Privacy policy
This policy explains what personal information Salinas collects, why we collect it, who we share it with, how long we keep it, and what you can ask us to do with it. It covers wearsalinas.com and every way you interact with us: browsing, ordering, emailing us, subscribing to our list, and seeing our advertising.
Where the law in your country gives you specific rights, those are set out in Section 11 by country rather than buried in a single paragraph.
1. Who is responsible for your information
Salinas is a trading name of Salmeia Group LLC, a limited liability company registered in the State of Wyoming, United States. Salmeia Group LLC is the data controller for the personal information described in this policy — the company that decides what is collected and why.
Registered office: 30 N Gould St Ste R, Sheridan, WY 82801, USA Email: hello@salinas-jewelry.com
For privacy questions specifically, write to hello@salinas-jewelry.com with "Privacy" in the subject line. Whichever country you live in, that address reaches the people who can act on your request.
2. What we collect
Information you give us
- Order and contact details: your name, email address, delivery address, billing address and phone number.
- Payment details: your payment method, the last four digits of your card, the card brand, and the billing address. We never receive or store your full card number, expiry date or security code — those pass directly from you to our payment provider.
- Account details, if you create one: your email address, an encrypted password and your saved addresses.
- Correspondence: what you write to us by email or through the contact form, including any photographs you send with a return or warranty claim.
- Marketing preferences: whether you have subscribed and what you have chosen to receive.
- Reviews and content you choose to submit.
Information collected automatically
- Device and connection data: your IP address, browser type, operating system, device type, language and approximate location derived from your IP address.
- Usage data: the pages you view, the products you look at, what you add to your cart, how you arrived at the site, and how long you stay.
- Cookie and pixel data: identifiers set by us and by the third parties listed in Section 6.
Information from others
- Payment and fraud providers: confirmation that a payment succeeded, and a fraud risk assessment.
- Carriers and our fulfillment partners: tracking events and delivery confirmations.
- Advertising and analytics platforms: aggregated performance data, and in some cases a match confirming that an advertisement led to a visit.
3. Why we use it, and on what legal basis
The "legal basis" column matters primarily under UK data protection law; the purposes themselves apply everywhere.
| What we do | Why | Legal basis (UK) |
|---|---|---|
| Process and deliver your order, handle returns, exchanges and refunds | To do what you have paid us to do | Performance of a contract |
| Answer your emails | To provide customer service | Contract, and our legitimate interest in supporting customers |
| Take payment and screen for fraud | To get paid and to prevent fraudulent orders and chargebacks | Contract, and our legitimate interest in preventing fraud |
| Keep accounting, tax and customs records | Because the law requires it | Legal obligation |
| Send order confirmations, dispatch notices and other service messages | To keep you informed about your order | Contract |
| Send marketing emails | To tell you about new pieces and offers | Consent, or our legitimate interest where you are an existing customer and can opt out at any time |
| Show you advertising on other websites and apps, and measure whether it worked | To find new customers and spend our advertising budget sensibly | Consent, for the cookies and similar technologies involved |
| Analyse how the site is used and improve it | To fix what does not work and build what does | Consent for analytics cookies; legitimate interest for aggregated reporting |
| Keep the site secure and available | To protect the site and your data | Legitimate interest, and legal obligation |
| Deal with complaints, disputes and legal claims | To resolve problems and defend our position | Legitimate interest, and legal obligation |
Where we rely on a legitimate interest, we have considered whether it is fair to you and you can object at any time. Where we rely on consent, you can withdraw it at any time without affecting what was done beforehand.
We do not make decisions about you by automated means that produce legal or similarly significant effects. Our fraud screening scores an order, but a person reviews anything flagged before we decline it.
4. What we do not do
- We do not sell your personal information for money.
- We do not rent or trade our customer list.
- We do not use your photographs or correspondence for marketing without asking you first.
- We do not knowingly collect information from children — see Section 10.
Please note that sharing data with advertising platforms in order to show you relevant ads can amount to a "sale" or "sharing" under some United States state privacy laws, even though no money changes hands. Section 11 explains how to opt out.
5. Who we share it with
We share personal information only with providers who need it to do a job for us, and only as much of it as that job requires. Each is bound by contract to protect it and to use it only on our instructions.
Running the shop
- Shopify Inc. — the ecommerce platform this store runs on, including hosting, order management and the customer account system. Shopify also processes some data as a controller in its own right; see the Shopify Consumer Privacy Policy.
Payment
- Shopify Payments and the wallet and card providers shown at checkout — card processing, wallet payments and fraud screening.
Fulfillment and delivery
- Our fulfillment partners, which pick, pack and dispatch your order. They receive your name, delivery address, phone number and order contents.
- Carriers and postal services, depending on destination.
- Customs authorities, which receive the declaration accompanying your parcel.
Email marketing
- Klaviyo — marketing and transactional email. Receives your email address, name and purchase history.
Reviews
- Reviews.io — collecting and displaying customer reviews.
Advertising and analytics
- Google — Google Analytics and Google Ads (conversion tag AW-18066666142). Used to measure traffic and advertising performance. Opt out at tools.google.com/dlpage/gaoptout.
- Meta Platforms — the Meta Pixel, for advertising on Facebook and Instagram and measuring its results. Opt out at facebook.com/ads/preferences.
Other
- Professional advisers — accountants and lawyers, where genuinely needed.
- Authorities — where we are legally required to disclose information, or need to establish or defend a legal claim.
- A buyer of our business, if Salmeia Group LLC or the Salinas brand is ever sold or reorganised. You would be told before your information moved to a new controller.
This list changes as we change tools. We update this page when it does, and the "last updated" date below tells you when we last did.
Sharing data with advertising platforms (Meta, Google) may be considered a "sale" or "sharing" of personal information under California law. You can opt out via our Your Privacy Choices page [link to be added].
6. Cookies and similar technologies
Cookies are small files stored on your device. We use them in four ways:
- Strictly necessary. Keeping you logged in, remembering your cart, processing checkout, load balancing and security. The site cannot work without these and they are not optional.
- Functional. Remembering your currency and language, and whether you have dismissed a message.
- Analytics. Understanding which pages are used, via Google Analytics.
- Advertising. Measuring which advertisements lead to visits and orders, and showing you relevant advertising on other sites. These are set by Google and Meta.
Where the law requires it — including in the United Kingdom under the Privacy and Electronic Communications Regulations — we ask for your consent before setting any cookie that is not strictly necessary, and you can accept, reject or change your choices at any time through the cookie settings on this site.
You can also block or delete cookies in your browser settings. Blocking strictly necessary cookies will stop the shop from working.
- Google Analytics: the Google Analytics opt-out browser add-on.
- Google advertising: your Google Ads Settings.
- Meta: your Facebook or Instagram ad preferences.
Global Privacy Control. If you visit our website with the Global Privacy Control opt-out preference signal enabled, depending on where you are, we will automatically treat this as a request to opt out for the device and browser you use to visit the website. If we are able to associate the device sending the signal to a Shopify account, we will apply the opt-out request to the account as well. To learn more about Global Privacy Control, visit globalprivacycontrol.org. Other than Global Privacy Control, we do not recognize other "Do Not Track" signals that may be sent from your browser or device.
7. Where your information goes
We are based in the United States, and our fulfillment partners and some of our service providers may be located in other countries.
Where we transfer personal information out of the United Kingdom, we rely on a recognised transfer mechanism — the UK International Data Transfer Agreement or the UK Addendum to the European Commission's Standard Contractual Clauses — unless the destination has been formally recognised as providing adequate protection. Where we transfer information out of Australia, New Zealand or Canada, we take reasonable steps to ensure the recipient protects it to a comparable standard, as those laws require. You may ask us for details of the safeguards in place for a specific transfer.
8. How long we keep it
| What | How long |
|---|---|
| Order, invoice and payment records | 7 years from the end of the tax year in which the order was placed, to satisfy tax, accounting and customs obligations |
| Customer account | Until you ask us to close it, or after 3 years of inactivity |
| Returns, exchanges and warranty claims | 3 years from resolution, which covers our 12-month defect commitment and any dispute that follows |
| Customer service correspondence | 3 years from the last message |
| Marketing subscription and preferences | Until you unsubscribe, or after 24 months without engagement. A record that you unsubscribed is kept indefinitely so we do not contact you again by mistake |
| Reviews and submitted content | Until you ask us to remove it |
| Fraud screening records | Up to 6 years, to defend against chargebacks and claims |
| Website analytics and advertising data | Up to 26 months, or the retention period set by the platform, whichever is shorter |
| Server and security logs | Up to 12 months |
Where we are required to keep something for longer by law, or need to keep it to establish or defend a legal claim, we keep it for that period and no longer. Once a period ends, information is deleted or irreversibly anonymised.
9. How we protect it
The whole site, including checkout, runs over an encrypted TLS connection. Card data is handled by PCI DSS compliant payment providers and is tokenised, so it is never held in our systems in a readable form. Access to customer data inside our business is limited to the people who need it.
No system is perfect, and information sent to us over the internet is never entirely risk-free. Please do not send us card numbers, passwords or other sensitive details by email. If a breach ever occurs that is likely to put you at risk, we will tell you and the relevant regulator within the timescales the law sets.
10. Children
This shop is intended for adults. We do not knowingly collect any personal information about children under the age of 13. If you are the parent or guardian of a child who has provided us with their personal information, contact us using the details in Section 1 to request that it be deleted. As of the date of this policy, we do not have actual knowledge that we "share" or "sell" (as those terms are defined in applicable law) the personal information of individuals under 16 years of age.
11. Your rights
Wherever you live, you can contact us at hello@salinas-jewelry.com to exercise any right available to you. We will acknowledge your request promptly and respond within the time the law allows.
We may need to verify your identity first, and we will ask only for what is necessary to do that. Exercising a right will never cost you anything and we will never treat you differently for using one. You may designate an authorised agent to make a request on your behalf; we will require proof of that authorisation and may still need to verify your identity directly with you.
United Kingdom. Under the UK GDPR and the Data Protection Act 2018 you have the right to: be informed; access a copy of your personal information; have inaccurate information corrected; have information erased in certain circumstances; restrict how we process it; receive it in a portable format; object to processing based on legitimate interests, and object to direct marketing at any time, absolutely; and withdraw consent where we rely on it. We aim to respond within one month. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk, or by calling 0303 123 1113 — we would appreciate the chance to put it right first.
United States. Depending on your state, you may have the right to know what personal information we hold and how we use it; to obtain a copy of it; to have it corrected; to have it deleted; to opt out of the sale or sharing of personal information and of targeted advertising; to opt out of profiling with significant effects; and to appeal a decision we make on a request. We aim to respond within 45 days. To opt out of targeted advertising and of the sharing of your information with advertising platforms, use our Your Privacy Choices page, or visit us with Global Privacy Control enabled. You may use an authorised agent to make a request on your behalf. If we deny your request you may appeal by replying to our decision, and if your appeal is denied you may contact your state Attorney General.
Canada. Under PIPEDA, and under Quebec's Law 25 if you live in Quebec, you may ask for access to the personal information we hold about you, ask for corrections, withdraw consent to uses that are not necessary to complete your order, and complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca, or to the Commission d'accès à l'information du Québec. We aim to respond within 30 days.
Australia. Under the Privacy Act 1988 and the Australian Privacy Principles you may request access to the personal information we hold about you and ask for it to be corrected, and you may opt out of direct marketing at any time. If you are not satisfied with how we handle a privacy complaint, you can refer it to the Office of the Australian Information Commissioner at oaic.gov.au.
New Zealand. Under the Privacy Act 2020 you may request access to your personal information and ask for it to be corrected. We aim to respond within 20 working days. Complaints can be made to the Office of the Privacy Commissioner at privacy.org.nz.
Elsewhere. If you live somewhere not listed above and believe your local law gives you rights over your personal information, contact us at hello@salinas-jewelry.com and we will do our best to help.
12. Marketing
We send marketing emails only where you have subscribed, or where you have bought from us and we are offering you similar products with a clear way to opt out.
Every marketing email carries an unsubscribe link, and one click is enough. You can also reply to any of our emails and ask to be removed, and we will do it by hand. Unsubscribing does not stop service messages about an order you have already placed — order confirmations, dispatch notices and delivery updates are part of the contract, not marketing.
13. Links to other sites
This site links to social media profiles and occasionally to other websites. Once you follow a link you are on someone else's site, and their privacy policy applies. We have no control over what they do and we are not responsible for it.
14. Changes to this policy
We update this policy when our practices change, when we add or remove a provider, or when the law changes. The revised version is posted here with a new date. If a change materially affects your rights we will tell you directly, by email where we hold your address, before it takes effect.
15. Contact
Salinas is a trading name of Salmeia Group LLC.
- Registered office: 30 N Gould St Ste R, Sheridan, WY 82801, USA
- Warehouse: 390 NE 191st St STE 8260, Miami, FL 33179, USA
- Email: hello@salinas-jewelry.com
- Support hours: Monday to Friday, 9:00 AM to 5:00 PM (ET)
Write to us at that address about anything in this policy, including any request to access, correct or delete your personal information, and we will take it from there. For the purpose of applicable data protection laws, we are the data controller of your personal information.
Last updated: 15 September 2026.