Privacy Policy

1. Introduction

JMorris Studio is the trade name of Goodcarat LLC. In this Privacy Policy, “JMorris Studio,” “we,” “our,” and “us” refer to Goodcarat LLC.

Goodcarat LLC, doing business as “JMorris Studio” (“JMorris Studio,” “we,” “our,” or “us”) respects your privacy. This Privacy Policy describes how we collect, use, share, and protect personal information when you visit jmorrisstudio.com or purchase our products (collectively, the “Site”).

By using the Site, you agree to the practices described in this Policy. If you do not agree, please do not use the Site. This Policy is incorporated into our Terms of Service.

2. Information We Collect

2.1 Information You Provide

When you create an account, place an order, or contact us, you may provide:

• Identifiers: name, email address, billing and shipping addresses, phone number;
• Account credentials: username and a hashed password (we never store your password in plain text);
• Order information: items ordered, customizations (metal, size, diamond selection), gift messages;
• Payment information: processed by Stripe. JMorris Studio does not store full credit card numbers on our servers;
• Communication records: emails, chat messages, and customer service inquiries you send to us.

2.2 Information Collected Automatically

When you visit the Site, we automatically collect:

• Device and browser information: IP address, browser type and version, operating system, device identifiers;
• Usage information: pages viewed, products saved, filters applied, time spent on the Site, referring URL;
• Approximate location: derived from your IP address (city / region level, not precise geolocation).

2.3 Categories of Personal Information (CCPA)

For California residents, the categories of personal information we collect, as defined under the California Consumer Privacy Act (CCPA), include: identifiers, commercial information (purchase history), internet or other electronic network activity, and inferences drawn from the above (e.g., product recommendations). We do not collect biometric information, sensitive personal information, or information about union membership, health, or other protected categories.

3. How We Use Your Information

We use your personal information to:

• Process orders, including payment, fulfillment, and shipping;
• Communicate with you about your orders, account, and customer service inquiries;
• Personalize your experience (remembering saved items, showing relevant recommendations);
• Prevent fraud, enforce our Terms, and comply with legal obligations;
• Improve the Site through analysis of aggregated usage patterns;
• Send transactional emails (order confirmations, shipping notifications) and, with your consent, marketing emails. You may unsubscribe from marketing emails at any time.

4. Third-Party Service Providers

We share personal information with the following service providers to operate our business. Each receives only the information it needs to perform its role and is contractually required to safeguard it.

We do not sell your personal information to third parties for their own marketing purposes.

5. Cookies & Similar Technologies

We use cookies and similar technologies (local storage, session storage) to:

• Keep you signed in to your account across visits;
• Remember your cart contents and saved items (portfolio);
• Secure checkout and session integrity;
• Measure Site performance and detect errors.

You can control cookies through your browser settings. Disabling cookies may limit functionality, including your ability to sign in or complete a purchase.

6. Analytics & Marketing

We may use analytics providers to understand how visitors use the Site. These providers receive information about your visit (pages viewed, device, approximate location) but not your name, email, or payment information.

If we add analytics or marketing tools (such as PostHog, Google Analytics, or an email marketing platform), we will update this Policy to list them and describe the information they receive. This section will be updated before any such provider is activated on the Site.

7. Your Rights

Depending on where you live, you may have rights to:

• Access: request a copy of the personal information we hold about you;
• Correct: ask us to correct inaccurate or incomplete information;
• Delete: ask us to delete your information, subject to legal and legitimate business exceptions (e.g., records of completed transactions required for tax compliance);
• Opt-out: opt out of marketing communications at any time using the unsubscribe link in any marketing email;
• Non-discrimination: we will not deny service, charge different prices, or provide a different level of service because you exercised a privacy right.

To exercise any of these rights, email us at info@jmorrisstudio.com. We will respond within 45 days (or sooner where required by law) and may request information to verify your identity before fulfilling your request.

8. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (“CCPA”), including the right to:

• Know what personal information we have collected about you;
• Request deletion of your personal information;
• Opt-out of the sale or sharing of personal information;
• Limit the use of sensitive personal information (we do not collect sensitive personal information as defined by the CCPA);
• Not be discriminated against for exercising your privacy rights.

To exercise your CCPA rights, contact us at info@jmorrisstudio.com. You may also authorize an agent to make a request on your behalf; we will require written proof of authorization.

9. Children’s Privacy

The Site is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If you are a parent or guardian and believe your child has provided personal information to us, please contact us and we will delete the information.

10. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect personal information, including:

• TLS/HTTPS encryption for all data transmitted between your browser and the Site;
• Encryption at rest for data stored in our databases;
• PCI-compliant payment handling via Stripe — we never store full card numbers;
• Access controls limiting employee and contractor access to personal information on a need-to-know basis;
• Regular security audits and monitoring.

No system is completely secure. While we take significant precautions, we cannot guarantee absolute security. If we become aware of a breach that affects your personal information, we will notify you as required by law.

11. Data Retention

We retain personal information for as long as needed to provide our services, comply with legal obligations (including tax, accounting, and consumer-protection requirements), resolve disputes, and enforce our agreements. Transaction records associated with completed purchases are retained for a minimum of seven (7) years to comply with federal and state tax requirements.

When personal information is no longer required, we securely delete or anonymize it.

12. International Users

The Site is operated from the United States and is intended for U.S. customers. We do not currently ship internationally. If you access the Site from outside the United States, you understand and agree that your information will be transferred to, stored, and processed in the United States, which may have different privacy laws than your country of residence.

13. Changes to This Policy

We may update this Policy from time to time. The “Effective” date at the top indicates the date of the most recent revision. Material changes will be communicated via email to registered users or through a prominent notice on the Site at least thirty (30) days before they take effect. Your continued use of the Site after a change takes effect constitutes your acceptance of the updated Policy.

14. Contact