Storefront Privacy Policy

1. Introduction

Affordable Jewelery and Precious Metals (“we,” “us,” or “our”) operates an online storefront on the baseSite marketplace platform (the “Storefront”). This Privacy Policy explains how we collect, use, disclose, and otherwise process Personal Information about our customers and prospective customers (“you”) in connection with the Storefront.

“Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household.

The Storefront operates on the baseSite platform, which is provided by Boston Systems Consulting LLC (“baseSite”). This Privacy Policy applies to Personal Information we process as the operator of the Storefront. baseSite processes certain Personal Information as our service provider under our agreement with baseSite. Personal Information that baseSite collects at the platform level for its own purposes is governed by baseSite’s platform privacy policy. See Section 11 for more detail.

2. Scope and Application

This Privacy Policy applies to Personal Information we process in connection with your interactions with the Storefront, including when you browse the Storefront, place orders, contact us, subscribe to our communications, or otherwise engage with us as a customer.

This Privacy Policy does not apply to: (a) information baseSite collects at the platform level for its own purposes; (b) information collected by other Merchants operating storefronts on baseSite; or (c) information collected by payment processors, shipping carriers, and other third parties as described in this Privacy Policy.

The Storefront is offered in and directed to users in the United States only. We do not knowingly offer or direct the Storefront to individuals outside the United States. We do not market the Storefront to children.

3. Information We Collect

We collect Personal Information in three principal ways: (a) information you provide directly to us; (b) information we collect automatically when you use the Storefront; and (c) information we receive from third parties.

3.1 Information You Provide Directly

Account and Contact Information

When you create an account with baseSite or place an order through the Storefront, we receive identifiers and contact information such as your name, email address, telephone number, and shipping address.

Transaction and Order Information

When you place an order through the Storefront, we collect information about the transaction, including the products purchased, quantity, price, order date and time, order status, refunds, returns, delivery preferences, and any messages or notes associated with the order. We do not collect, receive, or store bank account numbers, routing numbers, card numbers, or other payment account credentials. See Section 6 below regarding payment processing.

Communications and Customer Service

When you contact us — for example, by email, through the Storefront messaging feature, or through customer service channels — we collect the content of your communication and any information you provide in connection with it.

Reviews and User-Generated Content

If you post reviews, ratings, photographs, questions and answers, or similar content in connection with the Storefront, we collect that content together with the metadata necessary to display and attribute it.

Marketing and Subscription Information

If you subscribe to our newsletter, promotions, or other communications, we collect the contact information and preferences you provide.

3.2 Information Collected Automatically

When you access or use the Storefront, we and baseSite (as our platform provider) automatically collect certain information about your device and your interactions with the Storefront, including:

• Device and connection information such as internet protocol (IP) address, device identifiers, device type, operating system, browser type and version, language preferences, time zone, and approximate location derived from IP address.
• Usage information such as pages and products viewed, items added to cart, search queries entered, links clicked, session duration, referring and exit pages, and dates and times of access.
• Cookies and similar technologies. The Storefront may use cookies, software development kits, pixels, beacons, local storage, and similar technologies. See Section 8.

3.3 Information From Third Parties

We receive Personal Information about you from third parties, including:

• baseSite. baseSite provides us with information collected through the platform in connection with your interactions with the Storefront, including order and transaction information, communications routed through the platform, and analytics.
• Payment processors. We receive limited payment-related information from Plaid, Dwolla, and Stripe as described in Section 6.
• Shipping carriers. We receive tracking, delivery status, and exception information from shipping carriers in connection with orders. See Section 7.
• Marketing and analytics partners. We may receive information from marketing, analytics, and advertising partners about how you interact with our marketing and with the Storefront.

4. How We Use Personal Information

We use the Personal Information described above for the following purposes:

• Fulfilling orders and providing products - processing your orders, arranging shipment, delivering products, handling returns and refunds, and providing related customer service.
• Customer service and communications - responding to your inquiries, communicating with you about your orders and account, and providing customer support.
• Marketing and promotions - sending you promotional emails, newsletters, and marketing communications about our products (subject to your preferences and applicable law).
• Personalization - customizing your experience with the Storefront and providing product recommendations that may interest you.
• Analytics and business improvement - understanding how customers interact with the Storefront, measuring the performance of our products and marketing, and improving our business.
• Fraud prevention and Storefront integrity - detecting, investigating, and preventing fraud, unauthorized transactions, and abuse.
• Legal, regulatory, and compliance purposes - complying with applicable laws and regulations (including tax reporting), responding to lawful requests from public authorities, and establishing, exercising, or defending legal claims.
• Corporate transactions - evaluating and conducting mergers, acquisitions, financings, reorganizations, asset sales, or similar transactions.
• With your consent or at your direction, for purposes described to you at the point of collection or otherwise disclosed to you.

We may de-identify or aggregate Personal Information so that it no longer reasonably identifies you and use such de-identified or aggregated information for any lawful purpose.

5. How We Share Personal Information

We share Personal Information in the following circumstances:

5.1 With baseSite

baseSite provides the platform infrastructure on which the Storefront operates and processes certain Personal Information on our behalf as our service provider. baseSite is contractually restricted from using Personal Information collected through the Storefront for its own purposes, except as permitted for specified business purposes such as security, fraud prevention, and analytics for the baseSite platform. baseSite’s handling of Personal Information collected at the platform level for its own purposes is governed by baseSite’s own privacy policy.

5.2 With Payment Processors

Payments made through the Storefront are processed by Plaid, Dwolla, and Stripe as described in Section 6. Personal Information necessary to process payments is provided to these payment processors directly, and their processing is governed by their respective privacy policies.

5.3 With Shipping Carriers

We share shipping information with shipping carriers and shipping management providers to fulfill and track orders. See Section 7.

5.4 With Other Service Providers

We share Personal Information with service providers that perform services on our behalf, subject to contractual restrictions consistent with applicable privacy law. These service providers include:

• Email, SMS, and marketing communications platforms.
• Analytics, attribution, and business intelligence providers.
• Customer service and support platforms.
• Tax compliance, accounting, and financial reporting providers.
• Professional advisors, including lawyers, accountants, and consultants.
• Advertising and audience measurement providers (subject to your choices described in Section 12).

5.5 For Legal, Compliance, and Safety Reasons

We share Personal Information when we believe in good faith that disclosure is necessary to: (a) comply with applicable law, regulation, legal process, or governmental request; (b) enforce our terms and policies; (c) detect, prevent, or otherwise address fraud, security, or technical issues; or (d) protect against harm to the rights, property, or safety of us, our customers, or the public.

5.6 Corporate Transactions and Business Transfers

We may transfer Personal Information as an asset in connection with a merger, acquisition, financing, reorganization, bankruptcy, receivership, assignment for the benefit of creditors, sale of assets or business lines, dissolution, wind-down, or similar transaction, including transactions in which Personal Information is transferred as a standalone asset. In connection with any such transaction, we will require the transferee to either (a) use the Personal Information consistent with the material commitments made in the version of this Privacy Policy in effect at the time the Personal Information was collected, or (b) provide affected individuals with prior notice of any materially different use and, where required by applicable law, an opportunity to opt out.

5.7 With Your Consent or at Your Direction

We share Personal Information with third parties when you ask us to or otherwise consent to such sharing.

5.8 Aggregated or De-Identified Information

We may share aggregated or de-identified information that cannot reasonably be used to identify you for any lawful purpose.

6. Payment Processing

Payments made through the Storefront are handled by third parties: Plaid Inc. (“Plaid”), Dwolla, Inc. (“Dwolla”), and Stripe, Inc. (“Stripe”). When you link a bank account or provide payment card information through the Storefront, you interact with these third parties directly through embedded or referred experiences, and the bank account credentials, account numbers, routing numbers, card numbers, and similar payment account data you provide are transmitted directly to and stored by these third parties. We do not receive or store your bank account credentials, account numbers, routing numbers, card numbers, or similar payment account data.

6.1 Plaid

Plaid is used to enable you to securely link your bank account and to verify account ownership. When you connect a bank account through Plaid, you provide your banking credentials directly to Plaid through the Plaid Link interface. Plaid’s collection, use, and disclosure of your Personal Information is governed by Plaid’s privacy policy, available at https://plaid.com/legal/.

6.2 Dwolla

Dwolla is used to initiate and settle ACH and other bank-to-bank transfers. Dwolla is the money transmitter for these transactions. Dwolla’s collection, use, and disclosure of your Personal Information is governed by Dwolla’s Terms of Service and Privacy Policy, available at https://www.dwolla.com/legal/.

6.3 Stripe

Stripe is used to process credit card, debit card, and other card-based payments. When you provide payment card information, you provide it directly to Stripe through Stripe’s embedded payment interface. Stripe’s collection, use, and disclosure of your Personal Information is governed by Stripe’s privacy policy, available at https://stripe.com/privacy.

6.4 What We Receive

From Plaid, Dwolla, and Stripe, we receive limited information necessary to fulfill orders and provide customer service, such as a tokenized funding source or payment method identifier, status of transfers (e.g., pending, completed, returned, failed), transaction confirmations and reference numbers, and exception or return reason codes. We do not receive or store bank account numbers, routing numbers, online banking credentials, or card numbers.

7. Shipping and Fulfillment

To ship products purchased through the Storefront, we share shipping information with shipping carriers and label generation and shipping management providers. We use shipping information to generate labels, provide tracking information, address delivery issues, and meet our obligations under applicable law.

Shipping carriers may collect additional information directly from you in connection with delivery (for example, electronic signature for delivery confirmation), and that information is governed by the carrier’s own privacy policy.

8. Cookies and Similar Technologies

The Storefront uses cookies, software development kits, pixels, beacons, local storage, session replay tools, and similar technologies (collectively, “Cookies”). Cookies are used for the following purposes:

• Strictly necessary. To operate the Storefront, authenticate customers, maintain sessions, support security, and remember your selections.
• Functional. To remember preferences and settings.
• Analytics. To understand how the Storefront is used, measure performance, and improve features.
• Advertising and personalization. To deliver and measure advertising, including advertising you may see on other websites and platforms, and to personalize content.

Most browsers allow you to manage cookie settings, and mobile operating systems allow you to manage advertising identifiers. You may also use industry opt-out tools provided by the Digital Advertising Alliance (optout.aboutads.info) and the Network Advertising Initiative (optout.networkadvertising.org). Disabling certain Cookies may affect the functionality of the Storefront.

We honor the Global Privacy Control (“GPC”) browser signal as an opt-out of “sale” or “sharing” of Personal Information under applicable state privacy laws.

9. Data Retention

We retain Personal Information for as long as necessary to fulfill the purposes for which it was collected, including to provide products and customer service, comply with our legal, tax, accounting, and reporting obligations, resolve disputes, enforce our agreements, and protect our and others’ rights. Retention periods depend on the nature of the Personal Information, the purposes of processing, applicable legal requirements, and whether we can achieve our purposes through other means.

10. Security

We rely on baseSite’s platform security controls and maintain our own administrative, technical, and physical safeguards designed to protect Personal Information against unauthorized access, use, alteration, and disclosure. No method of transmission or storage is completely secure, however, and we cannot guarantee the absolute security of Personal Information. You are responsible for maintaining the security of any account credentials you use to access the Storefront.

11. Our Platform Provider - baseSite

The Storefront operates on the baseSite platform. We are responsible for the Personal Information we collect and process in connection with the operation of the Storefront, and we are the controller of that Personal Information under applicable privacy laws.

baseSite’s role is as follows:

• Service provider to us. baseSite processes certain Personal Information on our behalf as our service provider under our agreement with baseSite, subject to contractual restrictions on baseSite’s use of that Personal Information.
• Independent operator of the platform. baseSite also collects Personal Information at the platform level for its own purposes, such as account creation, sitewide analytics, security, and fraud prevention. baseSite’s processing of Personal Information for its own purposes is governed by baseSite’s platform privacy policy.

If you have questions about baseSite’s practices, or if you wish to exercise privacy rights with respect to baseSite’s processing at the platform level, please contact baseSite directly using the information in baseSite’s privacy policy.

12. Your Privacy Rights and Choices

12.1 General Choices

You can manage your account preferences and unsubscribe from marketing communications by clicking the “unsubscribe” link in any marketing email, adjusting your account preferences, or contacting us as described in Section 18. Even if you opt out of marketing communications, we will continue to send you transactional and service-related communications.

12.2 State Privacy Rights

Depending on the state in which you reside and other factors, you may have rights under state privacy laws with respect to your Personal Information. The availability of the following rights and the procedures for exercising them depend on applicable law, and certain exceptions and limitations apply.

• Right to know whether we process your Personal Information.
• Right to access and obtain a copy of your Personal Information in a portable format.
• Right to correct inaccurate Personal Information.
• Right to delete Personal Information we have collected about you.
• Right to opt out of sale or sharing of your Personal Information for cross-context behavioral advertising.
• Right to limit use of sensitive Personal Information.
• Right to opt out of profiling in certain circumstances.
• Right to non-discrimination for exercising your privacy rights.
• Right to appeal a denial of a privacy rights request.

12.3 Sale and Sharing of Personal Information

Certain state privacy laws define “sale” and “sharing” of Personal Information broadly. Some of our common advertising and analytics activities, including the use of Cookies that share device or usage information with advertising partners, may constitute a sale or sharing under those laws.

You may opt out of sale or sharing by: (a) using the GPC browser signal or (b) contacting us as described in Section 18. We do not sell or share the Personal Information of consumers we actually know to be under 16 years of age.

12.4 Sensitive Personal Information

We do not collect Sensitive Personal Information as defined under applicable state privacy laws in the ordinary course of operating the Storefront.

12.5 California-Specific Disclosures

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), provides you with the rights described above and requires us to make additional disclosures. The following table identifies the categories of Personal Information we intend to collect, disclose for a business purpose, sell, or share (each as defined under the CCPA). As of the effective date of this policy, no data has been sold or shared in the preceding 12 months.

Note: We do not collect or store bank account numbers, routing numbers, or card numbers. See Section 6.

We have not sold or shared Personal Information of California residents in the preceding 12 months. We do not sell or share the Personal Information of California residents we actually know to be under 16 years of age.

Sources of Personal Information. We collect Personal Information from the categories of sources described in Section 3.

Business and commercial purposes. We collect, use, disclose, and (where applicable) share Personal Information for the business and commercial purposes described in Sections 4 and 5.

Retention. We retain Personal Information for the periods and according to the criteria described in Section 9.

12.6 Disclosures Under Other State Privacy Laws

Residents of certain other states have privacy rights that are substantially similar to those described above, subject to the requirements and limitations of the applicable state law. We process Personal Information of residents of these states consistent with applicable law and respond to verifiable consumer rights requests as described in Section 12.8.

12.7 Nevada-Specific Disclosure

Under Nevada law, certain Nevada residents may opt out of the sale of certain Personal Information about them. We do not currently sell Personal Information about Nevada residents as “sale” is defined under Nevada law. Nevada residents may direct any requests or questions to us as described in Section 18.

12.8 How to Exercise Your Rights

You may submit a privacy rights request by contacting us as described in Section 18.

Verification. To protect your Personal Information, we will take reasonable steps to verify your identity before responding to a substantive privacy rights request. Verification may require you to provide additional information that we can match against information we already maintain about you.

Authorized agents. You may use an authorized agent to submit a request on your behalf. We will require the agent to demonstrate authorization and may require you to verify your identity directly with us.

Appeals. If we deny your privacy rights request, you may appeal that decision by contacting us as described in Section 18 within a reasonable time of our denial. We will respond to your appeal within the time period required by applicable law.

13. Automated Decision-Making and Profiling

We do not use solely automated processing to make decisions that produce legal or similarly significant effects concerning you. baseSite uses automated processes for certain platform functions, including fraud detection and personalization, as described in baseSite’s privacy policy. Where required by applicable law, you may have the right to opt out of, or to seek human review of, automated decisions; please contact us as described in Section 18.

14. Marketing and Communications

We may send you marketing emails about our products and promotions. You may opt out of marketing emails by clicking the “unsubscribe” link in any such email or by adjusting your account preferences. If you have provided us with a telephone number, we may send you SMS messages with your consent, and you may opt out by replying “STOP” or as otherwise instructed in the message. Standard messaging and data rates may apply. We may continue to send you transactional and service-related communications regardless of your marketing preferences.

15. Third-Party Websites and Services

The Storefront may contain links to third-party websites, products, or services, including the websites of baseSite, payment processors, shipping carriers, and other service providers. We are not responsible for the privacy practices of those third parties, and the information they collect is governed by their own privacy policies.

16. Children

The Storefront is not directed to children, and we do not knowingly collect Personal Information from children under the age of 16. If you believe that a child has provided us with Personal Information, please contact us as described in Section 18 and we will take appropriate steps to investigate and address the matter.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The “Last Updated” date at the top of this Privacy Policy reflects the date of the most recent revision. Your continued use of the Storefront after the effective date of any update constitutes your acceptance of the updated Privacy Policy.

18. Contact Us

If you have questions about this Privacy Policy or our privacy practices, or if you wish to exercise your privacy rights, please contact us at:

Affordable Jewelery and Precious Metals

Attn: Privacy

304 SW Washington St

Portland OR 97204

Email: sales@ajpm.com