Privacy policy
Last updated: 14 September 2026
This page explains what personal information Reflections Craft collects through reflectionscraft.com, why we collect it, who we share it with, how long we keep it, and what you can ask us to do with it.
Who we are and how to contact us
Reflections Craft makes custom engagement rings and lab-grown diamond jewellery and sells them through reflectionscraft.com. For any question or request about your personal information, email our contact page or use our contact page.
What we collect and why
When you browse the site
If your browser sends a Do Not Track or Global Privacy Control signal, none of what this section describes happens: we set no visitor cookie, record no page views and create no visitor record, and we remove a visitor cookie set on an earlier visit.
Otherwise, on your first visit we set a cookie holding a random visitor ID (see cookies below). Against that ID we record each page you view: its address and title, and the website you came from if it was another site. We also record the first page you landed on, your browser's user-agent string, a one-way hash of your IP address (we do not store the address itself), how many pages you have viewed, and when you first and last visited.
We use this to understand how people find and use the shop, and to connect a visit with the cart or chat that belongs to it so we can follow up with people who have shown interest.
Your cart
Your cart is kept in your browser. Unless your browser sends a Do Not Track or Global Privacy Control signal, a copy of it is also saved on our server against your visitor ID while you shop: the setting, SKU, metal, diamond, ring size and price of each item, and whether you reached the checkout page. This copy does not include your name, email address or any other contact details. We keep it so we can see carts that were not completed. If you empty your cart, the server copy is deleted unless it is already linked to an order.
At checkout
To take and deliver an order we collect your email address, name, phone number (optional), shipping address, the items ordered, any discount code, and the order totals. We record the payment status and the payment reference Square gives us.
Your contact details and shipping address are not sent to us until you place the order. If you leave the checkout page without placing it, nothing you typed into the form reaches us. Before you place the order, the page only sends us the country you choose and your cart total, to show delivery options, and any discount code you enter, to check it.
Card details are entered into a payment form provided by Square and go directly to Square. We never receive or store your card number. After a successful payment we email you an order confirmation from our own mail server. If a discount code is used, we store the email address with that redemption so single-use codes can be enforced.
The shop assistant chat
If you use the chat, we save each question you ask and the answer you were given, linked to your visitor ID. If your browser sends a Do Not Track or Global Privacy Control signal, or blocks the visitor cookie, the conversation is linked only to an ID that lasts until you close the browser tab. If you choose to give your email address (and name) in the chat, we save those too and attach them to the conversation, and to your cart if one is saved. We use this to answer you, to follow up if you left an email, and to improve the answers the assistant gives.
The custom design chat in advanced search
If you describe a ring you would like designed, the text of that conversation is sent to our AI provider to generate the replies. We do not save it in our database.
Contact form
Messages sent through the contact form are saved as a support ticket with your name, email address, subject and message, so we can reply and keep track of the conversation.
Newsletter
If you sign up, we save your email address and where on the site you signed up. Every newsletter email we send names Reflections Craft as the sender, gives our contact details, and includes an unsubscribe link. Opening that link (a page at reflectionscraft.com/unsubscribe) removes you from the list straight away, without signing in; you can also email our contact page. If you unsubscribe, we keep the address marked as unsubscribed, so we know not to email it.
Accounts
If you create an account with an email and password, we store your name, email address and a hashed version of your password (never the password itself). If you sign in with Google, Google shares your name, email address, profile picture link and Google account ID with us, and we store those.
Affiliate programme
Affiliates give us a payout email and method, their website, and how they plan to promote us. When someone clicks an affiliate link, we record the page it led to, the referring page, the browser's user-agent string and a one-way hash of the IP address.
If you arrive through an affiliate link and then place an order, the order is credited to that affiliate. The affiliate can see the order number and the commission amounts, not your name or contact details.
Notifications to the shop owner
When you give us your email address in the chat, the shop owner receives a notification through Telegram containing your email and name if given and your recent questions to the assistant, plus, if your visit was recorded as described above, your cart, the page you first landed on and the site you came from. Typing your details into the checkout form does not send a notification. When a payment is declined or does not complete, a similar notification is sent with the order number, amount, your email and name, the items, and the reason given by Square.
Server logs
Like most websites, our web server logs each request, including the IP address, the page requested, the browser's user-agent string and the time. Our application also writes operational logs, for example that a confirmation email was sent to an address. We use these logs to keep the site running and to investigate problems.
Cookies and similar technologies
The site sets these cookies itself:
| Cookie | What it is for | Set | Lasts |
|---|---|---|---|
| rc_vid | A random ID for your browser, so your page views, cart and chat can be recognised as the same visit. Not set if your browser sends Do Not Track or Global Privacy Control. | On your first page | 13 months |
| ring-auth-token | Keeps you signed in to your account. | When you sign in | 7 days |
| rc_ref | Remembers the affiliate code of the link you arrived from, so the referral can be credited. | When you follow an affiliate link | 30 days |
The site also uses your browser's local storage, which stays on your device, to remember:
- ring-cart: the items in your cart
- ring-wishlist: items you have saved to your wishlist
- ring-builder: the setting and diamond you are putting together
- ring-currency: the currency you chose for prices
- ring-auth: the name and email of the account you are signed in with
The cart is the exception described above: a copy of it is also sent to our server.
The site does not use advertising cookies or advertising pixels.
You can block or delete cookies in your browser settings. If the visitor cookie is blocked, or your browser sends a Do Not Track or Global Privacy Control signal, we do not record your page views, we do not keep a server copy of your cart, and your chat is not linked to your visit; you can still shop, chat and check out.
Analytics
Our own page-view tracking
The browsing records described above are collected by the site itself and stored on our own server. This tracking honours Do Not Track and Global Privacy Control: if your browser sends either signal, we set no visitor cookie, record no page views, keep no server copy of your cart, and remove a visitor cookie set on an earlier visit. Blocking the visitor cookie also stops it.
Klimb engagement measurement
We also load a small script from Klimb, our analytics service at autana.ca. When you hide or close a page, it sends the page's address without any query string, how far down the page you scrolled, how long the page was visible, whether you arrived from a Google search results page, and whether you left quickly. It uses a random ID that is new for every page view, sets no cookies, and stores nothing on your device. Klimb does not store your IP address or user-agent string, and keeps raw page views for 90 days. If your browser sends a Do Not Track or Global Privacy Control signal, the script does nothing.
Service providers we share information with
- Square processes payments. It receives your card details directly from the payment form, plus your name, email address, shipping address and the order details.
- Chit Chats provides shipping labels. When we ship your order it receives your name, delivery address and a description and value of the contents.
- Anthropic provides the AI model behind the shop assistant and the custom design chat. It receives the text of the conversation.
- Google serves the fonts used on the site, so your browser requests them from Google, which receives your IP address and browser details. If you choose Google sign-in, Google also handles that sign-in.
- Telegram delivers the shop-owner notifications described above, including their contents.
- Klimb (autana.ca) receives the engagement measurements described under Analytics.
Some of these providers process information outside Canada, including in the United States.
How long we keep it
- Web server access logs are deleted after 14 days.
- Cookies last for the periods in the table above, unless you delete them sooner.
- Klimb keeps raw page views for 90 days.
- The server copy of your cart is deleted if you empty your cart, unless it is linked to an order.
- Everything else (orders, accounts, support tickets, chat records, browsing records, newsletter sign-ups and affiliate records) is not deleted automatically. We keep it for as long as it is needed for the purpose it was collected for.
Your choices and rights
- Access and correction. You can ask what personal information we hold about you and ask us to correct it.
- Withdrawing consent. You can leave the newsletter at any time with the unsubscribe link in any newsletter email, or by asking us. You can also ask us to stop following up about a cart or chat, or to delete information we hold about you. If there is a reason we need to keep something, such as a record of an order, we will tell you.
- Cookies and tracking. You can block cookies in your browser. Turning on Global Privacy Control or Do Not Track stops both our own page-view tracking and the Klimb script.
- Complaints. If you are not satisfied with how we handle your information, you can complain to the Office of the Privacy Commissioner of Canada.
To make any of these requests, email our contact page. We may need to confirm your identity before acting on a request.
Changes to this policy
If we change how we handle personal information, we will update this page and the date below.
Last updated: 14 September 2026