Privacy policy

Privacy & Data Protection

Effective August 28, 2026

Colette Falchet, LLC (“Colette Falchet,” “we,” “us,” or “our”) treats privacy as part of a discreet client relationship. Whether you visit colettefalchet.com, inquire about a piece, place an order, request bespoke or commissioned work, communicate with the Concierge, attend a private appointment or event, or receive client service from us, we handle personal information with care, restraint, and respect.

This Privacy Policy explains how we collect, use, disclose, retain, transfer, and protect personal information across colettefalchet.com, our online store, Concierge communications, appointments, bespoke inquiries, commissioned orders, private-client services, events, marketing channels, jewelry service, repairs, delivery, and any other service that links to this Policy (collectively, the “Services”). For purposes of applicable privacy laws, Colette Falchet, LLC is the controller or business responsible for the personal information described in this Policy, except where another party is independently responsible for its own processing.

Our privacy promise

We respect the trust placed in us. Personal information is handled with discretion, restraint, and care, and used only for appropriate business, service, legal, security, and client-relationship purposes. We aim to be clear about how information is used, careful about whom it is shared with, and attentive to the choices and rights available to you under applicable privacy laws.

If our practices materially change, or if a security incident affecting personal information requires notice, we will provide notice as required by applicable law. Our commitment is to handle personal information with the care expected in a private-client environment.

1. Personal information we collect

The information we collect depends on how you interact with us, including through the website, online store, checkout, Concierge, appointments, bespoke inquiries, commissioned orders, service requests, private-client communications, events, or marketing channels, and may include:

2. Sources of personal information

We collect personal information from the following sources:

• Directly from you, including when you browse, place an order, create an account, subscribe, contact us, request bespoke or commissioned work, attend or inquire about an appointment or event, or seek service for a piece.

• Automatically through cookies, pixels, local storage, server logs, and similar technologies.

• From Shopify and other vendors that host, secure, analyze, market, process payments for, or support the Services.

• From delivery carriers, insurers, fraud-prevention services, identity-verification providers, payment providers, and business partners.

• From public sources or social platforms when you interact with our public content or choose to make information available.

3. How we use personal information

We may use personal information to:

• Provide the Services, respond to inquiries, manage client requests, and support a thoughtful client relationship.

• Process payments, fulfill orders, coordinate delivery, and provide returns, exchanges, repairs, warranty service, and client care.

• Develop bespoke, commissioned, or made-to-order pieces and maintain records of specifications, approvals, provenance, and service history.

• Create and manage accounts, wish lists, subscriptions, and preferences.

• Send transactional, service, security, and administrative communications.

• Send marketing communications where permitted and honor opt-out choices.

• Understand engagement, conduct analytics, and refine our products, content, services, and client communications.

• Tailor content, communications, and advertising, subject to consent or opt-out rights where required.

• Authenticate users, prevent fraud, protect high-value transactions and shipments, secure the Services, and enforce our terms.

• Comply with tax, accounting, customs, sanctions, recordkeeping, legal, and regulatory obligations.

• Establish, exercise, or defend legal claims and protect the rights, safety, and property of clients, Colette Falchet, LLC, and others.

Where applicable law requires a legal basis, we rely on one or more of the following bases: performance of a contract or steps taken at your request before a contract; compliance with legal obligations; our legitimate interests in operating, securing, refining, and appropriately promoting our business; your consent where required; and the establishment, exercise, or defense of legal claims. You may withdraw consent at any time, without affecting processing already lawfully undertaken.

4. Shopify and ecommerce services

Our online store is hosted by Shopify. Shopify collects and processes personal information when you access or use the Services, including to provide hosting, checkout, payment, security, analytics, fraud prevention, and other ecommerce functions. Depending on the features enabled, Shopify may process information from your interactions with our store and with Shopify to support checkout, account, payment, security, and related ecommerce services. Information may be transferred to Shopify and other service providers located in countries other than your own.

You can learn more in Shopify’s Consumer Privacy Policy at https://www.shopify.com/legal/privacy/consumers and use Shopify’s privacy portal at https://privacy.shopify.com/ to manage certain choices or requests concerning Shopify’s processing.

5. When we disclose personal information

We may disclose personal information to the following categories of recipients for the purposes described in this Policy:

• Shopify and ecommerce-platform providers.

• Payment processors, financial institutions, fraud-prevention, sanctions-screening, identity-verification, and risk-management providers.

• Delivery carriers, logistics providers, customs agents, insurers, repair facilities, and artisans, when needed to fulfill or service an order.

• Cloud hosting, cybersecurity, analytics, customer-service, email, marketing, advertising, appointment-management, event-management, and professional-service providers, where used to support the Services.

• Affiliated entities within our group for administration, operations, client service, security, legal compliance, and business management, subject to appropriate safeguards.

• Government authorities, courts, regulators, law enforcement, or other parties when required by law or reasonably necessary to protect rights, safety, and security.

• A prospective or actual purchaser, investor, lender, successor, or adviser in connection with a financing, reorganization, merger, sale, or transfer, subject to appropriate confidentiality and legal safeguards.

We do not sell personal information for money. Certain analytics, advertising, or Shopify ecommerce services may be considered a “sale,” “sharing,” or “targeted advertising” under some U.S. state privacy laws even when no money changes hands. Where required, you may opt out as described below.

6. Cookies and similar technologies

In this Policy, “Site” means colettefalchet.com and any webpages operated by us that link to this Policy.

We and our partners, including Shopify, use cookies, pixels, tags, local storage, and similar technologies to operate and secure the Site, enable checkout and account functions, remember preferences, understand engagement, support carefully tailored communications, and assist with marketing or advertising. Some technologies are necessary for security, checkout, account, and core functions; others are used subject to consent or opt-out rights where required.

You can manage available choices through the Cookie Preferences link, banner, “Your Privacy Choices” link, or other privacy controls made available on the Site, as applicable. A separate Cookie Policy or preference tool may provide additional details about cookie categories, purposes, and choices. Browser controls may also block or delete cookies, although doing so may affect functionality. Where required by applicable law and supported by our systems, we recognize supported opt-out preference signals, such as Global Privacy Control.

7. Marketing choices

You may unsubscribe from promotional emails at any time by using the unsubscribe link in a message or contacting the Concierge. We may continue to send non-promotional communications concerning transactions, security, policy updates, or an ongoing client relationship. If we offer SMS, messaging, appointment-reminder, or similar communications, we will obtain and honor consent and opt-out choices as required by applicable law. Choices regarding cookies, targeted advertising, or data sharing can be managed through the Site’s privacy controls where available.

8. Your privacy rights

Depending on where you live and subject to legal conditions and exceptions, you may have the right to:

• Request access to or a copy of personal information we hold about you.

• Request correction, deletion, restriction, or portability of personal information.

• Object to or opt out of certain processing, including targeted advertising, sale, sharing, or profiling where applicable.

• Withdraw consent.

• Appeal a decision concerning a privacy request where applicable.

• Receive equal service and pricing without unlawful discrimination for exercising privacy rights.

To submit a request, email concierge@colettefalchet.com and write “Privacy Request” in the subject line. Please describe the request and identify the jurisdiction in which you reside. We may need to verify your identity before acting, and we will use information provided for verification only for that purpose unless otherwise permitted by law. An authorized agent may submit a request where permitted, subject to proof of authority and identity verification. We will respond within the period required by applicable law.

To opt out of uses that may constitute sale, sharing, or targeted advertising, use the “Your Privacy Choices,” data-sharing opt-out link, Cookie Preferences tool, or other privacy control made available on the Site, as applicable. You may also use a supported browser-based opt-out preference signal where required by law and supported by our systems. Requests concerning Shopify’s independent processing may also be submitted through Shopify’s privacy portal.

If we are subject to a U.S. state privacy law that requires additional disclosures, opt-out mechanisms, appeal rights, or a notice at collection, we will provide those disclosures and mechanisms as required. The availability and scope of privacy rights may vary by jurisdiction and may depend on our relationship with you and the information involved.

If you have created an account with us, you may request access to, correction of, or deletion of the personal information associated with that account, subject to legal, transactional, security, fraud-prevention, tax, accounting, customs, insurance, and recordkeeping obligations. Deleting an account may not delete information we are required or permitted to retain, including order history, payment records, delivery records, provenance, warranty, service, repair, commissioned-order, or legal compliance records.

9. International transfers

Because we are based in Florida, United States, personal information may be processed in the United States and in other countries where Shopify, payment providers, shipping providers, cloud providers, analytics providers, marketing providers, professional advisers, affiliated entities, or other service providers operate. These countries may have data-protection laws that differ from those in your country, but we expect personal information to be handled with appropriate contractual, technical, and organizational safeguards consistent with a discreet client-service environment.

Where the GDPR, UK GDPR, or similar laws apply, we use appropriate safeguards for international transfers where required. These safeguards may include adequacy decisions, standard contractual clauses approved by the European Commission, the UK International Data Transfer Agreement or UK Addendum, contractual commitments with service providers, or other lawful transfer mechanisms.

10. Additional notice for European and UK residents

This section applies if the European Union General Data Protection Regulation, the United Kingdom General Data Protection Regulation, or similar European data-protection laws apply to our processing of your personal information.

Controller. Colette Falchet, LLC is the controller of the personal information described in this Policy, except where Shopify, a payment provider, shipping provider, platform, or another third party acts as an independent controller for its own processing.

Legal bases. We process personal information based on contract where needed to provide products, checkout, delivery, returns, repairs, warranty service, commissioned orders, and client care; legal obligation where needed for tax, accounting, customs, sanctions, fraud-prevention, recordkeeping, and regulatory duties; legitimate interests where needed to operate, secure, refine, and appropriately promote our business, understand engagement, protect high-value transactions, prevent misuse, communicate with clients, and manage business relationships; consent where required for certain cookies, marketing, or similar activities; and legal claims where needed to establish, exercise, or defend rights.

Legitimate interests. When we rely on legitimate interests, we consider the nature of the information, the purposes of processing, the relationship with the individual, and the individual’s rights and expectations. Our legitimate interests include operating and protecting our website and business, preventing fraud, securing high-value transactions and shipments, refining services, responding to inquiries, maintaining client, commissioned-order, provenance, and service records, and marketing our products and services in a proportionate manner.

European and UK privacy rights. Subject to legal conditions and exceptions, you may have the right to request access to your personal information; request correction of inaccurate information; request deletion; restrict or object to processing; receive certain information in a portable format; withdraw consent where processing is based on consent; object to direct marketing; and lodge a complaint with a competent supervisory authority.

Supervisory authority. If you are in the European Economic Area, you may contact the supervisory authority in your country of residence, place of work, or place of the alleged infringement. If you are in the United Kingdom, you may contact the UK Information Commissioner’s Office.

EU or UK representative. We are a Florida, United States company. If we are required to appoint an EU or UK representative, we will identify that representative in this Policy or in a supplemental notice. Otherwise, privacy requests may be sent to the contact information below.

Data Protection Officer. We have not appointed a Data Protection Officer unless we state otherwise in this Policy. Privacy questions may be directed to the contact information below.

Automated decision-making. We do not use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects. We may use fraud-prevention, security, analytics, and advertising tools that help support ordinary business decisions and website functionality.

Processing not required by law or contract. Where providing personal information is necessary to enter into or perform a contract, we may be unable to provide the requested product or service without it. Where information is optional, you may choose not to provide it, although some website features, communications, or services may be unavailable.

11. Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including to provide services, maintain provenance and service records for fine jewelry, preserve transaction, commissioned-order, bespoke, and warranty histories, meet tax, accounting, customs, insurance, fraud-prevention, and legal requirements, resolve disputes, and enforce agreements. Retention periods vary according to the nature of the information, the client relationship, legal obligations, and operational needs. When information is no longer required, we delete, de-identify, or securely dispose of it, subject to lawful archival, legal, or backup processes.

12. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, taking into account the nature of the information, the circumstances of its collection, and the sensitivity of high-value client transactions. No transmission or storage method is completely secure, and we cannot guarantee absolute security. If a security incident affects personal information, we will provide notices to affected individuals and/or regulators as required by applicable law. Please use unique credentials, protect account access, and avoid sending full payment-card information or other highly sensitive information by ordinary email.

13. Children’s privacy

The Services are intended for a general audience and are not directed to children under 13. We do not knowingly collect personal information from children under 13. Purchases may be made only by persons who are at least 18 years old or the age of legal majority where they live. If you believe a child has provided personal information contrary to this Policy, please contact us so we can take appropriate action.

14. Third-party sites and services

The Services may link to or integrate with third-party sites, social platforms, or services. Their privacy practices are governed by their own notices. We encourage you to review those notices before providing information.

15. Changes to this Privacy Policy

We may update this Policy to reflect changes in our practices, technology, services, or legal obligations. The updated version will be posted with a revised effective date. When required, we will provide additional notice or obtain consent.

16. Language

Translations may be provided for convenience. To the extent permitted by applicable law, the English-language version is the official and controlling version if a discrepancy arises.

17. Contact us

Questions, privacy requests, or complaints may be directed to Colette Falchet, LLC at concierge@colettefalchet.com. Please include “Privacy Request” in the subject line if you are exercising a privacy right.