sign-up box checked, and we send them through Klaviyo. We do not currently send text messages. Order and shipping emails are not marketing and you will receive them even if you unsubscribe.
How long we keep information. We keep order records for as long as tax and accounting rules require, generally up to seven years. We keep your email on our mailing list until you unsubscribe. Analytics and recording data are kept by our providers for the periods in their settings, which we keep short. We delete or anonymize other information when we no longer need it.
Security. We use reasonable safeguards, and payment card data is handled by PCI-compliant processors, not by us. No website or system is completely secure, so we cannot guarantee absolute security.
Children. The Site is not directed at children under 16, and we do not knowingly collect their personal information. If you believe a child has given us information, email us and we will delete it.
International visitors. We are based in the United States and the Site is operated from here, so your information is processed in the United States and by our providers in other countries. If you are in the European Economic Area, the United Kingdom, or Canada, we process your information to fulfill your orders (contract), to run and improve the Site and prevent fraud (legitimate interests), to send marketing (your consent), and to meet legal obligations. You may also have the right to object to or restrict processing, to withdraw consent at any time, and to complain to your local data protection authority. When your information is transferred outside the EEA or the UK, we rely on our providers' safeguards, such as the EU-US Data Privacy Framework or standard contractual clauses. We do not make decisions with legal effect based solely on automated processing, apart from Shopify's automated fraud screening of orders. In the UK, the data protection authority is the Information Commissioner's Office. Contact us at the address above to exercise these rights.
Changes to this policy. We may update this policy from time to time. When we do, we will change the effective date at the top. Material changes will be announced on the Site.