Privacy policy

Last updated: July 26, 2026

This Privacy Policy explains how Eliray ("Eliray", "we", "us", or "our") collects, uses, discloses, and protects your personal information when you visit eliray.co (the "Site"), purchase from us, or otherwise communicate with us (together, the "Services").

In this policy, "personal information" means information about an identifiable individual, as that term is used in Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and comparable provincial legislation.

Please read this policy carefully. If you do not agree with it, please do not use the Services.

1. Who is responsible for your information

Eliray is the organization accountable for the personal information under our control.

We are a small business, and responsibility for our privacy practices rests with our ownership. Questions, access requests, and complaints about personal information should be directed to:

Privacy Enquiries Eliray 2855 158 Street Surrey, BC V3Z 0E5, Canada Email: privacy@eliray.co

We will provide the name of the individual accountable for our privacy practices on request.

2. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. We will post the revised policy on the Site and update the "Last updated" date above. Where a change is significant, we will take additional steps to notify you as required by applicable law.

3. What personal information we collect

3.1 Information you give us directly

Contact details — your name, email address, phone number, and shipping and billing addresses.
Order information — the items you purchase, your customization selections, order value, payment confirmation, shipping details, and order history.
Design and customization data — the choices you make when configuring a piece of jewellery, including base selections, stone and gem choices, sizing, engraving text, and any reference images or notes you provide.
Account information — your username, password, and related account security information, if you create an account.
Customer service information — the contents of messages you send us by email, contact form, live chat, or social media, including any photographs you send us regarding a repair, return, or sizing question.
Marketing preferences — your consent to receive marketing emails or messages, and your subscription status.

Some features of the Services require this information. You may choose not to provide it, but that may prevent us from fulfilling your order or providing certain features.

3.2 Information collected automatically

When you use the Site, we and our service providers may automatically collect usage information ("Usage Data") through cookies, pixels, tags, and similar technologies. This may include your IP address, approximate location derived from it, device and browser type, operating system, referring URLs, pages viewed, products viewed, time spent on pages, and interactions with our emails.

3.3 Information from third parties

We may receive information about you from:

Shopify Inc., which hosts our online store and provides commerce infrastructure.
Payment processors, which collect and process your payment card or bank details to complete your transaction. We do not receive or store your full payment card number.
Shipping and fulfilment partners, which provide delivery status and address verification.
Advertising and analytics providers, which may provide aggregate or inferred information about how you found us and how you interact with our advertising.
Social media platforms, if you interact with us there or use a social login.

3.4 Sensitive information

We do not collect information about your race, ethnicity, religion, health, sexual orientation, political views, or biometric characteristics, and we ask that you do not send us such information.

4. Why we collect and use your personal information

We use personal information for the following purposes, and we do not use it for materially different purposes without your consent:

To provide the Services and fulfil your order. Processing payments, manufacturing and assembling your customized piece, arranging shipping, handling returns, exchanges, repairs, and warranty claims, managing your account, and sending you transactional messages such as order confirmations and shipping notifications.

To communicate with you. Responding to your questions, providing customer support, and following up on your order.

For marketing and advertising, where permitted. Sending you promotional emails or messages where you have consented or where we are otherwise permitted to do so under Canada's Anti-Spam Legislation (CASL), showing you advertising on other platforms, and measuring how our advertising performs. See Section 8 for how to opt out.

For security and fraud prevention. Detecting, investigating, and preventing fraudulent, unauthorized, or unlawful activity, and protecting our customers, our business, and our rights.

To improve our Services. Understanding how customers use the Site so we can improve our products, our customization tools, and the shopping experience.

To meet legal and regulatory obligations. Including tax and financial recordkeeping obligations, responding to lawful requests, and enforcing our terms.

5. Consent

We collect, use, and disclose your personal information with your consent, except where the law permits or requires otherwise.

Your consent may be express — for example, when you check a box to subscribe to marketing emails — or implied by your actions, such as placing an order, where the purpose would be obvious to a reasonable person.

You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawing consent may mean we are no longer able to provide certain products or services to you. To withdraw consent, contact us using the details in Section 1.

6. Cookies and tracking technologies

We use cookies and similar technologies to operate the Site, remember your cart and preferences, understand how the Site is used, and support our advertising.

For information about the cookies used by our Shopify store platform, see Shopify's cookie policy.

Most browsers accept cookies by default. You can set your browser to remove or reject cookies, but blocking them may cause parts of the Site to work incorrectly or become unavailable.

Global Privacy Control. Our Site recognizes the Global Privacy Control (GPC) browser signal. Where you send us a GPC signal, we treat it as a valid request to opt out of the sale or sharing of your personal information and of targeted advertising for that browser or device. We do not currently respond to other "Do Not Track" signals.

7. When we disclose your personal information

We do not sell your personal information for money.

We disclose personal information in the following circumstances:

To service providers who act on our behalf, including our ecommerce platform, payment processors, fulfilment and shipping partners, customer support tools, email and SMS marketing platforms, analytics providers, cloud hosting providers, and review platforms. These providers are permitted to use your information only to perform services for us.

To advertising and marketing partners, where you have consented. Certain advertising practices — such as sharing an identifier with a social media platform to show you relevant ads — may be considered a "sale" or "sharing" of personal information under some U.S. state privacy laws, even though no money changes hands. You can opt out as described in Section 8.

Where you direct us to, such as when you ask us to ship a gift to another person, or when you use a social sharing feature.

In connection with a business transaction, such as a merger, acquisition, financing, or insolvency, in which case personal information may be transferred as a business asset.

To comply with law, including responding to court orders, subpoenas, search warrants, tax authorities, and other lawful requests, and to establish, exercise, or defend legal claims.

8. Your marketing choices

You can unsubscribe from our marketing emails at any time using the unsubscribe link in any message, or by contacting us directly. We will act on your request promptly and in any event within the timeframes required by CASL.

Even if you opt out of marketing, we will still send you transactional messages about your orders, returns, and account.

To limit interest-based advertising, you can also adjust the ad settings on the relevant platform, use your device's advertising controls, or visit the Digital Advertising Alliance of Canada's opt-out tools.

9. Storage, international transfer, and processing outside Canada

Your personal information may be stored, accessed, and processed in countries other than Canada, including the United States and [OTHER COUNTRIES — see note below], by us, our affiliates, and our service providers.

This is important to understand: while your information is in another country, it is subject to that country's laws, and may be accessible to that country's courts, law enforcement, and national security authorities under those laws. The protections available to you may differ from those under Canadian law.

Where we transfer personal information out of the European Economic Area or the United Kingdom, we rely on recognized transfer mechanisms such as the European Commission's Standard Contractual Clauses, unless the destination country has been found to provide an adequate level of protection.

We use contractual and other means to require our service providers to provide a comparable level of protection to the personal information they process on our behalf.

10. How we protect your information

We maintain physical, organizational, and technological safeguards appropriate to the sensitivity of the information, including encryption of data in transit, access controls limiting who within our organization can view customer data, and use of reputable service providers who maintain their own security programs.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please do not send us sensitive or confidential information — such as full payment card numbers — by email or social media message.

If a breach of security safeguards occurs that creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as required by law.

11. How long we keep your information

We keep personal information only as long as necessary for the purposes described in this policy, or as required by law.

In practice, this means we retain order and transaction records for the period required by Canadian tax and business records legislation, currently a minimum of six years; account information for as long as your account remains active; and marketing contact information until you unsubscribe or ask us to delete it.

When personal information is no longer needed, we destroy, erase, or anonymize it.

12. Your rights

Depending on where you live, you may have some or all of the following rights. These rights are not absolute and may not apply in every circumstance.

Access — to ask whether we hold personal information about you, and to receive a copy of it along with information about how it has been used and disclosed.
Correction — to ask us to correct inaccurate or incomplete personal information.
Deletion — to ask us to delete personal information we hold about you.
Withdrawal of consent — as described in Section 5.
Portability — to receive your personal information in a structured, commonly used technological format, or to have it transferred to another organization, where applicable law provides this right.
Opt out of sale, sharing, or targeted advertising — as described in Sections 6 and 8.
Restriction of processing — to ask us to stop or limit certain processing.
Automated decision-making — to be informed if we use your personal information to make a decision about you based exclusively on automated processing, and to submit comments on it. We do not currently make such decisions.
Appeal or complain — if we decline your request, to challenge that decision.

To exercise any of these rights, contact us using the details in Section 1. We may need to verify your identity before responding, which may involve asking you to confirm information we already hold. We will respond within 30 days, or tell you if we need more time as permitted by law.

You may also designate an authorized agent to make a request on your behalf. We will ask the agent for proof of your authorization and may still verify your identity directly.

We will not discriminate against you for exercising any of these rights.

13. Complaints

If you have a concern about how we handle your personal information, please contact us first — we would like the chance to resolve it.

If you are not satisfied with our response, you may file a complaint with:

Office of the Privacy Commissioner of Canada — priv.gc.ca
Your provincial privacy regulator, if your province has one. Residents of Quebec may contact the Commission d'accès à l'information du Québec; residents of British Columbia and Alberta may contact their respective Offices of the Information and Privacy Commissioner.
Your local data protection authority, if you are in the EEA or UK.

14. Reviews and user-generated content

If you submit a product review, photograph, or other content to a public area of the Services, that content — including any name or details you include in it — will be publicly visible. We cannot control how others use information you choose to make public, so please consider carefully what you include.

15. Third-party sites

The Site may link to websites operated by others, including social media platforms and payment providers. We do not control those sites and are not responsible for their privacy practices. We encourage you to read their privacy policies before providing them with personal information.

16. Children

The Services are not directed to children, and we do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete it.

We do not knowingly sell or share the personal information of individuals under 16 years of age.