Last updated: May 30, 2026

Your privacy is our commitment. The information you provide is used solely for account management, order fulfillment, and service improvement. We do not sell your personal data or share it with advertisers. If you request account closure by contacting us at [email protected], your personal contact details will be removed, but order and payment records are retained as required by tax and shipping laws.

This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

We use Your Personal Data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

1. Interpretation and Definitions
1.1 Interpretation
The words whose initial letters are capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

1.2 Definitions
For the purposes of this Privacy Policy:

Account means a unique account created for You to access our Service or parts of our Service.

Affiliate means an entity that controls, is controlled by, or is under common control with a party, where “control” means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.

Company (referred to as either “the Company”, “We”, “Us” or “Our” in this Privacy Policy) refers to Kris Nature.

Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses.

Country refers to: United States (location of data storage and primary processing).

Device means any device that can access the Service such as a computer, a cell phone or a digital tablet.

Personal Data (or “Personal Information”) is any information that relates to an identified or identifiable individual. We use “Personal Data” and “Personal Information” interchangeably unless a law uses a specific term.

Service refers to the Website.

Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analyzing how the Service is used.

Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).

Website refers to Kris Nature, accessible from http://www.krisnature.com.

You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

2. Collecting and Using Your Personal Data
2.1 Types of Data Collected
2.1.1 Personal Data
While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:

Email address

First name and last name

Phone number

Address, State, Province, ZIP/Postal code, City

2.1.2 Personal Data Specific to Jewelry and Handcrafted Accessories E-Commerce
In addition to standard contact details, the nature of Our Service (offering jewelry and handmade knotted accessories) requires collection of the following data:

Order and Fulfillment Data: Shipping address, billing address, and proof of delivery signature (for high-value insured shipments).

Customs Information: For high-value insured shipments to specific jurisdictions where customs authorities explicitly require additional identification, we may request this information at checkout.

Payment Information: All payments are processed exclusively through PayPal. We do not collect, process, or store Your full credit/debit card numbers or bank account details on Our servers. PayPal’s privacy policy applies to that transaction data. (Note: Additional PCI-DSS compliant payment processors may be added in the future for credit card support.)

Customization Preferences: Optional data provided to customize Your jewelry or handcrafted items (e.g., ring size, cord color, engraving text). We never use the specific text of your personalized engraving for any purpose other than fulfilling that specific order. Engraving content is masked in our internal order management view.

2.1.3 Usage Data
Usage Data is collected automatically when using the Service.
Usage Data may include information such as Your Device’s Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.
When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device’s unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data.
We may also collect information that Your browser sends whenever You visit Our Service or when You access the Service by or through a mobile device.

2.1.4 Tracking Technologies and Cookies
We use Cookies and similar tracking technologies to track the activity on Our Service and store certain information. Tracking technologies We use include beacons, tags, and scripts to collect and track information and to improve and analyze Our Service. The technologies We use may include:

Cookies or Browser Cookies: A cookie is a small file placed on Your Device. You can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if You do not accept Cookies, You may not be able to use some parts of our Service.

Web Beacons: Certain sections of our Service and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of a certain section and verifying system and server integrity).

Where required by law, we use non-essential cookies (such as analytics, advertising, and remarketing cookies) only with Your consent. You can withdraw or change Your consent at any time using Our cookie preferences tool (if available) or through Your browser/device settings. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

2.2 Use of Your Personal Data
The Company may use Personal Data for the following purposes:

To provide and maintain our Service, including to monitor the usage of our Service.

To manage Your Account: to manage Your registration as a user of the Service.

For the performance of a contract: the development, compliance and undertaking of the purchase contract for the products, items or services You have purchased.

To contact You: To contact You by email, telephone calls, SMS, or other equivalent forms of electronic communication.

To provide You with news, special offers, and general information about other goods, services and events which We offer that are similar to those that you have already purchased or inquired about unless You have opted not to receive such information.

To manage Your requests: To attend and manage Your requests to Us.

For business transfers: We may use Your Personal Data to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Our assets.

For other purposes: We may use Your information for other purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns and to evaluate and improve our Service, products, services, marketing and your experience.

2.3 Legal Basis for Processing Personal Data (For EEA, UK, and Swiss Users)
If You are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, We rely on the following legal bases under the General Data Protection Regulation (GDPR) to process Your Personal Data:

Performance of a Contract: Processing is necessary to fulfill Your order, process payments, and ship jewelry and handcrafted products to You.

Legitimate Interests: We process Usage Data and limited Personal Data for fraud prevention, network security, and marketing Our similar products to existing customers.

Consent: We rely on Your explicit consent for sending newsletters, non-essential marketing communications, and placing non-essential cookies/trackers on Your device. You may withdraw consent at any time.

Legal Obligation: We may process data to comply with tax laws, anti-money laundering checks for high-value purchases, or lawful requests from authorities.

3. Sharing Your Personal Data
We may share Your Personal Data in the following situations:

With Service Providers: We may share Your Personal Data with Service Providers to monitor and analyze the use of our Service, to contact You.

For business transfers: We may share or transfer Your Personal Data in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition.

With Affiliates: We may share Your Personal Data with Our affiliates, in which case we will require those affiliates to honor this Privacy Policy.

With business partners: We may share Your Personal Data with Our business partners to offer You certain products, services or promotions.

With Your consent: We may disclose Your Personal Data for any other purpose with Your consent.

4. Third Parties With Whom We Share Personal Information (CCPA Disclosure)
We have disclosed the following categories of personal information to third parties for business purposes:

Payment Processing: PayPal, Inc. (Future: Additional PCI-DSS compliant processors may be added for credit card support)

Logistics and Delivery: YunTu, YanWen, DHL eCommerce (International); Local postal services (last-mile delivery)

Website Hosting and Infrastructure: Bluehost (Endurance International Group) — Server location: United States

Analytics and Performance: Google Analytics (Google LLC)

Fraud Detection: Internal automated systems + PayPal risk tools

To reduce porch piracy and ensure safe delivery of high-value items, we may require signature confirmation upon delivery. This may involve sharing your phone number with the carrier for delivery notifications.

5. Automated Decision-Making Technology (ADMT)
In accordance with California CPPA regulations effective March 2024, we disclose the following automated decision-making technologies:

Fraud Detection and Risk Assessment: Purpose: Prevent fraud | Logic: IP address, device pattern analysis | Impact: Orders may be held for manual review | Opt-Out: Required for security (no opt-out available).

We do NOT use:
Machine learning algorithms for product recommendations; AI chatbots or virtual assistants; Automated profiling for marketing segmentation; AI-generated content personalization. All product displays are based on manual curation or category browsing, not automated decision-making about individual consumers.

6. Retention of Your Personal Data
The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy.

Account Information: User Accounts retained for the duration of your account relationship plus up to 24 months after account closure.

Customer Support Data: Support tickets and correspondence up to 24 months from the date of ticket closure.

Usage Data: Website analytics data and Server logs up to 24 months.

We may retain Personal Data beyond the periods stated above for legal obligations, legal claims, your explicit request, or technical limitations in backup systems.

7. International Data Transfers and Safeguards
Your information is processed and stored in the United States (via Bluehost servers) and may be transferred to our service providers in other jurisdictions.
For Users in the EEA, UK, and Switzerland: We ensure that such transfers are lawful by implementing the European Commission’s Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum, where applicable.

8. Your Data Protection Rights (GDPR)
For Residents of the European Economic Area (EEA), UK, and Switzerland:

Right to Access: You can request a copy of the Personal Data We hold about You.

Right to Rectification: You can correct inaccurate or incomplete data.

Right to Erasure (‘Right to be Forgotten’): You can request deletion of Your data.

Right to Restrict Processing: You can limit how We use Your data.

Right to Data Portability: You can receive Your data in a structured format.

Right to Object: You can object to processing based on legitimate interests or direct marketing.

To exercise any of these rights, please email Us at [email protected].

9. NOTICE TO CALIFORNIA RESIDENTS — CPRA COMPLIANT (2024)
9.1 Categories of Personal Information Collected (Past 12 Months)
A. Identifiers — Collected: YES

B. Customer Records — Collected: YES

C. Protected Characteristics — Collected: NO

D. Commercial Info — Collected: YES

E. Biometric — Collected: NO

F. Internet Activity — Collected: YES

G. Geolocation — Collected: LIMITED (IP-based city/region only)

H. Sensory — Collected: NO

I. Employment — Collected: NO

J. Education — Collected: NO

K. Inferences — Collected: LIMITED (No automated profiling)

9.2 Sensitive Personal Information (SPI)
We collect Account login credentials and Financial information (Processed exclusively via PayPal tokenization. We do NOT store raw credit/debit card numbers). We do NOT use SPI for inferring consumer characteristics or building detailed profiles.

9.3 YOUR CALIFORNIA PRIVACY RIGHTS
Right to Know: Access categories/specific data collected.

Right to Delete: Request deletion (exceptions apply).

Right to Correct: Fix inaccurate information.

Right to Non-Discrimination: No penalty for exercising rights.

9.4 CURRENT STATUS: Sale and Sharing
We do NOT “sell” personal information for monetary consideration.
We currently do NOT “share” personal information with advertising partners for cross-context behavioral advertising.

9.5 PREPARED OPT-OUT MECHANISMS
While we do not currently sell or share your data, if you have specific requests to restrict the processing of your personal or sensitive information, please contact us directly at [email protected].

9.6 Verification and Response Process
Identity Verification requires 2-3 pieces of information. Response Timeline is 45 days (may extend to 90 days with advance notice).

9.7 Financial Incentives
We currently do NOT offer financial incentive programs that require personal information disclosure.

10. Disclosure of Your Personal Data
The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:

Comply with a legal obligation or respond to valid requests by public authorities.

Protect and defend the rights or property of the Company.

Prevent or investigate possible wrongdoing in connection with the Service.

Protect the personal safety of Users of the Service or the public.

11. Security of Your Personal Data
The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially reasonable means to protect Your Personal Data, We cannot guarantee its absolute security.

12. Children’s Privacy
Our Service is intended for a general audience and is not directed to children. We do not knowingly collect Personal Data from children under the age of 13 (United States) or 16 (EEA). If You are a parent or guardian and believe Your child has provided Us with Personal Data without Your consent, please contact Us.

13. Links to Other Websites
Our Service may contain links to other websites that are not operated by Us. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

14. Changes to this Privacy Policy
We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page and updating the “Last updated” date.

15. Contact Us
If you have any questions about this Privacy Policy, You can contact us:

Email: [email protected]