Skip to content

Privacy Policy

Effective Date: September 6, 2026 · Last Updated: October 19, 2026

1. Who we are and what this covers

ATL Luxury Jewelry (“we,” “us,” “our”) operates www.atlluxuryjewelry.com and a retail store at 1905 Scenic Hwy N Ste 230, Snellville, GA 30078.

This Privacy Policy explains what personal information we collect, why, who we share it with, how long we keep it, and the choices and rights you have. It applies to our website, our email communications, purchases and appointments made through the site, and personal information we collect in the store in connection with an online order, repair, or appointment.

We sell and ship only within the United States. If you access the site from outside the U.S., your information will be processed in the U.S.

2. Notice at collection — what we collect and why

Category of personal informationSpecific examplesWhy we collect itWhere it comes from
IdentifiersName, email address, postal address, phone number, account IDCreate and maintain your account; process and ship orders; respond to inquiries; confirm appointments; send transaction emailsYou; our authentication provider
Commercial informationItems viewed, cart and wishlist contents, orders, order history, amounts, discount codes usedOperate the cart and checkout; fulfill and support orders; apply discounts; keep required tax recordsYou; your activity on the site
Payment informationBilling details and payment confirmation. We do not receive or store your full card number, expiration, or security code — those go directly from your browser to our payment processorTake payment; prevent fraud; handle refunds and disputesYou, via our payment processor
Appointment and consultation informationRequested service and appointment type, date and time, time zone, party size, and any message you writeSchedule, confirm, and prepare for your appointmentYou
Inquiry and custom-design informationYour message, project category, budget range, timeline, preferred contact method, metal/stone/ring-size preferences, and any image you uploadRespond to your inquiry and quote or design the pieceYou
Repair and service informationItem description, declared value, work requested, service historyPerform and track the work; produce your receipt; support warranty claimsYou; our staff
Internet and device activityPages viewed, referring page, device type, browser, operating system, and a randomly generated site session identifierUnderstand how the site is used, fix problems, improve pagesAutomatically, when you use the site
Approximate locationCountry, city, and region, derived from your IP address by our hosting provider. We do not collect precise GPS locationUnderstand where our visitors are; regional performanceAutomatically
Marketing informationEmail address you submit through a promotional offer on the site; your cookie-consent choice; your email preferencesSend offers you asked for; honor your choicesYou
CommunicationsEmails, form submissions, and messages between usRespond to you; keep a service recordYou
Store visit informationSecurity camera footage on our premisesSafety and loss preventionAutomatically, in store

We do not intentionally collect Social Security numbers, driver’s license numbers, financial account numbers, precise geolocation, biometric information, health information, or information about race, religion, sexual orientation, union membership, or immigration status. Please do not send us that kind of information. If you volunteer something sensitive in a free-text message (for example, mentioning a health condition or a relationship detail while describing a custom piece), we use it only to answer you.

We do not knowingly collect personal information from children under 13. See §10.

3. Cookies and similar technologies

TechnologyTypePurposeDuration
Authentication cookies (set by Clerk, our login provider)Strictly necessaryKeep you signed in; protect your accountSession / as set by the provider
anonymous_sessionStrictly necessaryLets a shopping cart work before you sign in, so your cart persists between visits. HTTP-only30 days
atl_session_idAnalyticsA random identifier that lets us count a visit as one session rather than many. Not linked to your name30 days
atl_marketing_consent (browser local storage)PreferenceRemembers whether you accepted or declined marketing cookiesUntil you clear your browser storage
popup_ad_state (browser session storage)PreferencePrevents the same promotional message from repeatingUntil you close the browser tab
Meta (Facebook) Pixel cookies, e.g. _fbpMarketingMeasures the results of our advertising and may be used for targeted advertisingSet only after you click “Accept.” Duration as set by Meta
_gaAnalytics (third-party)Google Analytics. Distinguishes one visitor's browser from another so repeat visits are not counted as new people. Set only after you accept cookies in our banner2 years
_ga_GN3BRS6HX4Analytics (third-party)Google Analytics. Keeps one visit's page views grouped as a single session. Set only after you accept cookies in our banner2 years
_clck (Microsoft Clarity)AnalyticsLinks your visits so we can see how the site is usedSet only after you accept cookies in our banner. Not specified in Microsoft’s current cookie documentation
_clsk (Microsoft Clarity)AnalyticsGroups one browsing session’s page views togetherSet only after you accept cookies in our banner. Not specified in Microsoft’s current cookie documentation
ANONCHK (Microsoft Clarity, .clarity.ms)Analytics (third-party)Indicates whether your MUID identifier would be transferred to ANID, a separate Microsoft advertising cookie. Clarity does not use ANID, so this value is always 0Set only after you accept cookies in our banner. Not specified in Microsoft’s current cookie documentation
MR (Microsoft Clarity, .clarity.ms)Analytics (third-party)Indicates whether your MUID identifier should be refreshedSet only after you accept cookies in our banner. Not specified in Microsoft’s current cookie documentation
MUID (Microsoft Clarity, .clarity.ms)Marketing (third-party)A Microsoft-wide browser identifier. Microsoft states it is used for advertising, site analytics, and other operational purposesSet only after you accept cookies in our banner. Not specified in Microsoft’s current cookie documentation
SM (Microsoft Clarity, .clarity.ms)Analytics (third-party)Helps keep your MUID identifier consistent across Microsoft domainsSet only after you accept cookies in our banner. Not specified in Microsoft’s current cookie documentation
SRM_B (Microsoft Clarity, .clarity.ms)Marketing (third-party)A Microsoft Advertising identifier used together with MUID for ad measurement and remarketing across Microsoft’s networkSet only after you accept cookies in our banner. Not specified in Microsoft’s current cookie documentation
MUID (Microsoft Clarity, .bing.com)Marketing (third-party)The same Microsoft-wide identifier as above, set on bing.com as part of Microsoft’s advertising infrastructure. Used for advertising, site analytics, and other operational purposesSet only after you accept cookies in our banner. Not specified in Microsoft’s current cookie documentation
Hosting and analytics (Vercel)Strictly necessary / analyticsServe the site securely; aggregate usage measurementVaries

We do not load the Meta Pixel, and no Meta cookies are set, unless you affirmatively accept marketing cookies in the banner. If you decline, the pixel is never loaded. You can change your choice at any time via the Cookie Preferences control. We are working to support the Global Privacy Control browser signal.

Session recording. We use Microsoft Clarity to understand how visitors use this site. Clarity records a reconstruction of your visit — the pages you view, where you move and click, and how far you scroll.

Anything you type into a form field is masked and never reaches Clarity. Clarity runs for every visitor, but it sets no cookies unless you accept cookies in our banner — if you decline, it still helps us find broken pages, but nothing is stored on your device and nothing links one visit to another. We use this only to find and fix problems with the site.

Google Analytics. We use Google Analytics to understand how the site is used — pages viewed, products viewed, items added to the cart, orders placed, and appointment requests. We never send anything you type into a form. Google Analytics runs for every visitor, just like Clarity — it is not held back until you accept. Until you accept, it is told not to store anything on your device: no cookies are set, and your visit is counted without being linked to your other visits. Accepting lets it set the two cookies above and connect your visits; declining, or using Cookie Preferences later, withdraws that.

Most browsers let you block or delete cookies. Blocking strictly necessary cookies will break sign-in and the cart.

4. How we use personal information

  • Provide the site, your account, the cart, and the wishlist
  • Process, fulfill, ship, and support orders, including warranty claims
  • Take payment and prevent, detect, and investigate fraud and abuse
  • Schedule and confirm appointments; respond to inquiries; quote and produce custom work
  • Perform repairs and appraisals and keep the associated records
  • Send transactional messages (order confirmations, shipping updates, appointment confirmations, account and security notices)
  • Send marketing email only where you have asked for it, with an unsubscribe option in every message
  • Measure and improve the site, diagnose errors, and understand which pages and products are useful
  • Measure advertising results, and — only with your consent — support targeted advertising
  • Comply with law, including tax and recordkeeping obligations, and enforce our Terms of Service

If you opt in, we send your email address to Square so we can email you offers and new arrivals. We don't add anyone to marketing email without that opt-in.

We do not use personal information to train artificial-intelligence models, and we do not sell personal information for money.

5. Who we share personal information with

We share personal information with service providers who process it on our behalf, under contract, and only for the purposes we specify:

RecipientWhat they receivePurpose
ClerkName, email, authentication and account eventsAccount creation, sign-in, email verification
SquareCard data (directly from your browser), amount, order reference, and your email if providedPayment processing, fraud prevention, receipts
Square (marketing email)Your email address, only if you tick the marketing box on a booking or inquiry form or sign up through the site's email popupSending the offers and updates you asked for. Every marketing email has an unsubscribe link.
ResendName, email, and the contents of the message — for order confirmations this includes items, totals, and shipping addressSending transactional and notification email
CloudinaryImages you upload with an inquiry, and our product imageryImage hosting and delivery
VercelIP address, request and device metadata, page-view eventsWebsite hosting and aggregate analytics
Meta PlatformsPixel events and cookie identifiersAdvertising measurement and targeting — only if you accept marketing cookies
MicrosoftSession recordings, interaction events, IP address, device and browser metadataUnderstanding site usage and diagnosing problems. Some of the identifiers Clarity sets (MUID, SRM_B) are also part of Microsoft’s advertising infrastructure
GooglePage and event data (pages viewed, products viewed, cart and order events, appointment requests), IP address, device and browser metadata, and cookie identifiers if you accepted cookiesUnderstanding how the site is used and measuring the results of our marketing
AnthropicMessages you type in our chat assistant and its repliesGenerating the chat assistant's answers
ConvexChat assistant conversations, and any contact details you confirm in the chatHosting the chat assistant
Prisma (Prisma Postgres)All information stored in our databaseHosting our primary database
Shipping carriersName, address, phoneDelivering your order
Professional advisorsAs neededAccounting, legal, and insurance

We also disclose personal information: to comply with law, subpoena, or lawful request; to protect our rights, property, or safety, or that of our customers or the public; to investigate fraud; and in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honor this policy or give you notice.

Advertising note. Sharing pixel events with Meta so that we can advertise to you may be considered “sharing” for cross-context behavioral advertising or “targeted advertising” under some state privacy laws. Declining marketing cookies in our banner is how you opt out.

Microsoft states that it does not sell Clarity data. Clarity retains standard recordings for 30 days; recordings we mark as favorites, and a small random sample, are kept for up to 9 months, as is heatmap data. Microsoft’s handling of this data is governed by the Microsoft Privacy Statement and the Clarity terms of use.

3D ring designer (JewelerOS)

Our online ring designer at /design-your-ring is provided by JewelerOS. When you use it, your design choices and any contact details you choose to submit, such as your name, email and phone number, are processed by JewelerOS on our behalf so we can save your design, follow up and schedule your appointment. If you opt in to text messages through the designer, our SMS terms apply.

Chat assistant

Our website has a chat assistant, the ATL Assistant. It is an automated AI program, not a person. When you use it, what you type and its replies are processed by Anthropic, which provides the AI model, and stored by Convex, which hosts the chat, so the assistant can answer you.

If you are signed in to your account, the assistant can read your own orders to answer questions about them. If you ask it to book an appointment, send a request to our team, or have someone from our team contact you, the details you confirm on screen, such as your name, email, phone number and the conversation, are saved and sent to our store.

Please do not type payment card numbers, passwords or other sensitive information into the chat.

6. How long we keep personal information

InformationRetention
Order records, invoices, tax records7 years after the order (tax and warranty needs)
Account informationWhile your account is open, then 24 months, unless a longer period is needed for an order, warranty, or legal obligation
Repair, custom-work, and appraisal records7 years (warranty and provenance)
Appointment records12 months after the appointment. Past appointment records are currently deleted shortly after the appointment occurs; we are moving to this stated retention period.
Inquiries and custom-design requests2 years
Chat assistant conversationsDeleted 72 hours after your last message. A conversation that leads to an appointment, a request to our team, or a request for follow-up is kept with that record for 2 years.
Cart and wishlist for signed-out visitors90 days of inactivity
Website analytics (page views, session identifiers)14 months
Marketing email addressesUntil you unsubscribe, then 30 days to honor the request, plus a permanent suppression record so we do not email you again
Security camera footage30 days unless retained for an incident

7. Your privacy rights and choices

Depending on where you live, you may have some or all of the following rights:

  • Know / access — request the categories and specific pieces of personal information we hold about you, the sources, the purposes, and the categories of recipients
  • Delete — request deletion, subject to exceptions (for example, we must keep completed transaction records for tax purposes)
  • Correct — request correction of inaccurate personal information
  • Portability — receive a copy in a portable format
  • Opt out of targeted advertising / “sharing” — decline marketing cookies in our banner, or contact us
  • Limit use of sensitive information — we do not use or disclose sensitive personal information for purposes requiring an opt-out
  • Non-discrimination — we will not deny you goods or services, charge a different price, or provide a lesser quality of service because you exercised a right
  • Appeal — if we deny a request, you may appeal by replying to our response; we will respond to the appeal within the time your state’s law allows

How to exercise a right. Email customersupport@atlluxuryjewelry.com with the subject line “Privacy Request,” or write to us at the address in §12. Tell us which right you want to exercise. We will respond within 45 days, and may extend once by another 45 days with notice.

Verification. To protect you, we will verify your identity before acting — typically by confirming control of the email address associated with your account or order, and by matching information we already hold. We may ask for additional information for a high-risk request. We will not use verification information for any other purpose.

Authorized agents. An agent may submit a request on your behalf with written, signed permission from you; we may still contact you to confirm.

We do not sell personal information for money, and we do not knowingly sell or share the personal information of anyone under 16.

Marketing choices. Every marketing email includes an unsubscribe link, honored promptly. Unsubscribing from marketing does not stop transactional messages about an order, appointment, or account. We do not send marketing text messages unless you give separate written consent. You can stop marketing emails at any time with the unsubscribe link in any of them, or by emailing customersupport@atlluxuryjewelry.com.

Do Not Track / Global Privacy Control. Browsers send Do Not Track signals inconsistently and we do not currently respond to DNT. We are working to support the Global Privacy Control browser signal. Our cookie banner is the reliable way to opt out of marketing cookies today.

8. How we protect personal information

We use reasonable administrative and technical safeguards appropriate to our size and to the information we handle, including:

  • Payment card data never reaches our servers. Card details are captured in your browser by our payment processor (Square) and replaced with a one-time token, so we never receive, store, or transmit your card number.
  • Encryption in transit. The site is served over HTTPS/TLS.
  • Access controls. Administrative access to customer data requires an individual account and an authenticated session that expires; access is limited to people who need it.
  • Third-party providers are chosen in part for their security practices and are bound by contract.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affecting your personal information occurs, we will notify you and the appropriate authorities as Georgia law and other applicable law require.

Please help us: use a strong, unique password; do not share your account; and treat order-status links we email you as confidential. Viewing an order without signing in requires a signed, expiring access link that we include in your confirmation email; the link expires 30 days after the order is placed, and anyone holding it before then can view that order’s details. Creating an account and signing in is the more durable way to review your order history.

9. Third-party sites

The site may link to sites we do not control, including brand, social, and mapping sites. Their privacy practices are their own. Please read their policies.

10. Children’s privacy

The site is intended for adults. We do not knowingly collect personal information from children under 13, and purchases require you to be 18 or older. If you believe a child has provided us personal information, contact us at customersupport@atlluxuryjewelry.com and we will delete it.

11. Changes to this policy

We may update this policy. We will change the “Last Updated” date and, for material changes, give notice on the site or by email. Please review it periodically.

12. Contact us

ATL Luxury Jewelry

Attn: Privacy

1905 Scenic Hwy N Ste 230, Snellville, GA 30078

Phone: (704) 684-7530

Email: customersupport@atlluxuryjewelry.com

For a privacy request, use the subject line “Privacy Request.”