Privacy Policy

This policy explains what personal information Heron Scribe collects when you use this website, why we collect it, how it's stored, and what rights you have over it. We collect the minimum needed to run a made-to-order jewelry business and never sell your data.

What we collect

• Bespoke inquiry form: name, email address, a description of the piece you're imagining, your selected budget range, and an optional reference image.
• Newsletter signup: email address only.
• Account registration: username, email address, and a securely hashed password (we never store your password in readable form). Creating an account automatically subscribes that email to our newsletter list; you can unsubscribe anytime from your account page without deleting the account itself.
• Site operation: a functional session cookie that keeps you logged in and protects forms against forgery. This cookie is required for the site to work and isn't used for tracking.

We deliberately do not collect date of birth, gender, social media accounts, government ID, or payment card numbers through this website.

How it's stored

Submissions are stored in Heron Scribe's application database. Passwords are hashed (never stored as plain text), and administrative access is restricted to authenticated admin accounts only — see our internal access-control practices below.

Current third-party processors: at the time of writing, this website does not yet route any data through a third-party payment processor, CDN/security provider, or email delivery service — bespoke orders and newsletter sends are currently handled directly and manually. As those integrations come online (for example, Stripe for payment processing, Cloudflare for security and content delivery, or an email service such as Mailchimp/Klaviyo for newsletter delivery), this policy will be updated to name them and describe exactly what they receive before they go live.

Cookies

We use one strictly necessary session cookie (for login and form security) that doesn't require consent under most privacy laws. We do not currently run analytics or advertising cookies. If we add analytics (such as Google Analytics) in the future, the consent banner shown on this site will gate that script behind your explicit acceptance — declining will keep it from loading.

Your rights

You can ask us at any time to access, correct, or delete the personal data we hold about you — including full account deletion. Email privacy@heronscribe.com and we'll confirm within a reasonable time. This applies to all visitors, including rights specifically guaranteed under the EU's GDPR and California's CCPA.

Questions

For anything not covered here, reach us at privacy@heronscribe.com. See also our Terms of Service.