Privacy policy
Last updated: September 9, 2026
This policy follows your personal information through its whole life with us: how it's collected, what it's used for, who else sees it, where it's stored, when it's deleted, and how you control it at every step. Cora Mae Pearl is responsible for all of it.
We don't sell your personal information for money. Advertising cookies do pass browsing data to ad partners, which some state laws call "sharing" or a "sale"; you can turn that off in one click (section 6).
Who is responsible
| Store | Cora Mae Pearl, at madebycoramaepearl.com |
| Legal entity | Cora Mae Pearl |
| Business address | 100 Oakbrook Center, Oak Brook, IL 60523, United States |
| support@madebycoramaepearl.com | |
| Customer service hours | Monday–Friday, 9:00 AM–5:00 PM CT |
| Response time | Within 2 business days |
Privacy questions and requests go to the email above with "Privacy" in the subject line.
1. Collected
When you order: name, email, phone number, billing and shipping address, what you bought (including sizes and engravings you specified), payment confirmation, and what happens afterward: delivery, returns, refunds.
When you pay: your card number goes directly into the payment processor's secure form and never reaches our servers. We receive a confirmation, the card type and the last four digits.
When you ask for help choosing: a ring size, a chain length, a photo of what you'll wear a piece with. We use it only to answer, it isn't added to a profile, and it's deleted with the support conversation. If you mention a reaction to a metal, we use that only to give you the composition you asked about and don't keep it.
If you create an account: email, encrypted password, saved addresses and order history. Accounts are optional.
When you contact us: whatever you write, your email address, and any photos you attach.
When you browse: IP address, browser and device type, operating system, the pages and products you view, what you add to your cart, and whether you open our emails or click our ads. Most of this depends on the cookie choices you make (section 6).
From other companies: the payment processor's fraud-check result, the carrier's delivery status, and Shopify's technical logs about how the store is used.
What we don't collect. Social Security numbers, government ID numbers, health information, precise location, or biometric identifiers. We do not collect, capture or store fingerprints, face geometry, voiceprints or any other biometric information, and if that ever changed we would first provide the written notice and obtain the written release required by the Illinois Biometric Information Privacy Act (BIPA).
2. Used
| Purpose | Basis |
|---|---|
| Taking your order, shipping it, handling returns and refunds | Performing our contract with you |
| Answering your questions and sizing requests | Performing our contract with you |
| Running your account | Performing our contract with you |
| Detecting fraud and securing the site | Our legitimate interest in protecting customers and the business |
| Understanding how the site is used and fixing what breaks | Our legitimate interest, and your consent where cookies are involved |
| Marketing email and texts | Your consent, or where the law permits after a purchase, with an opt-out in every message |
| Measuring and targeting advertising | Your consent |
| Tax, accounting and legal recordkeeping | Legal obligation |
We don't make decisions about you that are fully automated and have legal or similarly significant effects. The payment processor's fraud screening may decline a transaction automatically; if that happens, contact us and a person will review it.
3. Shared
Only with the companies that help us run the store, and only what each needs for its part:
- Shopify, which hosts the store and processes payments through Shopify Payments. For services that run across many stores, such as Shop Pay and Shopify's fraud protection, Shopify is itself responsible for the data under its own consumer privacy policy.
- Other payment providers you choose at checkout, such as PayPal, Apple Pay or Google Pay
- Carriers and fulfillment partners, who receive your name, address, phone and email to deliver and send updates
- Email and SMS providers
- Analytics and advertising partners, such as Google and Meta, when your cookie settings allow it
- Accountants, lawyers and IT providers, for the records and systems the business needs
We also disclose information when the law requires it, to respond to a subpoena, court order or lawful government request, or to protect our rights, our customers or public safety. If the business is sold or merged, customer records transfer with it and the new owner takes on this policy.
Categories disclosed in the past 12 months, for the purposes above: identifiers (name, email, phone, address, IP address), customer records (order and payment confirmation), commercial information (purchase and support history), internet activity (browsing data on our site), and approximate location derived from IP address.
4. Stored
Traffic to and from the store is encrypted with TLS. Card numbers never reach our systems, because payment is handled by a PCI DSS-certified processor. Access to customer data is limited to the people who need it and protected by two-factor authentication.
Some of our providers, including fulfillment partners, operate outside the United States, and your information may be processed in those countries to run the store and deliver your order.
No system is completely secure. If a breach affects your personal information, we'll notify you without unreasonable delay, as the Illinois Personal Information Protection Act and the breach notification law of your own state require.
5. Deleted
| Information | Kept for |
|---|---|
| Orders, invoices, payment confirmations | 7 years, for tax and accounting |
| Return and dispute records | Until closed, then as long as a claim could be brought |
| Sizing and styling questions | The duration of the conversation, then deleted with the support thread |
| Account | Until you delete it, or after 3 years without a login |
| Marketing list | Until you unsubscribe; we keep the unsubscribe itself so we don't email you by mistake |
| Support emails | 2 years after the last message |
| Analytics and advertising data | Up to 26 months, less where the tool allows |
| Fraud screening records | 3 years |
While a dispute or legal claim is open, the relevant records stay. After that, information is deleted or stripped of anything that identifies you.
6. Controlled by you
Cookies.
| Type | What it does | Your choice |
|---|---|---|
| Essential | Cart, checkout, login, security, remembering your cookie choice | Always on; the store can't work without them |
| Functional | Remembers preferences such as region and currency | Optional |
| Analytics | Measures traffic, pages and errors, for example through Google Analytics | Optional |
| Advertising | Measures our ads and shows you relevant ones elsewhere, through partners such as Google and Meta | Optional |
Set your preferences in the banner on your first visit and change them any time through the "Cookie preferences" link in the footer or in your browser. Blocking essential cookies stops checkout from working.
Selling and sharing. When advertising cookies are enabled, browsing data from our site reaches advertising partners so we can measure and target ads, and California and several other states treat that as "sharing" or a "sale." To opt out: click "Do Not Sell or Share My Personal Information" in the footer of any page, change your cookie preferences, turn on Global Privacy Control in your browser (we honor it for that browser and device), or email support@madebycoramaepearl.com. Opting out affects browsing data only. We don't knowingly sell or share the personal information of anyone under 16.
Marketing. If you opt in, or after a purchase where the law permits, we email you about new pieces and offers; every marketing email has an unsubscribe link that works immediately, and we follow the CAN-SPAM Act. If you enter your mobile number and check the SMS box, you consent to texts that may include order updates, cart reminders and offers; consent to marketing texts is never a condition of purchase, message frequency varies, message and data rates may apply, and you can reply STOP at any time or HELP for help. Order and delivery messages are sent regardless, because we need them to complete your purchase.
Your rights. Depending on where you live, you may have the right to access what we hold about you, correct it, delete it (except records the law requires us to keep), receive a copy in a portable format, opt out of targeted advertising and of the sale or sharing of your information, limit the use of sensitive information (which we don't collect), withdraw consent to marketing, appeal if we decline a request, and be treated the same whether or not you exercise these rights.
California residents have these rights under the CCPA/CPRA, including the right to know the categories of information collected, used and disclosed in the past 12 months (sections 1 and 3). Illinois residents are protected by BIPA (section 1) and the Illinois Personal Information Protection Act (section 4), and can bring complaints to the Illinois Attorney General. Residents of Virginia, Colorado, Connecticut, Texas, Oregon, Montana, Minnesota, Delaware, New Jersey, Maryland and other states with comprehensive privacy laws have substantially similar rights.
To make a request, email support@madebycoramaepearl.com with "Privacy Request" in the subject line. We'll confirm it's you, usually by matching details from a recent order, and respond within 45 days; for complex requests we may take up to 45 more days and will tell you why. An authorized agent may act for you with written proof of authorization. There's never a charge.
Children
The store is for adults. We don't knowingly collect personal information from children under 13, in line with COPPA, and we delete it if we learn we have. If you believe a child has given us information, contact us.
Links to other sites
Links on our site, including carrier tracking pages and payment providers, lead to sites we don't control. This policy stops at our site; read theirs before sharing anything with them.
Complaints
Contact us first; most things are resolved directly. If our answer doesn't satisfy you, you can appeal by replying to it, or contact the Illinois Attorney General or the attorney general of your own state.
Changes to this policy
We update this policy when our practices or the law change. The current version is always here, with the date at the top. If a change materially affects you, we'll announce it on the site or by email before it takes effect.
Contact
Cora Mae Pearl 100 Oakbrook Center, Oak Brook, IL 60523, United States support@madebycoramaepearl.com Monday–Friday, 9:00 AM–5:00 PM CT · Replies within 2 business days