Privacy policy

Effective May 1, 2026 · Last updated April 2026 

This Privacy Policy explains how OLVR Inc. ("OLVR," "we," "us," "our") collects, uses, shares, and protects personal information when you visit olvrjewelry.com (the "Site"), create an account, place an order, or interact with us in any way. 

OLVR Inc. is a corporation incorporated under the laws of Alberta, Canada, with its principal place of business in Calgary, Alberta. For the purposes of applicable privacy law, OLVR is the "data controller" or "business" responsible for the personal information described in this policy. 

This policy applies to personal information collected from individuals located in Canada and the United States. If you are located outside these regions, please do not provide personal information to OLVR through the Site. 

1. Information We Collect 

We collect the minimum information needed to take orders, ship rings, communicate with customers, and run the business responsibly. The categories of personal information we collect are described below. 

1.1 Account Information 

Name, email address, password (stored as a secure hash), and shipping and billing addresses provided when creating an account or placing an order. 

1.2 Order Information 

Product selections, order history, payment confirmation details, and shipping tracking information. Full payment card details are processed by our payment providers and are not stored by OLVR. 

1.3 Preference Capture Data 

Information submitted through the OLVR Preference Capture Tool, including ring size, preferred stone shape, metal preference, and style. This information is submitted by one partner and used to inform recommendations to the purchasing partner. 

1.4 Communications 

Messages sent to OLVR via email, chat, SMS, or social media. Reviews and feedback submitted to the Site. Records of phone calls if you request a consultation. 

1.5 Marketing Preferences 

Whether you have opted in to email or SMS marketing, your communication preferences, and engagement data such as opens and clicks. 

1.6 Browsing and Device Data 

IP address, device type, browser, operating system, pages viewed, time on site, referring URLs, and similar technical data collected automatically when you use the Site. 

1.7 Cookies and Identifiers 

Cookies, pixels, and similar technologies that identify your browser or device, as detailed in Section 5. 

1.8 User-Generated Content 

Reviews, photos, social media posts that tag OLVR, and any other content you submit or publish about OLVR. The use of this content is governed by our Terms and Conditions. 

OLVR does not knowingly collect information from individuals under 18 years of age, or under the age of majority in their jurisdiction, whichever is greater. If we learn we have collected such information, we will delete it. 

2. How We Collect Information 

We collect personal information in four ways: 

Directly from you. When you create an account, place an order, submit the Preference Capture Tool, contact support, sign up for email or SMS, leave a review, or otherwise interact with us, you provide personal information directly. 

Automatically. When you use the Site, we automatically collect technical and behavioural data through cookies, pixels, and similar technologies. This is described in detail in Section 5. 

From third parties. We may receive information from payment processors (to confirm payment), shipping carriers (for tracking), and third-party platforms when you interact with OLVR through them, for example by tagging OLVR in a social media post or clicking an OLVR ad. 

From other people. If a partner submits the Preference Capture Tool with your contact information, we collect that information from them. We use it only to facilitate the experience between the two of you, as described in our communications. 

We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

3. Why We Collect Information 

Every piece of personal information we collect serves at least one of these purposes: 

To take and fulfil your order. We need name, address, payment confirmation, and contact information to build and ship your ring. 

To communicate with you. Order updates, shipping notifications, support responses, and any communication about your purchase or account. 

To run the Preference Capture Tool. The tool requires both partners’ inputs to function as intended. 

To send marketing communications, with your consent. Email or SMS about new products, promotions, and brand stories. You can opt out at any time, as detailed in Section 6. 

To improve the Site and our products. Aggregated and anonymised analytics help us understand what works, what does not, and what to build next. 

To prevent fraud and protect security. Verifying orders, detecting unusual account activity, and protecting against unauthorised access. 

To meet legal and regulatory obligations. Tax records, anti-money-laundering requirements, customs documentation, and responding to lawful requests from authorities. 

To enforce our Terms. Investigating and addressing violations of our Terms and Conditions. 

4. Who We Share Information With 

OLVR does not sell or rent your personal information. We share data only with the partners listed below, only for the purposes listed, and only under contracts that require them to protect it. 

4.1 Service Providers 

We share necessary information with trusted partners who help us run the business: 

Shopify — our e-commerce platform, which hosts the Site and processes orders 

Klaviyo — our email and SMS marketing platform, and our customer engagement analytics provider 

Google Analytics — for understanding how visitors use the Site, in aggregated form 

Meta (Facebook, Instagram) — for advertising attribution and conversion measurement, via the Meta Pixel 

Payment processors — including Shopify Payments and other card networks, to process payment securely. OLVR does not store full card details. 

Shipping partners — including FedEx, UPS, and other insured couriers, to deliver your ring 

Manufacturing partners — receive only the production specifications needed to fulfil the order 

Diamond suppliers — receive only the specifications needed to identify and ship the correct stone 

Customer service tools — including help desk software used to respond to inquiries 

4.2 Relationship with Shopify 

The Site is hosted by Shopify Inc. ("Shopify"). To enable OLVR to provide the Services, Shopify collects and processes personal information about your access to and use of the Site, including transaction data, account information, browsing data, and information collected through cookies and similar technologies. Information you submit to the Site is transmitted to and shared with Shopify and may be processed by Shopify or its sub-processors in countries other than where you reside. 

In addition, OLVR uses certain enhanced Shopify features, including fraud prevention, personalised advertising, and the Shop Pay accelerated checkout network, that combine data from your interactions with the Site with data from your interactions with other Shopify-powered merchants. For these features, Shopify acts as a separate data controller and is responsible for the processing of your personal information, including responding to your requests to exercise your rights related to that processing. 

To learn more about how Shopify uses your personal information and the rights you may have, you can review the Shopify Consumer Privacy Policy at privacy.shopify.com. Depending on where you live, you may also exercise certain rights with respect to Shopify’s processing of your personal information through the Shopify Privacy Portal. 

4.3 Legal and Safety 

We may share information when required by law, in response to a lawful subpoena or court order, or to protect the rights, property, or safety of OLVR, our customers, or the public. Where legally permitted, we will notify you before disclosing your information in response to a legal request. 

4.4 Business Transfers 

If OLVR is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred to the successor entity. Any such successor will be required to honour the commitments made in this Privacy Policy or to provide notice and choice if material changes are made. 

4.5 A Note on "Selling" Data 

OLVR does not sell personal information for money. Under California’s broad legal definition of "sale," sharing data with advertising partners such as Meta for targeted advertising may be considered a "sale" or "sharing." We have addressed this in Section 10 with specific opt-out instructions for California residents. 

5. Cookies and Tracking Technologies 

OLVR uses cookies, pixels, and similar technologies to operate the Site, remember your preferences, measure usage, and deliver advertising. 

5.1 Categories of Cookies 

Strictly necessary. Required for core functions like maintaining your cart, processing checkout, and keeping you logged in. These cannot be disabled without breaking the Site. 

Performance and analytics. Help us understand how the Site is used so we can improve it. Includes Google Analytics and similar tools. 

Marketing and advertising. Used to deliver relevant ads and measure their effectiveness. Includes the Meta Pixel and Klaviyo tracking. 

Functional. Remember preferences such as your region and any saved configurations in the ring builder. 

5.2 Managing Cookies 

Most browsers allow you to view, manage, delete, and block cookies through browser settings. Disabling certain cookies may limit your ability to use parts of the Site. For details on a specific browser, see its support documentation. 

5.3 Cookie Preferences 

OLVR is implementing a Cookie Preferences tool to allow you to grant or withdraw consent for each category of non-essential cookies described above. Once available, the tool will be accessible from a footer link on every page of the Site, and your preferences will apply across your future visits. 

5.4 Global Privacy Control and Do Not Track 

OLVR honours the Global Privacy Control ("GPC") signal where required by applicable law. If you visit the Site with GPC enabled in your browser, OLVR will treat that signal as a request to opt out of the sale or sharing of personal information for the device and browser you are using. Where OLVR or our service providers (including Shopify) are able to associate the device sending the signal with an OLVR account, the opt-out request will also be applied to that account. To learn more about Global Privacy Control, visit globalprivacycontrol.org. 

Other than the Global Privacy Control signal, OLVR does not currently recognise other "Do Not Track" signals that may be sent from your web browser or device. Industry standards on how to interpret these signals are not settled. 

6. Email and SMS Marketing 

OLVR sends marketing email and SMS only to customers who have given express consent. Transactional communications related to your order or account are sent regardless of marketing opt-in, because they are necessary to fulfil our agreement with you. 

6.1 Email Marketing 

If you opt in to email marketing, OLVR will send communications about new products, promotions, brand stories, and educational content. Every marketing email contains a one-click unsubscribe link. Once you unsubscribe, OLVR will stop sending marketing email; transactional and account-related emails will continue. 

OLVR’s email practices comply with Canada’s Anti-Spam Legislation (CASL) and the U.S. CAN-SPAM Act. Express consent is required, recorded, and retained. 

6.2 SMS Marketing 

If you opt in to SMS marketing by providing your phone number and confirming consent, you may receive promotional messages from OLVR. Message and data rates may apply. Message frequency varies. Reply STOP to unsubscribe at any time. Reply HELP for support. 

OLVR’s SMS practices comply with applicable telecommunications and consumer protection laws, including the U.S. Telephone Consumer Protection Act (TCPA) and CASL. 

6.3 Withdrawing Consent 

You can withdraw marketing consent at any time: 

Click "unsubscribe" at the bottom of any marketing email 

Reply STOP to any marketing SMS 

Update preferences in your account dashboard 

Email hello@olvrjewelry.com and we will process the change manually 

Withdrawal of marketing consent does not affect your account, your order history, or your ability to receive transactional communications about purchases or account activity. 

7. Data Retention 

OLVR retains personal information only as long as necessary for the purposes described in this policy or as required by law: 

Account information — for the life of your account, plus a reasonable period after account closure for legal and audit purposes 

Order records — at least seven years from the date of purchase, to meet tax, accounting, and warranty obligations 

Preference Capture submissions — for the duration of your relationship with OLVR, or until you request deletion 

Marketing data — until you withdraw consent, after which we retain only the record of withdrawal as proof 

Browsing and analytics data — typically retained in identifiable form for up to 26 months by Google Analytics, with aggregated reports retained longer 

Customer support records — for at least three years after the most recent interaction 

When personal information is no longer required, we securely delete or anonymise it. Data retained for legal obligations is restricted from active use until the retention period ends. 

8. Security 

OLVR implements reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, theft, unauthorised access, disclosure, alteration, and destruction. These include: 

Encryption of data in transit using industry-standard TLS 

Encryption of sensitive data at rest where supported by our service providers 

Access controls limiting employee and contractor access to personal information on a need-to-know basis 

Regular review of security practices and provider agreements 

No system is perfectly secure. While we work to protect your information, we cannot guarantee absolute security. If you believe your account or personal information has been compromised, contact us immediately at hello@olvrjewelry.com. 

In the event of a data breach affecting your personal information, OLVR will notify you and applicable regulators in accordance with the breach-notification requirements of PIPEDA, Quebec’s Law 25, applicable U.S. state laws, and other relevant regulations. 

9. Your Rights 

Privacy law in your jurisdiction grants you specific rights over the personal information OLVR holds about you. OLVR honours these rights regardless of where you live. 

9.1 Universal Rights 

Access. Request a copy of the personal information we hold about you. 

Correction. Request that we correct information that is inaccurate, incomplete, or out of date. 

Deletion. Request that we delete personal information, subject to exceptions for legal retention obligations. 

Withdrawal of consent. Withdraw consent for marketing or any other processing based on consent, at any time. 

Portability. Receive your information in a structured, commonly used, machine-readable format. 

Non-discrimination. Exercise your privacy rights without being denied service, charged different prices, or receiving a lower quality of service from OLVR. 

9.2 How to Exercise Your Rights 

To make a request, contact OLVR at hello@olvrjewelry.com from the email address associated with your account, or by mail at the address in Section 11. Include the right you wish to exercise and any details that will help us identify your records. 

OLVR will respond within the timeframes required by applicable law, typically within 30 days, with the possibility of a single 30-day extension for complex requests, with notice. We may need to verify your identity before fulfilling certain requests, particularly for access and deletion. If we deny a request, we will explain the reason. 

9.3 Right to Appeal 

If OLVR denies your request to exercise a privacy right, you may appeal the decision where applicable law grants you a right of appeal. Privacy laws in Virginia, Colorado, Connecticut, and certain other U.S. states require businesses to provide an appeal mechanism. To appeal a denied request, reply to OLVR’s denial notice or contact us at hello@olvrjewelry.com with the subject line "Privacy Request Appeal." OLVR will review the appeal and respond within the timeframes required by applicable law, typically within 60 days. If your appeal is also denied, you may file a complaint with your applicable privacy regulator, as described below. 

9.4 Authorised Agents 

You may authorise an agent to make a request on your behalf. We will require proof of authorisation and may need to verify the identity of both you and your agent. 

9.5 Complaints 

If you are not satisfied with how OLVR has handled your personal information or a privacy request, you have the right to file a complaint with the privacy regulator in your jurisdiction, including: 

Office of the Privacy Commissioner of Canada (PIPEDA) 

Commission d’accès à l’information du Québec (Quebec Law 25) 

California Privacy Protection Agency (CCPA/CPRA) 

Or the equivalent regulator in your state or province 

10. Region-Specific Disclosures 

10.1 For Residents of Canada (PIPEDA) 

OLVR complies with the Personal Information Protection and Electronic Documents Act (PIPEDA). Our Privacy Officer is responsible for OLVR’s compliance with PIPEDA and can be contacted at hello@olvrjewelry.com. 

10.2 For Residents of Quebec (Law 25) 

OLVR complies with Quebec’s Act respecting the protection of personal information in the private sector, as amended ("Law 25"). In addition to the universal rights described in Section 9, Quebec residents have: 

The right to know the categories of personal information collected, the purposes, the methods of collection, and the third parties to whom information is communicated 

The right to data portability — to receive their personal information in a structured, commonly used technological format 

The right to be informed if a decision based exclusively on automated processing is made about them, and to request human review of such decisions 

The right to deindexing or "right to be forgotten" in certain circumstances 

Our Privacy Officer for the purposes of Law 25 is reachable at hello@olvrjewelry.com. 

10.3 For Residents of California (CCPA/CPRA) 

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), provides you with additional rights: 

Right to know. The categories and specific pieces of personal information OLVR has collected about you in the past 12 months, the sources, the purposes, and the categories of third parties to whom we have disclosed it. 

Right to delete. Subject to legal retention exceptions. 

Right to correct. Inaccurate personal information. 

Right to opt out of sale or sharing. Although OLVR does not sell personal information for money, sharing data with advertising partners (such as Meta) for targeted advertising may qualify as "sharing" under California law. To opt out, email hello@olvrjewelry.com with "Do Not Sell or Share My Personal Information" in the subject line, or use the Cookie Preferences tool when available. 

Right to limit use of sensitive personal information. OLVR does not use sensitive personal information for purposes beyond those permitted by CPRA. 

Right to non-discrimination. For exercising your CCPA/CPRA rights. 

10.4 For Residents of Other U.S. States with Privacy Laws 

Residents of states with comprehensive privacy laws — including Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and others as enacted — have rights similar to those described above, including access, deletion, correction, and opt-out of targeted advertising. To exercise these rights, contact hello@olvrjewelry.com. 

11. Contact and Updates 

11.1 Contact 

For privacy questions, requests, or concerns, contact OLVR’s Privacy Officer: 

OLVR Inc. 

Attention: Privacy Officer 

Email: hello@olvrjewelry.com 

11.2 Changes to This Policy 

OLVR may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. Material changes will be communicated by email to active customers and posted prominently on the Site. The "Last updated" date at the top of this policy reflects the most recent revision. 

The version of this policy posted on the Site at the time of your interaction is the version that applies to that interaction. Continued use of the Site after a material change indicates acceptance of the updated policy, except where applicable law requires fresh consent. 

11.3 International Data Transfers 

OLVR is based in Canada. Some of our service providers — including Shopify, Klaviyo, Google, and Meta — operate from or transfer data to the United States and other jurisdictions. By using the Site, you acknowledge that your personal information may be transferred to and processed in jurisdictions outside your home country. 

OLVR uses service providers who maintain protections substantially equivalent to those required under Canadian privacy law (PIPEDA and Quebec Law 25) and applicable U.S. state privacy law. Where personal information is transferred from the European Economic Area or the United Kingdom (for example, by our service providers in the course of processing data on our behalf), OLVR or its service providers rely on recognised transfer mechanisms, including the European Commission’s Standard Contractual Clauses or equivalent contracts issued by the competent authority of the United Kingdom, unless the data transfer is to a country that has been determined to provide an adequate level of protection.