Privacy Policy

Last updated: 21 July 2026

This Privacy Policy explains how SJM Magnetics Co. collects, uses, shares, and protects your information when you visit our online store, upload photos, place an order, or contact us. The business responsible for your information is Sarah J Mercantile, LLC, 2499 Old Winder Jefferson Hwy, Jefferson, GA 30549, United States — sarahjmercantile@gmail.com.

Customer-Uploaded Photos & Personalization Text

Our products are made using the photos and text you upload. We treat those uploads as sensitive personal content and handle them with care.

• We use your photos and personalization text only to produce, check, and ship your order.
• We do not use customer photos in marketing, on social media, or as website examples unless you give us separate, explicit permission first.
• Uploads are processed through our e-commerce platform Shopify and our personalization app NINEMAGS, purely to fulfil your order.
• If you use our buy-now, upload-later option, your order is held until you submit your images; the same protections apply to files uploaded after checkout.
• We keep your files for as long as we need them to complete your order, handle any remake claim, and meet tax and accounting record-keeping duties. After that they are deleted from our production storage.

Notice at Collection (California Residents — CCPA / CPRA)

We collect the following categories of personal information:

• Identifiers and contact data — name, email address, phone number, billing and shipping address, IP address.
• Commercial information — orders placed, order contents, order notes, remake and refund requests.
• Customer-uploaded content — photos and personalization text you submit.
• Internet activity — pages viewed, cookies, analytics identifiers, device and browser information.
• Approximate geolocation — derived from your IP address, for fraud prevention and tax purposes.

We do not sell personal information for money. To opt out of any "sale" or "sharing" as those terms are defined by the CCPA / CPRA, email sarahjmercantile@gmail.com or use the "Do Not Sell or Share My Personal Information" link in our footer.

How We Use Your Information

• To process, make, and ship your custom orders, including local pickup arrangements.
• To send order updates and answer customer-service messages.
• To detect and prevent fraud, abuse, and unauthorised access.
• To meet our tax, accounting, and legal record-keeping obligations, including Georgia sales and use tax requirements.
• To send marketing emails — only where you have opted in. Every marketing email includes an unsubscribe link, in line with the CAN-SPAM Act.

Cookies & Analytics

Our store uses cookies and similar technologies that are necessary to run the site (cart, checkout, security) and, where enabled, optional cookies for analytics and marketing. You can manage optional cookies through the cookie banner on our store or through your browser settings. Blocking essential cookies may prevent checkout from working.

Service Providers

We share personal information with trusted providers only so they can perform a service for us: Shopify (store hosting and payment processing), NINEMAGS (product personalization), USPS and UPS (delivery), and our email and product-review providers. Each is required to use your information only for the service it provides to us. We may also disclose information where the law requires it, or to protect our legal rights.

Your Privacy Rights

California (CCPA / CPRA): you have the right to know what we collect, to have it deleted, to correct it, to opt out of sale or sharing, and not to be treated differently for exercising those rights.

Residents of other U.S. states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Texas, Oregon, and Utah): you have rights to access, correct, and delete your information, and to opt out of targeted advertising and profiling, where those laws apply to us.

To exercise any right, email sarahjmercantile@gmail.com. We may need to verify your identity before acting on a request, and we will respond within the period required by law.

Children’s Privacy (COPPA)

Our store is not directed at children under 13 and we do not knowingly collect their personal information. If you believe a child has given us information, email sarahjmercantile@gmail.com and we will delete it promptly.

Security

We use reasonable administrative, technical, and physical safeguards to protect your information, including encryption in transit (TLS) and payment processing handled by Shopify’s PCI-compliant systems. No transmission over the internet is completely secure, so we cannot guarantee absolute security.

Changes to This Policy

We may update this Privacy Policy from time to time. Any material change will be posted on this page with a new "Last updated" date.

Contact

Privacy questions and rights requests: sarahjmercantile@gmail.com
Sarah J Mercantile, LLC, 2499 Old Winder Jefferson Hwy, Jefferson, GA 30549, United States.