Eternity's Touch

1. Who We Are

Eternity's Touch, Inc. is responsible for the personal information we collect and use through our websites, stores, applications, products, and services.

For privacy questions or requests, you may contact our Privacy Officer at:

• Email: privacy@eternitystouch.com
• Telephone: +1 (519) 627-1919

2. Personal Information We Collect

We collect personal information that you provide to us, that is created when you use our services, or that is necessary for us to provide our products and services.

Depending on how you interact with us, this may include:

• name;
• billing, shipping, and contact information;
• email address and telephone number;
• account login and authentication information;
• order details, product selections, personalization details, and customer service history;
• payment-related information processed through our payment providers;
• employment or business contact information, where relevant;
• IP address, device information, browser information, and basic website usage information;
• biometric or similar personalization data, such as fingerprints, handprints, footprints, images, or other personal materials, where you choose to provide them for a product, service, or order; and
• any other information you choose to provide to us.

We do not require you to provide more personal information than is reasonably necessary for the product, service, order, request, or interaction involved.

3. How We Collect Personal Information

We may collect personal information when you:

• create or access an account;
• place an order;
• request information from us;
• ask us to send information to another person;
• contact customer service;
• submit personalization materials for a product or service;
• subscribe to communications;
• interact with our websites, stores, applications, or services; or
• communicate with us by email, telephone, web form, or other means.

4. Why We Use Personal Information

We use personal information for the following purposes:

• to provide secure access to personal or company accounts;
• to process, fulfill, archive, and support orders;
• to create, personalize, deliver, and support products and services;
• to respond to questions, requests, complaints, or customer service inquiries;
• to send information that you request;
• to send information to another person at your request;
• to send service, transactional, administrative, and account-related communications;
• to send marketing communications where permitted by law or with your consent where required;
• to improve, maintain, secure, and troubleshoot our websites, stores, applications, products, and services;
• to prevent fraud, abuse, unauthorized access, and misuse;
• to comply with legal, regulatory, tax, accounting, and operational obligations;
• to establish, exercise, or defend legal rights; and
• for other purposes that we identify at or before the time of collection, or that are otherwise permitted or required by law.

5. Consent and Legal Basis

Where consent is required, we collect, use, or disclose personal information with your consent. Your consent may be express or implied, depending on the circumstances and applicable law.

Where applicable law permits or requires another legal basis, we may rely on one or more of the following:

• performance of a contract or steps taken before entering a contract;
• compliance with a legal obligation;
• our legitimate interests, provided those interests are not overridden by your rights and interests;
• consent;
• protection of vital interests, where applicable; or
• another lawful basis recognized by applicable law.

You may withdraw consent where our processing is based on consent. Withdrawal of consent does not affect processing that occurred before withdrawal and may affect our ability to provide certain products or services.

6. Biometric and Personalization Data

Some of our products or services may involve biometric or similar personalization data, such as fingerprints, handprints, footprints, photographs, images, impressions, or other personal materials.

We use this information only for the purpose for which it was provided, such as creating, personalizing, fulfilling, supporting, or archiving an order, unless we obtain your consent or are otherwise permitted or required by law.

We do not sell biometric or personalization data.

We do not use biometric or personalization data for third-party advertising or social media tracking.

7. Marketing Communications

We may send marketing communications where permitted by law or where you have consented to receive them.

You may unsubscribe from marketing communications by using the unsubscribe instructions in the message or by contacting us. Even if you unsubscribe from marketing communications, we may still send transactional, service, account, order, legal, or administrative communications.

8. When We Share Personal Information

We do not sell personal information.

We may disclose personal information only where reasonably necessary for the purposes described in this policy, including to:

• payment processors;
• shipping and delivery providers;
• hosting, storage, cloud productivity, design, security, backup, communications, and technology service providers;
• customer support, communications, and order-management providers;
• professional advisors, such as legal, accounting, insurance, or audit providers;
• government, regulatory, law enforcement, or other authorities where required or permitted by law;
• another person or organization at your request or with your consent; or
• another organization in connection with a business transaction, such as a merger, financing, restructuring, sale, or transfer of all or part of our business, subject to appropriate safeguards.

Examples of specialized production partners may include Verre Serenity Glass, Remembrance Diamonds Corporation, Algordanza AG, or similar partners used to produce, personalize, fulfill, or support an order.

We provide these partners only the personal information reasonably necessary for their role, such as order details, contact or delivery information, personalization instructions, and materials needed to produce the requested product or service.

We require service providers and production partners to use personal information only as necessary to provide services to us or fulfill the applicable order, and to protect it using appropriate safeguards.

9. International Transfers

We are based in Canada, but our service providers, systems, and business operations may involve processing or storage of personal information in Canada, the United States, the United Kingdom, or other jurisdictions.

When personal information is transferred or processed outside your jurisdiction, it may be subject to the laws of the jurisdiction where it is located. We use reasonable contractual, technical, and organizational safeguards to protect personal information involved in international transfers.

10. Cookies and Similar Technologies

Our websites may use cookies and similar technologies to operate properly, preserve sessions, remember preferences, maintain security, prevent fraud, and improve reliability.

We may use the following types of cookies:

• Necessary cookies: required for core website functions, such as page navigation, secure areas, account access, shopping cart functions, checkout, and session management.
• Preference cookies: used to remember choices such as language, region, display, or font-size preferences.
• Security and operational cookies: used to protect the website, detect misuse, maintain logs, and support reliable operation.

We do not use third-party advertising cookies or social media tracking cookies.

We do not share cookie-derived information with social media or advertising partners for cross-context behavioural advertising.

You can control cookies through your browser settings. If you disable necessary cookies, parts of the website may not function properly.

11. Analytics and Website Logs

We may collect basic technical information through server logs and operational tools, such as IP address, browser type, device information, pages requested, timestamps, and error logs.

We use this information to operate, secure, diagnose, and improve our websites and services.

We do not use global third-party advertising or social media tracking analytics.

12. Security Safeguards

We use reasonable technical, organizational, and physical safeguards designed to protect personal information against loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction.

No system, transmission, or storage method is completely secure. If we identify a privacy or security incident that requires notice under applicable law, we will provide notice as required.

13. Retention

We keep personal information only as long as reasonably necessary for the purposes described in this policy or as required or permitted by law.

Retention periods may depend on the type of information, the nature of the order or service, legal and accounting requirements, warranty or support needs, dispute-resolution needs, and whether the information is required to maintain accurate business records.

When personal information is no longer needed, we will delete, anonymize, or securely retain it in accordance with applicable law and our internal practices.

14. Accuracy

We take reasonable steps to keep personal information accurate, complete, and up to date for the purposes for which it is used.

You may contact us to request correction of personal information that you believe is inaccurate or incomplete.

15. Your Privacy Choices and Rights

Depending on where you live and the law that applies, you may have the right to:

• request access to personal information we hold about you;
• request correction of inaccurate or incomplete personal information;
• request deletion of personal information;
• withdraw consent, where processing is based on consent;
• object to or restrict certain processing;
• request portability of certain information;
• opt out of certain marketing communications;
• opt out of certain sale, sharing, or targeted advertising activities, where applicable; and
• make a complaint to us or to a privacy regulator.

We may need to verify your identity before responding to a privacy request. We may refuse or limit a request where permitted or required by law, such as where information must be retained for legal, security, accounting, dispute-resolution, fraud-prevention, or legitimate business purposes.

16. Children

Our websites, stores, applications, products, and services are not directed to children. We do not knowingly collect personal information from children without appropriate consent where required by law.

If you believe a child has provided personal information to us without appropriate consent, please contact us.

17. Links to Other Websites

Our websites may contain links to third-party websites or services. We are not responsible for the privacy practices, policies, or content of third-party websites or services.

We encourage you to review the privacy policy of any third-party website or service before providing personal information.

18. Complaints and Questions

If you have questions, concerns, or complaints about this policy or our handling of personal information, please contact our Privacy Officer at:

• Email: privacy@eternitystouch.com
• Telephone: +1 (519) 627-1919

We will review and respond to privacy complaints in accordance with applicable law.

19. Changes to This Policy

We may update this Global Privacy Policy from time to time.

When we update this policy, we will make the updated version available on our website and update the "Last updated" date. Where required by law, we will provide additional notice or request consent for material changes.

20. Country-Specific Rights

The rights and obligations in this section apply where the laws of the relevant country, province, state, or region apply to you. These sections are part of this Global Privacy Policy.

If there is a conflict between a general section of this policy and a country-specific section that applies to you, the country-specific section will apply to the extent of the conflict.

21. Language

Where we make this policy available in more than one language, the versions are intended to be equivalent and should be read together consistently.

If you have questions about a translated version of this policy, please contact us at privacy@eternitystouch.com.