Privacy Policy for John S. Brana Handmade Jewelry
Last updated: August 2, 2026
Galleria NuVo, Inc., doing business as John S. Brana Handmade Jewelry, respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit JohnSBrana.com, place an order, create an account, communicate with us, or otherwise use our website and services.
In this Privacy Policy, “John S. Brana,” “we,” “us,” and “our” refer to Galleria NuVo, Inc. “Site” refers to JohnSBrana.com and its related pages, customer accounts, online storefront, and services.
This Privacy Policy should be read together with the following pages:
- U.S. Privacy Requests and Website Tracking Notice
- Do Not Sell or Share My Personal Information
- Manage Cookie Preferences
- Accessibility Statement
The privacy rights available to you may depend on where you live, the nature of your relationship with us, and which privacy laws apply.
1. Who Is Responsible for Your Personal Information?
The business responsible for the personal information described in this Privacy Policy is:
Galleria NuVo, Inc.
Doing business as John S. Brana Handmade Jewelry
1043 Portola Drive
San Francisco, California 94127
United States
Email: jbrana@johnsbrana.com
Telephone: 1-415-664-9737
Website: JohnSBrana.com
Galleria NuVo, Inc. is an Internet-based jewelry design and retail business. We do not operate a traditional retail storefront.
2. Personal Information We Collect
The personal information we collect depends on how you use the Site, the services you request, and the privacy choices you make.
Information You Provide
We may collect information you provide when you:
- Place or attempt to place an order
- Create or use a customer account
- Subscribe to email marketing
- Contact us with a question
- Request a return, exchange, refund, repair, or order adjustment
- Submit a product review
- Participate in a promotion
- Submit a privacy request
- Communicate with us through email, telephone, website forms, or social media
This information may include:
- Name
- Email address
- Telephone number
- Billing address
- Shipping address
- Customer account information
- Order information
- Product and sizing selections
- Gift-message information
- Return or exchange information
- Customer-service communications
- Marketing preferences
- Information voluntarily included in a message or form
Please do not send Social Security numbers, full payment-card numbers, medical records, government identification documents, or other highly sensitive information through general website forms or email.
Payment Information
Payments are processed through Shopify and the payment provider selected during checkout.
Payment providers may collect:
- Payment-card information
- Billing information
- Account credentials
- Security codes
- Information needed to authorize a payment
We generally receive limited transaction information, such as payment confirmation, the amount paid, the payment method, and information needed to complete an order, refund, dispute, or chargeback.
Payment providers process payment information according to their own privacy and security policies.
Information Collected Automatically
When you use the Site, we and our service providers may automatically collect:
- Internet Protocol address
- Browser type
- Device type
- Operating system
- Language and time-zone settings
- Approximate location based on an IP address
- Referring website, advertisement, or search term
- Pages and products viewed
- Dates and times of visits
- Links, buttons, and menus selected
- Shopping-cart activity
- Checkout activity
- Website navigation paths
- Scrolling activity
- Mouse movements
- Session duration
- Cookie and device identifiers
- Advertising identifiers
- Website errors
- Performance information
- Email opens and link selections
- Cookie and consent preferences
This information may be collected through cookies, pixels, tags, web beacons, server logs, analytics tools, software development kits, local storage, and similar technologies.
Information From Other Sources
We may receive personal information from:
- Shopify
- Payment providers
- Shipping carriers
- Advertising providers
- Analytics providers
- Fraud-prevention providers
- Email and marketing providers
- Social media platforms
- Review services
- Customer-service services
- Consent-management providers
- Other parties you direct to communicate with us
For example, a payment processor may confirm a transaction, or a shipping carrier may provide delivery status.
3. Categories of Personal Information
Depending on your interaction with the Site, we may process the following categories:
| Category | Examples |
|---|---|
| Identifiers | Name, email address, mailing address, IP address, customer ID |
| Customer records | Contact information, billing information, shipping information |
| Commercial information | Purchases, returns, exchanges, products viewed |
| Internet activity | Browsing, clicks, scrolling, navigation paths |
| Device information | Browser, operating system, device type, cookie identifiers |
| Approximate location | General location derived from an IP address |
| Communications | Emails, form submissions, customer-service messages |
| Marketing information | Subscription status, campaign interactions, preferences |
| Inferences | Possible product interests based on browsing or purchase activity |
| Sensitive information | Account login or payment information used to complete a transaction |
We do not seek to use sensitive personal information to infer characteristics about you.
4. How We Use Personal Information
We may use personal information for the following purposes.
Processing Orders and Providing Services
We may use information to:
- Process payments
- Confirm and fulfill orders
- Produce jewelry in the selected style, material, and size
- Package and ship purchases
- Provide delivery updates
- Process returns, exchanges, repairs, refunds, and chargebacks
- Maintain customer accounts
- Respond to customer-service questions
Operating and Improving the Site
We may use information to:
- Operate the online store
- Maintain shopping-cart and checkout functions
- Remember preferences
- Diagnose errors
- Measure performance
- Understand how visitors use the Site
- Improve navigation and accessibility
- Improve product descriptions and website features
Communicating With You
We may use information to:
- Send order confirmations
- Provide shipping information
- Respond to questions
- Send requested sizing or product information
- Communicate about returns or exchanges
- Provide important policy or security notices
- Send marketing messages when permitted
Advertising and Marketing Measurement
We may use information to:
- Measure advertising performance
- Understand how visitors discover the Site
- Create or measure advertising audiences
- Display relevant advertising
- Evaluate promotional campaigns
Where required, nonessential advertising and analytics technologies are controlled through our cookie-consent system.
Security and Fraud Prevention
We may use information to:
- Detect fraudulent transactions
- Protect customer accounts
- Investigate suspicious activity
- Prevent misuse
- Protect our legal rights, systems, and property
Legal and Business Requirements
We may use information to:
- Maintain tax and accounting records
- Respond to valid legal requests
- Comply with court orders
- Meet regulatory obligations
- Establish, exercise, or defend legal claims
- Preserve required business records
5. Legal Bases for Processing
Where a law such as the General Data Protection Regulation requires a legal basis, we may rely on the following grounds.
Contractual Necessity
We process information needed to accept payment, fulfill an order, provide customer service, and complete transactions you request.
Legitimate Business Interests
We may process information for legitimate purposes such as:
- Operating the Site
- Protecting security
- Preventing fraud
- Improving performance
- Responding to communications
- Maintaining records
- Protecting legal rights
Consent
We may rely on consent for:
- Email marketing
- Nonessential cookies
- Analytics technologies
- Advertising technologies
- Other optional processing activities
You may withdraw consent at any time. Withdrawing consent does not affect processing that occurred lawfully before withdrawal.
Legal Obligations
We may process information to comply with tax, accounting, court, regulatory, law-enforcement, or consumer-protection requirements.
6. Shopify
JohnSBrana.com is hosted and powered by Shopify.
Shopify provides services such as:
- Online store hosting
- Checkout
- Customer accounts
- Payments
- Security
- Fraud prevention
- Data storage
- Store analytics
When you visit the Site, create an account, or make a purchase, Shopify may process information on our behalf and, in certain circumstances, for its own purposes.
Shopify and its service providers may process information in countries other than the country where you live.
7. Cookies and Similar Technologies
Cookies are small data files stored on a browser or device.
We and our service providers use cookies and similar technologies for several purposes.
Essential Technologies
Essential technologies support:
- Shopping carts
- Checkout
- Payment processing
- Customer accounts
- Fraud prevention
- Security
- Network functions
- Privacy-preference storage
These technologies may operate because they are needed to provide the Site and services requested by the visitor.
Analytics Technologies
Analytics technologies help us understand:
- How many people visit the Site
- Which pages and products are viewed
- How visitors move through the Site
- Whether visitors encounter errors
- How website features can be improved
Advertising Technologies
Advertising technologies may be used to:
- Measure advertising performance
- Connect visits with advertising campaigns
- Create advertising audiences
- Limit repeated advertisements
- Provide targeted or interest-based advertising
Some privacy laws may define certain advertising disclosures as a “sale,” “sharing,” or targeted advertising, even when personal information is not exchanged for money.
Manage Your Cookie Preferences
You may use the Consentmo cookie-preference tab to accept, reject, or customize nonessential cookies:
Deleting cookies, changing browsers, or using a different device may remove a previously saved preference.
8. Google Analytics
We may use Google Analytics to understand general website activity and improve the Site.
Depending on our configuration and your privacy choices, Google Analytics may collect:
- Page views
- Session information
- Browser and device information
- Approximate location
- Referral information
- Website interactions
- Conversion events
- Transaction events
Where consent is required, Google Analytics is intended to operate according to the visitor’s analytics-cookie selection.
We do not intend to send complete payment information, account passwords, or private customer-service messages to Google Analytics.
9. Google Advertising Services
We may use Google Ads and related services to promote our products and measure advertising performance.
Depending on the configuration and your privacy choices, Google may process:
- IP address
- Browser and device information
- Cookie identifiers
- Advertising identifiers
- Products viewed
- Advertising interactions
- Conversion information
- General location information
You may manage advertising cookies through our Cookie Preferences.
You may also submit an applicable opt-out request through our Do Not Sell or Share My Personal Information page.
10. Microsoft Clarity
We use Microsoft Clarity to understand how visitors interact with the Site.
Microsoft Clarity may provide:
- Session replays
- Click maps
- Scroll maps
- Heatmaps
- Navigation reports
- Website performance information
Clarity may process:
- Mouse movements
- Clicks
- Scrolling
- Navigation paths
- Pages viewed
- Browser information
- Device information
- IP address
- Approximate location
- Cookie identifiers
- Technical data
A Clarity session replay is a reconstruction of website interactions. It is not intended to be a conventional video or audio recording of the visitor.
Microsoft provides masking controls designed to prevent selected sensitive information from appearing in session replays. Password and payment fields are intended to be masked or excluded.
Where consent is required, Clarity is intended to operate according to the visitor’s analytics-cookie selection.
Learn more about these practices in our U.S. Privacy Requests and Website Tracking Notice.
11. Consentmo
We use Consentmo to provide cookie-consent controls, maintain privacy preferences, support privacy requests, and help manage obligations under applicable privacy laws.
Consentmo may process:
- IP address
- Email address
- Consent choices
- Cookie preferences
- Privacy-request details
- Verification information
- Information needed to complete a request
You may submit a privacy request through:
You may manage cookie preferences through:
You may review Consentmo’s privacy policy at:
https://www.consentmo.com/legal/privacy-policy
12. Email Marketing
When you subscribe to email marketing, we may use your email address and engagement information to send:
- Product announcements
- Jewelry articles
- Subscriber offers
- Discount codes
- Restock notices
- Promotional messages
You may unsubscribe by using the link in a marketing email or by contacting us.
Unsubscribing from marketing does not stop transactional communications concerning orders, returns, exchanges, account security, or customer-service matters.
13. How We Disclose Personal Information
We may disclose personal information to the following categories of recipients:
| Recipient | Purpose |
|---|---|
| Shopify | Store hosting, checkout, accounts, payments, security |
| Payment providers | Payments, refunds, disputes, fraud prevention |
| Shipping carriers | Labels, delivery, tracking, claims |
| Analytics providers | Performance measurement and troubleshooting |
| Advertising providers | Advertising delivery, audiences, conversions |
| Consent providers | Cookie choices, privacy requests, consent records |
| Email providers | Transactional and marketing communications |
| Security providers | Fraud detection and account protection |
| Professional advisers | Legal, accounting, tax, and insurance services |
| Government authorities | Compliance with valid legal obligations |
| Business successors | Merger, acquisition, restructuring, or sale |
We may also disclose information:
- At your direction
- With your consent
- To complete a requested transaction
- To investigate fraud
- To protect legal rights
- As required by law
14. Sale, Sharing, and Targeted Advertising
We do not sell personal information in exchange for money.
Certain advertising-related disclosures involving cookies, pixels, identifiers, or advertising audiences may be treated as a sale, sharing, or targeted advertising under some state laws.
Where an applicable right exists, you may opt out through:
- Do Not Sell or Share My Personal Information
- Manage Cookie Preferences
- U.S. Privacy Requests
- A recognized Global Privacy Control signal
- Emailing jbrana@johnsbrana.com
An opt-out preference may apply only to the browser or device from which it was submitted unless you also submit an account-specific request.
We do not knowingly sell or share the personal information of children under 16.
15. Global Privacy Control
Global Privacy Control, also called GPC, is a browser-based privacy signal that can communicate a request to opt out of certain sales or sharing.
Where required by applicable law and technically supported, we treat a recognized GPC signal as an opt-out request for the browser or device sending it.
A GPC signal may not identify information stored separately in an account, order, or customer-service record. Submit an account-specific request through our U.S. Privacy Requests page when necessary.
16. Your Privacy Rights
Depending on where you live and which law applies, you may have the right to:
- Know whether we process personal information about you
- Access personal information
- Correct inaccurate information
- Request deletion
- Receive a portable copy
- Object to certain processing
- Restrict certain processing
- Withdraw consent
- Opt out of sale or sharing
- Opt out of targeted advertising
- Limit certain uses of sensitive personal information
- Appeal a privacy-request decision
- Submit a complaint to a privacy authority
- Receive equal service without unlawful discrimination
These rights are subject to applicable definitions and exceptions.
You may exercise applicable rights through our U.S. Privacy Requests page.
17. California Privacy Rights
When applicable, California residents may have the right to:
- Know the categories of personal information collected
- Access specific pieces of personal information
- Know the sources and purposes of collection
- Know the categories of recipients
- Request correction
- Request deletion
- Opt out of sale or sharing
- Limit certain sensitive-information uses
- Use a recognized opt-out preference signal
- Receive protection from unlawful discrimination
To exercise these rights, visit:
To opt out of applicable sale or sharing, visit:
Do Not Sell or Share My Personal Information
18. International Privacy Rights
Where international privacy laws apply, you may have rights involving:
- Access
- Correction
- Erasure
- Restriction
- Portability
- Objection
- Withdrawal of consent
- Direct marketing
- Automated decisions
- Complaints to a supervisory authority
Galleria NuVo, Inc. is located in the United States. Personal information may be processed in the United States and other countries where privacy laws differ from those in your jurisdiction.
19. Automated Fraud Screening
Shopify, payment providers, and security providers may use automated systems to identify potentially fraudulent or high-risk transactions.
These systems may consider:
- Transaction details
- Account activity
- Device information
- IP address
- Billing information
- Shipping information
- Previous fraud indicators
We may manually review or request additional verification for a flagged order.
20. Data Retention
We retain personal information for as long as reasonably necessary for the purpose for which it was collected.
Retention periods may depend on:
- Whether an account is active
- Whether an order or dispute remains open
- Tax and accounting obligations
- Fraud-prevention needs
- Customer-service needs
- Contractual obligations
- Legal limitation periods
- Regulatory requirements
- Whether deletion has been requested
We may retain transaction information after a deletion request when needed for tax, accounting, fraud prevention, dispute resolution, legal compliance, or legal claims.
21. Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information.
These measures may include:
- Encrypted website connections
- Access controls
- Account authentication
- Payment-security standards
- Fraud screening
- Limited access to customer information
- Security monitoring
- Data minimization
No method of transmission or storage can be guaranteed to be completely secure.
22. Children’s Privacy
The Site is intended for a general audience and is not directed to children under 13.
We do not knowingly collect personal information directly from a child under 13 without the authorization required by law.
A parent or guardian who believes a child submitted personal information may contact us to request review or deletion.
23. Accessibility and Privacy
We seek to make our website and privacy information accessible to visitors with disabilities.
Review our:
Visitors who need assistance accessing a privacy notice or submitting a privacy request may contact us at jbrana@johnsbrana.com.
24. Third-Party Websites
The Site may contain links to third-party websites, social platforms, payment providers, or delivery services.
We do not control the privacy practices of third-party websites. Information submitted directly to another website is governed by that website’s privacy policy.
25. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in:
- Business practices
- Website technologies
- Service providers
- Legal requirements
- Privacy rights
- Security practices
The revision date at the top indicates when this Privacy Policy was most recently updated.
26. Contact Us
Questions, complaints, or privacy requests may be directed to:
Privacy Compliance Officer
Galleria NuVo, Inc.
1043 Portola Drive
San Francisco, California 94127
United States
Email: jbrana@johnsbrana.com
Telephone: 1-415-664-9737
You may also use the following pages:
- U.S. Privacy Requests
- Do Not Sell or Share My Personal Information
- Manage Cookie Preferences
- Accessibility Statement