Privacy Policy

Revised: December 22, 2025

This privacy policy (“Privacy Policy”) describes how and why Stienhardt & Stones (“Stienhardt,” “we,” “us,” or “our”) collects, uses, discloses, and otherwise processes information when you use our services, including without limitation when you visit https://stienhardt.com (the “Website”), our showroom interactions, and our communications by email, phone, live or automated chat, SMS/MMS text, social media, and other services we control (collectively, the “Services”).

BY USING THE SERVICES, YOU AGREE YOU (1) HAVE READ OUR TERMS OF USE AND THIS PRIVACY POLICY (COLLECTIVELY, THE “TERMS”) IN THEIR ENTIRETY; AND (2) UNDERSTAND, AND FULLY ACCEPT OUR TERMS. IF YOU DO NOT AGREE TO BE BOUND BY THE TERMS, YOU MUST NOT USE THE SERVICES.

1. WHAT INFORMATION DO WE COLLECT?

We collect information about you when you interact with the Services, including when you browse the Website; schedule, purchase, return, or repair products; request information; participate in promotions; communicate with us; visit our showroom; or otherwise engage with content or features we provide. We also collect information automatically from the devices and browsers you use to access the Services and receive information about you from service providers and third parties that support our operations, security, analytics, marketing, logistics, and customer communications. Some third parties collect information directly from your browser or device through cookies, pixels, software development kits, and similar technologies when you use the Services; details about these technologies and how to control them appear in the Section 4 of this Privacy Policy.

Personal Information you disclose to us.

The information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household (“Personal Information”), that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. Where we use the term Personal Information, it includes “personal data” under the laws of the European Economic Area (EEA), the United Kingdon (UK), Switzerland, and similar jurisdictions. The Personal Information we collect may include the following:

name;
phone number;
email address;
billing and/or shipping address;

account and login details if you create an account;
order and payment information processed through our commerce and payment partners;
preferences such as ring size, metal and diamond preferences, wish lists, and saved items;
communication content such as messages, reviews, survey responses, uploaded photos or videos, and customer support interactions;
contacts you choose to share for referrals or to send product links;
employment information if you apply for a role, including resume and work history;
government identification if requested for fraud prevention on high value orders or to satisfy legal requirements for promotions or tax reporting; and
any other identifiers which you may be prompted to provide in connection with accessing or using the Website and/or Services.

You may decline to provide Personal Information; however, this may limit your ability to use certain features or receive certain Services. You may also submit other information at your discretion. You are responsible for information you choose to provide.

Information Collected Automatically.

When you visit, use, or navigate the Services, we automatically collect device and usage information through cookies, pixels, software development kits (SDKs), logs, and similar technologies. Although some of this data does not identify you by name, under many U.S. state privacy laws and in other jurisdictions items such as IP address, device identifiers, advertising IDs and location inferred from IP may be considered Personal Information and we treat them as such in this Privacy Policy. We use this information to operate, secure, debug, and improve the Services; to conduct analytics and reporting; to personalize content; and to deliver and measure marketing and advertising. We may also derive inferences from this information about your preferences, characteristics, or behavior. Our use of advertising cookies and similar technologies may be considered a “sale,” “sharing,” or “targeted advertising” under certain U.S. state privacy laws; see Section 4 and Section 9.

When you use the Services, we automatically collect:

service use data such as pages viewed, items browsed or added to cart, time on site, referring pages, and actions taken;
device and connection data such as browser, device type, operating system, language, and internet service provider;
IP address and general location derived from IP address;
identifiers and online activity information collected via cookie, pixels, and similar technologies; and
session replay and interaction analytics including clicks, scrolls, mouse movements, and on page behavior through tools like Hotjar.

Information from Other Sources.

We may receive information from third parties and combine it with information we collect directly. These sources may include:

commerce and platform providers such as Shopify;
analytics and advertising partners such as Google and Meta;
shipping and logistics providers such as UPS and FedEx;
email and SMS platforms such as Klaviyo and SMS providers;
fraud prevention and verification partners;
social networks that you connect to or reference in relation to our Services; and
public sources and partners who support marketing or promotions.

2. HOW DO WE USE YOUR INFORMATION?

We use, disclose, and otherwise process Personal Information for the purposes described below, depending on how you interact with the Services, including:

to process, fulfill, and ship orders, and manage returns or repairs;
to create and maintain accounts, provide customer support, and respond to inquiries;
to offer custom design services and manage appointments and consultations;
to verify identity and prevent fraud, detect security incidents, and protect against malicious or illegal activity, including requesting government issued ID for high value transactions;
to operate, maintain, and improve the Services, content, and user experience, including conducting research, analytics, and performance measurement;
to personalize content, recommendations, and experiences based on your interactions with the Services;
to communicate about accounts, orders, products, promotions, events and policy updates, and (where required by law or with your consent) send marketing and promotional messages and manage your communication preferences;
to deliver interest based advertising (including cross-context behavioral advertising) and measure ad performance and conversions; and
to comply with applicable law, respond to lawful requests, and enforce our Terms of Use.

If you are located in the EEA, UK, or Switzerland, additional information about our legal bases for processing and international data transfers appears in Section 14.

3. WHEN AND WITH WHOM DO WE SHARE PERSONAL INFORMATION?

We share Personal Information as needed to operate our business and the Services, as permitted by law, and subject to appropriate contractual and confidentiality obligations. We may share your Personal Information with third-party vendors, service providers, contractors, or agents (“third parties”) who perform services for us or on our behalf and require access to such information to do that work, including:

commerce and payment processing, order management, fulfillment, shipping, and returns;
customer communications, email/SMS delivery, customer support, and appointment scheduling;
hosting, data storage, cybersecurity, fraud prevention, and identity verification;
analytics, performance monitoring, and research; and
advertising, ad delivery and measurement, and marketing platforms and tools.

We may also share Personal Information in the following situations:

affiliates and corporate group companies, to support the Services and our operations;
fraud prevention, legal, and safety, including with law enforcement, regulators, courts, or other third parties to comply with law, respond to lawful requests, or to protect the rights, property, and safety of our users, customers, or others;
business transfers, in connection with an actual or potential investment, merger, acquisition, reorganization, or sale of assets; and
with your consent or at your direction, for example when you ask us to share wish lists, product links, or referral messages.

These parties are required to use Personal Information only as necessary to provide services to us and to protect it in accordance with their contractual obligations.

Sale/Share/Targeted Advertising Disclosures.

We do not sell Personal Information for money. We may “sell” or “share” Personal Information as those terms are defined by certain U.S. state privacy laws by allowing advertising, social media, and analytics partners to collect Personal Information via cookies, pixels, SDKs, or similar technologies in our Services for cross-context behavioral advertising and measurement. We do not knowingly transmit sensitive financial, biometric, or health data through cookies or pixels. You may opt out of such “sale,” “sharing,” or “targeted advertising” at any time as described in Section 11 or Section 16. Where required by law, we recognize and honor valid opt-out preference signals, such as

4. COOKIES & TRACKING TECHNOLOGIES

We use cookies, pixels, SDKs, and similar technologies on our Website and in the Services to operate core features, remember your preferences, enhance performance and security, measure usage, and deliver and measure interest-based advertising. Some cookies are set by us and some are set by third parties, such as analytics and advertising partners. Certain third parties may collect Personal Information directly from your browser or device through these technologies for their own purposes in accordance with their privacy policies.

Consent and Preference Management.

Where required by law, we obtain consent before setting non-essential cookies. We use the Pandectes consent banner and preferences center to help you review, accept, or decline non-essential cookie categories and to change your choices at any time. If you do not provide consent, we will use only cookies that are strictly necessary to provide the Services. You can also use your browser settings to block or delete cookies; however, some features may not function properly if cookies are disabled. If you reset your browser, clear cookies, or use a different browser or device, your preferences may not carry over and you may need to set them again.

Categories of Cookies. We use several categories of cookies, including:

strictly necessary cookies, which enable core functionality such as page navigation, security, and network management and are always active;
performance and analytics cookies, which help us understand how visitors use the Services so we can improve content and user experience;
functionality cookies, which remember choices you make to personalize your experience; and
advertising and targeting cookies, which support ad delivery, measurement, and retargeting on and off the Services.

Your Choices and Signals.

You can manage cookie categories at any time via the Pandectes preference center on our Website. Where required by law, we recognize and honor valid opt-out preference signals, such as Global Privacy Control (“GPC”), for the browser or device on which the signal is present and, if you are authenticated and it is reasonably possible, for your account more broadly. Most browsers offer a Do Not Track (“DNT”) setting; because there is no uniform standard for DNT, we do not currently respond to DNT signals. In addition to our preferences center, you may use partner or industry tools such as Google Analytics Opt-out Browser Add-on and the self-regulatory tools offered by the Digital Advertising Alliance, the Network Advertising Initiative, or the European Digital Advertising Alliance, as additional ways to control interest-based advertising.

Third-Party Collection.

Advertising partners and analytics providers may collect Personal Information directly from your browser or device via cookies, pixels, and similar technologies for ad delivery, measurement, and analytics. Their practices are governed by their own Privacy Policies.

5. THIRD PARTY WEBSITES

THE WEBSITE AND/OR SERVICES MAY CONTAIN LINKS TO THIRD PARTY OWNED AND/OR OPERATED WEBSITES. WE ARE NOT RESPONSIBLE FOR THE PRIVACY PRACTICES, SECURITY, OR THE CONTENT OF ANY THIRD-PARTY WEBSITE OR SERVICE. Once you click a third-party link and leave the Website, you are no longer governed by these Terms. Your interactions with third-party websites are solely at your own risk. If you no longer wish to receive communications from a third party, please contact that third party directly.

Third-Party Providers Used with the Services.

Certain third-party providers support functionality, analytics, performance, security, advertising, and communication in connection with the Services. These providers may set or access cookies and collect Personal Information directly from your browser or device for their own purposes, subject to their privacy policies. The third-parties we work with include, but are not limited to:

Google Analytics/Google Ads Pixel: Tracks Website usage and provides information such as referring websites and user actions on the Website. Google Analytics may capture your IP address and use cookies to measure engagement. You can learn more in Google’s Privacy Policy. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on. For more on Google’s data practices, see “How Google uses information from websites or apps that use our services.”
Meta Pixel: Delivers, measures, and improves advertising (including retargeting) on Meta platforms and helps us understand the actions visitors take on our Website after viewing or interacting with our ads. You can learn more in Meta’s Privacy Policy and manage your ad preferences in your Meta account settings.
Hotjar: Analyzes user interactions, such as heatmaps and session recordings, to help us improve Website usability and performance. Hotjar may set cookies and collect device and usage information. You can learn more in Hotjar’s Privacy Policy.
Pandectes GDPR Compliance: Provides our consent banner and preference center to review, accept, or decline cookies and similar tracking in line with GDPR, CCPA/CPRA and other applicable laws. You can learn more in Pandectes’ Privacy Policy.

User-Generated Content.

If you submit user-generated content (including comments, reviews, posts, or other submissions), that content may be visible to others and may be distributed outside the Website for any purpose. Public content may be indexed by search engines, cached, archived, or redistributed by others and may persist even after removal from the Services.

Social Features.

The Services may offer social features that enable you to like, share, or connect your account with third-party platforms. If you engage with social features, both we and the platform may have access to certain information consistent with your settings and their policies.

Advertising and Third-Party Collection.

Advertising partners and analytics providers may collect Personal Information directly from your browser or device via cookies, pixels, and similar technologies for ad delivery, measurement, and analytics. You can control these practices through browser settings, as described in Section 4.

6. HOW LONG DO WE KEEP YOUR INFORMATION?

We retain Personal Information only as long as necessary to fulfill the purposes described in this Privacy Policy, including to operate the Services, provide requested products and support, improve and secure our operations, comply with legal, accounting, and tax obligations, and resolve disputes. When we no longer have a legitimate business purpose to retain Personal Information, we will delete or deidentify it. If immediate deletion is not feasible (for example, because data resides in backups), we will securely store and isolate it from any further processing until deletion is possible. In determining appropriate retention periods, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process it and whether we can achieve those purposes through other means, and applicable legal requirements.

Category-Level Retention (California and similar laws):

We apply the following retention periods or criteria to the categories collected:

Identifiers (e.g., name, email): retained for the duration of your relationship with us and up to 3 years thereafter for recordkeeping, compliance, and anti-fraud, unless a longer period is required by law.
Account and Profile Information: retained while the account is active and up to 3 years after account closure, unless a longer period is required by law.
Order and Financial Records: retained for up to 7 years to satisfy accounting, tax, and legal requirements.
Communications and Customer Support Content: retained for the duration of your relationship and up to 3 years thereafter for quality assurance, training, dispute resolution, and compliance, unless a longer period is required by law.
Marketing Preferences: retained until you opt out or withdraw consent.
Internet/Network Activity and Device Data: retained for up to 24 months from collection for security, analytics, and service improvement. Our Google Analytics user-data retention setting is configured to the shortest available period (currently 2 months).
General Geolocation: retained in log files for up to 24 months for security and analytics.
Inferences: retained for up to 24 months for personalization and marketing optimization or until you opt out or delete your data, whichever occurs first.

We may retain data for longer where necessary to comply with legal obligations, resolve disputes, enforce our agreements, or comply with a litigation hold or governmental request. Deidentified or aggregated information may be retained and used indefinitely, and we commit not to reidentify deidentified information except as permitted by law.

7. HOW DO WE KEEP YOUR INFORMATION SAFE?

We maintain reasonable and appropriate administrative, technical, and physical safeguards designed to protect Personal Information, taking into account the nature of the data and the risks of processing. These safeguards include, among other things, access controls, least-privilege practices, authentication and authorization measures, logging and monitoring, vulnerability management, and encryption in transit (TLS/SSL). The Website uses a valid server certificate to help protect session integrity.

We also require our service providers and contractors that handle Personal Information on our behalf to maintain appropriate security measures and confidentiality commitments consistent with applicable law and industry standards, and to use Personal Information only as necessary to provide services to us.

Despite our safeguards and efforts to secure your information, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee that unauthorized third parties will never be able to defeat our security measures or misuse your information. Transmission of Personal Information to and from our Services is at your own risk. You are responsible for maintaining the confidentiality of your account. We are not liable for unauthorized access, disclosure, or misuse that is outside our reasonable control.

If we become aware of a data breach affecting Personal Information, we will investigate, take appropriate remedial measures, and provide notifications to individuals and/or regulators as required by applicable law.

8. DO WE COLLECT INFORMATION FROM MINORS?

The Services are not directed to individuals under 18 years of age. We do not knowingly collect Personal Information from children under 13. If you are under 13, do not use the Services or provide any Personal Information to us.

If we learn that we have collected Personal Information from a child under 13, we will delete that information and, if applicable, terminate the related account. If you believe we may have any information about someone under 13, please contact us at general@stienhardt.com with “Minor Data Collected Notification” in the subject line.

Teens 13-15 (U.S.). We do not knowingly sell or share Personal Information or engage in targeted advertising with respect to users we know are under 16. Where required by law, we will obtain affirmative authorization (opt-in) before any activity that would constitute a “sale,” “sharing,” or “targeted advertising” for users ages 13-15.

9. WHAT ARE YOUR PRIVACY RIGHTS?

The types of personal data we collect are listed in Section 1 above. If we are relying on your consent to process your Personal Information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us by using the methods provided in Section 11 or Section 16 below. Withdrawing consent will not affect the lawfulness of the processing of your Personal Information before its withdrawal nor, when applicable law allows, will it affect the processing of your Personal Information conducted in reliance on lawful processing grounds other than consent.

SMS and Electronic Communications.

By providing your phone number, you consent to receive SMS messages for orders, service updates, and marketing. Message and data rates may apply. You may opt out at any time by replying STOP. You can unsubscribe from marketing emails at any time by using the unsubscribe link included in the email. Transactional and service-related communications will continue as needed to fulfill your requests.

Your Privacy Choices (U.S.).

Depending on your location, you may have the right to: (a) know/access specific pieces and categories of Personal Information; (b) correct inaccuracies; (c) delete Personal Information; (d) obtain a portable copy of certain Personal Information you provided to us; (e) opt out of the sale or sharing of Personal Information and of targeted advertising; (f) opt out of certain profiling (where applicable); and (g) limit the use and disclosure of sensitive Personal Information. You may exercise these rights using the methods list in Section 11 or Section 16. We will respond within the timeframe required by applicable law (generally within 45 days, with a single 45-day extension where reasonably necessary and permitted) and we will not discriminate against you for exercising your rights. Where required by law, you may also obtain a list of third parties to whom Personal Information was disclosed for business purposes.

Appeals.

If we deny your request, you may appeal within the timeframe required by applicable law (up to 60 days in some states) using the methods listed in Section 11 or Section 16. We will respond to appeals within the applicable timeframe required by law. If your appeal is denied, you may contact your state Attorney General.

10. YOUR STATE PRIVACY RIGHTS

Residents of certain states – including, without limitation, California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia – may have additional rights regarding their Personal Information under state privacy laws. These rights may include the ability to:

Confirm whether we process your Personal Information and access it (including the categories, and in some states, specific pieces of Personal Information);
Access the categories of Personal Information we collect, use, disclose, or share (and, where applicable, the specific pieces of Personal Information);
Correct inaccuracies in your Personal Information;
Delete Personal Information we collected from you (and, in some states, Personal Information we obtained from other sources);
Obtain a portable copy of certain Personal Information you provided to us; and
Opt-out of:

Targeted advertising (cross-context behavioral advertising);
The “sale” or “sharing” of Personal Information (as defined by applicable law); and
Certain forms of automated decision-making or profiling (where applicable) that produce legal or similarly significant effects.

Please note, we do not use or disclose Sensitive Personal Information for purposes other than those permitted by applicable law. If our practices change, we will provide required notice and honor applicable rights.

These rights are not absolute and may be subject to statutory exceptions. We will honor your privacy rights as required by the laws of your state of residence.

Exercising Your Rights.

You may submit requests using the methods list in Section 11 or Section 16. Please do not include sensitive information in requests.

Verification and Authorized Agents.

We will verify your request using information associated with your account or interactions with us and may request additional information only as reasonably necessary to confirm your identity or authority, as permitted by law. We will not require you to create an account to submit a request. If you submit a request through an authorized agent, we may require proof of authorization (for example, a signed permission from you or a valid power of attorney). For requests to know/access, delete, or correct, we may also require you to verify your identity directly with us. For requests to opt out of “sale,” “sharing,” or “targeted advertising,” we will accept authorized agent requests upon sufficient proof of authority and will not require you to verify your identity directly as a condition of processing. We will not collect or use Personal Information beyond what is reasonably necessary to verify and process your request, and we will honor valid optout preference signals (such as Global Privacy Control) without additional steps.

Response Timelines and Frequency.

We will respond to your request within the timeframe required by applicable law (generally within 45 days, with a single 45-day extension where reasonably necessary and permitted). In some states, consumers may be limited to a certain number of requests within a 12-month period.

Opt-out Preference Signals.

Where required by law, we recognize and honor valid opt-out preference signals (such as Global Privacy Control) for “sale,” “sharing,” and “targeted advertising.” When we detect a valid signal, we will treat it as a request to opt out for the browser or device and, if reasonably possible and you are authenticated, for your account more broadly.

Appeals.

We may deny a request where an exception applies (e.g., security, fraud prevention, legal compliance) and will explain our reasons where required. If we deny your request, you may submit an appeal within the timeframe required by applicable law using the methods listed in Section 11 or Section 16 and referencing your original request. We will respond within the timeframe required by applicable law.

Notice at Collection (California and similar laws).

We collect the following categories of Personal Information: Identifiers (e.g., name, email, IP address), customer records, demographics, commercial information, internet or other electronic activity, audio or visual content you share with us, geolocation derived from IP, employment information from applicants, and inferences such as preferences. We may collect sensitive Personal Information such as precise geolocation when enabled, account log in credentials, and government ID for fraud prevention or legal compliance. We collect these categories from you directly, automatically through your use of the Services, and from third parties such as commerce and payment providers, advertising and analytics partners, social networks, shipping providers, and referral sources for the purposes described in Section 2. We may disclose these categories to service providers and contractors for business purposes and may “sell” and/or “share” Personal Information for cross-context behavioral advertising or engage in “targeted advertising” as described below. We retain Personal Information for the periods described in Section 5. To exercise your rights, including to opt out of sale or sharing for interest based advertising, email us at general@stienhardt.com with the subject line “Opt Out of Sale or Sharing” or by using the Pandectes preference center on our Website to disable targeting cookies. The opt out is browser and device specific.

California Privacy Rights.

This section applies to California residents and supplements the information above under the California Consumer Privacy Act as amended by the California Privacy Rights Act.

California residents have the additional right to:

Know the categories of Personal Information we have collected, the categories of sources, the business or commercial purposes for collection or sharing, the categories of third parties to whom we disclose Personal Information, and the specific pieces of Personal Information we maintain about you;
Opt-out of the “sale” or “sharing” of Personal Information for cross-context behavioral advertising;
Limit the use and disclosure of Sensitive Personal Information to what is necessary to provide requested services (if applicable);
Have us honor Global Privacy Control (GPC) signals as a valid opt-out request; and
Receive information about financial incentives, if offered.

“Shine the Light.”

California Civil Code § 1798.83 permits California residents to request, once per year and free of charge, information about the categories of Personal Information (if any) we disclosed to third parties for their direct marketing purposes in the prior calendar year and the names and addresses of those third parties. To submit such a request, contact us by emailing general@stienhardt.com with the subject line “California Shine the Light Request” including your full name and postal address.

California Minors’ Content Removal.

If you are a California resident under 18 and have an account on the Services, you may request removal of content you publicly posted by contacting us using the information in Section 11 or Section 16 and identifying the content. We will make the content no longer publicly visible on the Services, but complete removal (e.g., from caches or archives) may not be possible.

Non-Discrimination.

We will not discriminate against you for exercising your privacy rights.

Financial Incentives.

From time to time we may offer rewards or promotions that involve providing Personal Information. Participation is voluntary and you may withdraw at any time. If we offer financial incentives, we will describe them in a separate Financial Incentive Notice, including the material terms, how to opt in, and how to withdraw. Any value calculations will be based on good-faith estimates of the marginal value of the data and related program costs.

Additional Disclosures for Nevada Residents.

Nevada residents may submit a request directing us not to sell certain Personal Information by emailing general@stienhardt.com with the subject line “Nevada Do Not Sell Request.”

11. HOW TO REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

If you have an account, you may review and update certain account details directly in your account settings. In addition, under applicable law, you or someone legally authorized to act on your behalf (your “Authorized Agent”), may submit a request to know/access, correct or delete your Personal Information. Parents or legal guardians may, where permitted by law, submit requests on behalf of their child; however, we do not knowingly collect Personal Information from children under 13.

You may submit a request by emailing us at general@stienhardt.com or by STIENHARDT & STONES 36W 44th St Suite 1018.

Please do not include sensitive personal information at your initial request (for example, government ID numbers or images, full payment card or bank account numbers, passwords, or health information). A request must provide sufficient information for us to reasonably verify you are the person about whom we collected Personal Information and should include (i) your state of residence; (ii) a description of your request with sufficient detail to allow up to understand, evaluate, and respond; and (iii) the identifiers we should search (for example, the email address or phone number you used with us).

We will verify your request using information associated with your account or interactions with us and may request additional information to verify your identity or authority, as permitted by law. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

12. GOVERNING LAW

This Privacy Policy, and your access to and use of the Website and Services, as well as any dispute, claim, or controversy arising out of or relating to them, will be governed by and construed in accordance with the laws of the State of New York, without regard to conflict-of-law rules or principles (whether of New York or any other jurisdiction) that would result in the application of the laws of any other jurisdiction. Any dispute between the parties that is not subject to arbitration or that cannot be heard in small claims court will be resolved exclusively in the state or federal courts located in New York County, New York, and the parties consent to the personal jurisdiction and venue of those courts.

13. SEVERABILITY

If any part of this Privacy Policy is deemed unlawful and/or unenforceable, all other provisions contained herein will remain in full force and effect.

14. INTERNATIONAL USERS

For individuals in the EEA, UK, and Switzerland, Stienhardt & Stones is the controller of your personal data. We have not appointed a Data Protection Officer. We will update this Privacy Policy if that changes.

Legal Bases.

We process Personal Information when one or more of the following applies: consent, contract performance, compliance with legal obligations, and our legitimate interests in operating and improving our Services, communicating with you, security and fraud prevention, research and development, and hiring, balancing against your rights and interests.

International Data Transfers.

If you are outside the United States, your Personal Information may be transferred to and processed in the United States or other countries where we or our providers operate. When we transfer Personal Information from the EEA/UK/Switzerland to countries that do not provide the same level of data protection, we implement appropriate safeguards such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or other approved mechanisms. You can request more information by contacting us at general@stienhardt.com.

Your Rights.

Subject to applicable law, you may have rights to request access, rectification, erasure, restriction, portability, and to object to processing, and to withdraw consent where processing is based on consent. You also have the right to lodge a complaint with a supervisory authority.

Cookies.

We use cookies and similar technologies to operate our Website and understand content engagement. Where required by law, we will obtain your consent before setting non-essential cookies (for example, certain analytics or advertising cookies). If you do not provide consent, we will use only cookies that are necessary to provide the Services. We use the Pandectes GDPR Compliance to present a consent banner and preference center so you can review, accept, or decline tracking in a way that aligns with GDPR and other data protection laws. You can change preferences at any time via the Pandectes banner. You can also change your browser settings to block or delete cookies. For interest based ads, use opt out tools provided by the DAA, NAI, and EDAA. If you reset your browser or use a different device, you will need to set preferences again.

Please note that some Website features may not function if cookies are disabled.

Automated Decision-Making.

We do not engage in automated decision-making that produces legal or similarly significant effects.

If you are located in Canada, this section applies to you.

We may process your information if you have given us specific permission (i.e., express consent) to use your Personal Information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time. In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent.

15. DO WE MAKE UPDATES TO THIS NOTICE?

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated “Revised” date and the updated version will be effective as soon as it is accessible. If we make material changes to this Privacy Policy, we may notify you either by prominently posting notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Policy frequently to be informed of how we are protecting your information. If the changes materially affect your rights, we will provide additional notice and, where required, obtain your consent. Your continued use of the Services after we post changes to this Privacy Policy constitutes your acceptance of those changes.

16. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

We welcome your comments and questions regarding our privacy policies. If you have any questions about this Privacy Policy, or if you need this Privacy Policy in an alternative format due to a disability, please contact us at:

STIENHARDT & STONES

36 W 44th St, Suite 1018

New York, NY 10036

Email: general@stienhardt.com