Privacy Policy

01

Who we are and what this covers

Brynlo (“we”, “us”) operates brynlo.shop and sells jewelry directly to customers in the United States. This policy explains what personal information we collect, why we collect it, how long we keep it, and the choices you have.

Our registered studio address is 1500 Market Street, Suite 3500, Philadelphia, PA 19102. For privacy questions, write to privacy@brynlo.shop.

02

Information we collect

Categories of personal information
Category	Examples	Source
Identity	Name, billing and shipping address	You, at checkout
Contact	Email address, phone number	You, at checkout or newsletter sign-up
Transaction	Items ordered, amounts, refunds, order history	Your order activity
Payment	Card brand and last four digits, not the full number	Our payment processor
Technical	IP address, browser type, device type, pages viewed	Collected automatically
Communications	Emails, chat and support messages	You, when you contact us

We never store full card numbers. Payment details are handled by our PCI-compliant payment processor and are not retained on our servers.

03

How we use it

To process, pack and deliver your order, and to send transactional emails about it.
To handle returns, exchanges, warranty claims and customer-service enquiries.
To detect and prevent fraud, abuse and unauthorised transactions.
To improve our catalogue, site performance and product selection using aggregated analytics.
To send marketing emails, only where you have opted in; every email includes an unsubscribe link.
To meet legal, tax and accounting obligations.

04

Cookies and similar technologies

Cookie categories we use
Category	Purpose	Can you opt out?
Strictly necessary	Cart contents, checkout, security	No — the store cannot work without them
Preferences	Currency, recently viewed pieces	Yes, via browser settings
Analytics	Aggregated traffic and page performance	Yes, via browser settings or opt-out
Marketing	Measuring campaigns where enabled	Yes — opt out of personalised ads

You can clear or block cookies in your browser at any time. Blocking necessary cookies will prevent checkout from working.

05

Who we share information with

We share only what is needed to run the store, and only with processors bound by contract to protect it:

Payment processing — to authorise and settle payments.
Shipping carriers — name, address and order contents, to deliver parcels.
Email and support platforms — to send receipts and answer enquiries.
Analytics and advertising partners — aggregated or pseudonymised data only.
Professional advisers and authorities — where required by law or to protect our rights.

We do not sell personal information for money. We do not share your details with unrelated third parties for their own marketing.

06

How long we keep it

Order records are kept for seven years to satisfy tax and accounting rules. Marketing contact details are kept until you unsubscribe, plus a short suppression record afterwards. Support emails are kept for two years. Analytics data is retained in aggregate for up to 26 months. When data is no longer needed, it is deleted or anonymised.

07

Your privacy rights

Depending on your state of residence, you may have the right to:

Know what personal information we hold about you and request a copy.
Correct inaccurate information.
Delete your personal information, subject to legal retention duties.
Opt out of the sale or sharing of personal information for targeted advertising.
Not be discriminated against for exercising any of these rights.

To make a request, email privacy@brynlo.shop with the subject line “Privacy request”. We will verify your identity using your order email and respond within 45 days. You may use an authorised agent with written permission.

08

Security

The site runs over TLS, payment data is tokenised by our processor, and access to customer records is limited to staff who need it. No system is completely secure; if we become aware of a breach affecting your information we will notify you and the relevant authorities as required by law.

09

Children

Our store is intended for people aged 16 and over. We do not knowingly collect personal information from children under 13. If you believe a child has provided information, contact us and we will delete it.

10

Changes to this policy

We may update this policy to reflect changes in our practices or the law. The revision date at the top of the page always shows the current version. Material changes will be announced on the site or by email where appropriate.