LIMITED TIME OFFER — FREE SHIPPING ON ALL ORDERS
Legal
How EverLush Jewels collects, uses and protects the information you share with us.
Last updated 24 September 2026
EverLush Jewels, based in Sunnyvale, California, is responsible for the personal information described in this policy. You can reach us at care@everlushjewels.com.
We only collect what we need to run the shop. Depending on how you use the site, that may include:
We receive information directly from you when you place an order, create an account, contact us or join our mailing list; automatically from your browser when you use the site; and from providers that support payments, delivery, analytics, security and advertising attribution.
We do not store your full payment card number. Card details are entered at checkout and handled by our payment processor.
Account passwords are handled by Firebase Authentication. We do not have access to or store your readable password.
Your shopping bag is stored in your own browser, on your device. It is not sent to us and we cannot see it.
Your wishlist is stored in your browser while you are signed out. If you sign in, the pieces you have saved are stored with your account so they appear on any device you sign in on — that list is the product names only, and we can see it.
We use your information to:
If you start a chat with Lushie, our automated assistant, we ask for your name and email address before the conversation begins, and we keep the conversation itself.
Your message is sent to Google's Gemini API, which generates the reply. We do not send your name or email address with it. Google processes the message to produce a response; we do not use these conversations to train any model.
We keep chat transcripts, with the name and email address given, for up to 90 days, so that Customer Care has the context if you ask us to pick up where Lushie left off. They are deleted automatically after that. If you ask Lushie to pass something to Customer Care, that message and the transcript are also sent to us as an ordinary enquiry and kept with our other correspondence.
If you begin checkout and do not finish it, we keep what you had entered — your name, email address, delivery address and the items in your bag — for up to 90 days. We use it only to find out why checkouts fail, so we can fix them; it is never used to email you about the bag you left. It is deleted automatically after 90 days, and immediately if you ask us to erase your data.
Lushie answers only from information already published on this site. She cannot see your bag, your account or your orders, and she will never ask you for payment details.
Where an applicable US state privacy law covers EverLush Jewels and your information, you may have rights to know or access information, correct it, delete it, obtain a portable copy, and opt out of sale, targeted advertising, sharing for cross-context behavioral advertising, or certain profiling. These rights and exceptions vary by state.
During the preceding 12 months, we have not sold personal information for money. For advertising measurement, we may have disclosed identifiers, commercial information and internet or electronic activity to advertising and analytics providers, including Meta. The sources and business purposes are described above.
We do not use sensitive personal information to infer characteristics or for targeted advertising, and we do not knowingly sell or share personal information of consumers under 16 without legally required authorization.
We keep order records for as long as needed for accounting, tax, fraud prevention and legal obligations. We keep marketing contact details until you unsubscribe, chat transcripts for up to 90 days, part-completed checkout details for up to 90 days, and browser privacy choices until you change or clear them. Advertising and analytics providers retain information under their own published policies and contractual terms. We keep each category only as long as reasonably necessary for the purposes described here.
We take reasonable technical and organisational measures to protect your information. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.
You can unsubscribe from marketing emails at any time using the link in any email we send, or by contacting us.
Depending on where you live and whether an applicable US state privacy law covers EverLush Jewels and your information, you may have the rights described in the US state privacy disclosures above. We honor Global Privacy Control as an opt-out of targeted advertising and sale or sharing for the browser or device sending the signal.
To make a request, contact us using the details on our Contact page. We will not treat you differently for exercising these rights.
We use Google Analytics to see how people move through the shop and the Meta Pixel to understand whether an advertisement led to a visit or purchase. The events include actions such as viewing a product, adding it to a bag, beginning checkout and completing an order.
We do not send Meta or Google your name, email address, postal address or payment details through these browser events. Product identifiers, prices and order totals may be included so advertising and sales performance can be measured.
For eligible US visitors, Meta advertising measurement is active by default unless you opt out. If your browser sends a Global Privacy Control signal or you opt out through Your Privacy Choices, we stop new Meta Pixel events from that browser. We do not knowingly use this default for consumers under 16 where affirmative authorization is legally required. Google Analytics storage is also denied for visitors in the United Kingdom, the European Economic Area and Switzerland.
You can opt out at any time through our Do Not Sell or Share page, by turning on Global Privacy Control in your browser, using Google's Analytics opt-out browser add-on, or changing advertising preferences in your Meta account. Opting out does not change how you can shop with us.
This site is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has given us their information, please contact us and we will delete it.
We do not knowingly sell or share the personal information of anyone under 16 for targeted or cross-context behavioral advertising without the authorization required by applicable law.
We may update this policy from time to time. The date at the top of this page shows when it was last revised.
Questions about this page? Contact Customer Care.
