Privacy Policy.

1. Who we are

This Site is operated by ERDOR JEWELRY LTD, a company registered in the State of Israel under company number 515074151(“ERDOR”, “we”, “us”, or “our”). For the purposes of the EU and UK General Data Protection Regulation (“GDPR”), ERDOR is the data controller of the personal information described in this policy.

For any privacy-related question or request, contact us at privacy@ringmadeasy.com.

2. Scope

This policy applies to personal information we collect through ringmadeasy.com and any related sub-domains, services, or communications (the “Site”). It does not apply to third-party sites or services that we link to from the Site — please review their own privacy notices.

3. Information we collect

We collect personal information in the following ways:

a. Information you give us directly

• Identity & contact details: name, email address, phone number, shipping and billing address.
• Account details: if you create an account — username, password (stored as a one-way hash by our authentication provider).
• Order details: the items you order, your selected specifications (metal, size, stones, engravings), ring sizing data, and any messages you send us.
• Inspiration uploads: if you upload reference images for a custom design, we store them for the purpose of producing your order.
• Correspondence: records of emails, contact form submissions, and customer service messages.

b. Information collected automatically

• Device & usage data: IP address, browser type and version, operating system, device identifiers, language preferences, referring URL, pages visited, time spent, and approximate location derived from IP.
• Cookies & similar technologies: see the Cookies section below.

c. Information from third parties

• Payment data: when you pay, your card data is collected directly by Stripe, our payment processor. We never see or store your full card number, CVV, or card expiry. We receive only a transaction confirmation, the last four digits, card brand, and billing country.
• Shipping data: our couriers (DHL, FedEx) may share tracking status, delivery confirmation, and customs-related information back to us.
• Authentication providers: if you sign in with a third-party identity provider, we receive your basic profile information from that provider as permitted by your settings with them.

4. How we use your information

We use your personal information to:

• Process your order, take payment, produce your piece, and ship it to you.
• Provide customer service — respond to your enquiries, manage returns, warranty claims, resizing requests, and the like.
• Maintain your account, save your preferences, and let you view past orders.
• Operate, secure, and improve the Site — including fraud prevention, abuse detection, analytics, and product development.
• Comply with our legal, accounting, and tax obligations, and to enforce our terms.
• If you have opted in, send you marketing emails (e.g. occasional newsletters, new collection announcements). You can unsubscribe at any time using the link in any marketing email.

5. Legal bases (EU/UK customers)

If you are in the EU, UK, or another jurisdiction that requires us to identify a legal basis for processing, we rely on the following bases:

• Contract: to take and fulfill your order, deliver your piece, manage returns, and provide customer support.
• Legitimate interests: to secure the Site, prevent fraud, improve our products, and to send you direct service-related communications. We balance our interests against your privacy rights.
• Legal obligation: to comply with tax, accounting, customs, and other applicable laws.
• Consent: for marketing communications and for any non-essential cookies. You can withdraw consent at any time.

6. Who we share your information with

We do not sell your personal information. We share it only with the following categories of recipient, and only as needed to operate our business:

• Payment processor: Stripe Inc., to take and reconcile payments.
• Shipping & logistics providers: DHL, FedEx, and customs brokers, to ship and clear your order.
• Cloud & infrastructure providers: Google (Firebase) and other hosting/auth providers used to operate the Site and store data securely.
• Analytics & security tools: service providers that help us understand how the Site is used and protect it against abuse.
• Professional advisors: auditors, accountants, and lawyers, where engaged and bound by confidentiality.
• Authorities: where required by law, court order, or to establish, exercise, or defend legal claims.
• Corporate transactions: in the event of a merger, acquisition, financing, or sale of assets, personal information may be transferred to the relevant counterparty under appropriate confidentiality protections.

7. International transfers

ERDOR is based in Israel. To operate the Site we use service providers that may process personal information in other countries, including the United States and the European Union. Where required, we rely on lawful transfer mechanisms such as the European Commission’s Standard Contractual Clauses and equivalent UK addenda, or other safeguards permitted under the applicable laws of your jurisdiction. The State of Israel has been recognised by the European Commission as providing an adequate level of data protection.

8. Data retention

We keep your personal information only as long as we need it for the purposes described above:

• Order & customer records: for as long as your account is active and afterwards for the period required by tax and accounting law (typically 7 years).
• Marketing data: until you unsubscribe or otherwise withdraw consent.
• Site logs & analytics: typically up to 24 months, then deleted or anonymised.
• Inspiration uploads: retained for the lifetime of your custom order plus a reasonable archival period to support warranty and resizing.

9. Security

We use appropriate technical and organisational measures to protect personal information, including encryption in transit (HTTPS/TLS), encryption at rest for sensitive data, access controls, hashed credentials, monitored infrastructure, and reputable third-party processors. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security — but we work to keep risks low.

10. Your rights

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• Access: request a copy of the personal information we hold about you.
• Rectification: ask us to correct inaccurate or incomplete information.
• Erasure: ask us to delete your information, subject to legal retention requirements.
• Restriction: ask us to limit the processing of your information.
• Portability: receive your information in a structured, machine-readable format.
• Objection: object to processing that we base on legitimate interests, and at any time to direct marketing.
• Withdraw consent: where we process on the basis of consent, you can withdraw it at any time without affecting prior processing.
• Complain:lodge a complaint with the data protection authority in your jurisdiction (in the UK, the Information Commissioner’s Office; in the EU, your national authority; in Israel, the Privacy Protection Authority).

To exercise any of these rights, email privacy@ringmadeasy.com. We may ask you to verify your identity before responding. We aim to respond within 30 days.

11. California residents

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the CPRA, gives you specific rights, including:

• The right to know what categories and specific pieces of personal information we have collected about you and how we use them.
• The right to delete personal information we have collected, subject to legal exceptions.
• The right to correct inaccurate personal information.
• The right to opt out of the sale or sharing of personal information. We do not sell personal information.
• The right to non-discrimination for exercising any of these rights.

To exercise these rights, contact us at the email above. You may also authorize an agent to act on your behalf, in which case we will verify their authority.

12. Cookies & similar technologies

We use cookies and similar technologies to operate the Site, remember your preferences, secure your session, and understand how the Site is used.

• Strictly necessary: required for login, cart, and checkout to function. These cannot be turned off.
• Functional: remember your preferences (e.g. last viewed ring, sizing).
• Analytics: help us understand usage and improve the product.

Most browsers let you refuse or delete cookies through their settings. Blocking strictly necessary cookies may break parts of the Site. Where required by law, we will ask for your consent before setting non-essential cookies.

13. Marketing communications

We will only send you marketing emails if you have opted in. You can unsubscribe at any time by clicking the link at the bottom of any marketing email, or by emailing us. Service messages relating to your order (order confirmations, shipping updates, warranty notices) are not marketing and will continue regardless of marketing preferences.

14. Children

The Site is intended for adults. We do not knowingly collect personal information from children under the age of 16. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

15. Third-party links

The Site may contain links to third-party sites or services that we do not operate. We are not responsible for their privacy practices — please review their own policies before sharing personal information with them.

16. Automated decision-making

We do not use your personal information to make decisions about you based solely on automated processing that produce legal or similarly significant effects on you.

17. Changes to this policy

We may update this policy from time to time. Where changes are material, we will give you reasonable notice (e.g. by email or a notice on the Site). The “Last updated” date above tells you when the current version took effect.

18. Contact us

Questions, requests, or complaints? Email privacy@ringmadeasy.com or write to ERDOR JEWELRY LTD (company number 515074151), Israel.