Privacy policy
Last Updated: July 2, 2026
Your Privacy is important to us. We take it seriously. Our Privacy Policy describes how we collect, handle and use your personal information when you interact with us, including submitting information online, over the phone, or through other electronic means, and how you may exercise your applicable privacy rights. By interacting with us, you consent to the use of your personal information as described in this Privacy Policy.
This Privacy Policy may be updated periodically. If we make material changes to how we collect, use, or share your personal information, we will notify you by updating the "Last Updated" date above, and, where required by law, through additional notice. We encourage you to review this page periodically.
As used in this Privacy Policy, "Site" means our website located at www.amoratidiamonds.com, together with any associated mobile applications, checkout flows, and other online properties we operate that link to this Privacy Policy.
- What Information We Collect
We may collect or obtain the following categories of personal information through this Site or by other means, including through any email message, webform, chat box, survey, social media page, event, or other communication or correspondence:
- Contact Data: First and last name, email address, postal address, phone number, and other similar contact data.
- Login Credentials: Passwords and other information for authentication and account access.
- Demographic Data: Age, gender, and country.
- Payment and Transaction Data: Data necessary to process your payment if you make a purchase, including your credit card number, security code and expiration date (not stored after purchase), shipping and fulfillment information, and details concerning your order.
- Profile Information: Interests, favorites, wish lists, ring size preferences, and other profile data.
- Contacts: Data about your contacts (names and email addresses) provided by you to fulfill a request (e.g., emailing a product to a friend or referring a friend). By using this functionality, you acknowledge and agree that you have your contacts’ consent for us to use their contact information to fulfill your request.
- Government IDs: Personal identifying information such as an image of your driver’s license or other government-issued identification for fraud prevention purposes. You may also be required to provide government-issued identification numbers such as your social security number for tax reporting purposes in the event that you win a sweepstakes prize.
- Communications, Testimonials, Feedback, and User-provided Data: Content of messages and communications you send to us, including feedback, product reviews, customer support inquiries, and social media interactions.
- Telephone Recordings: Telephone recordings when you speak with us or our representatives over the telephone, e.g., telephone orders and customer support.
- Social Media Data: Information and messages shared with us through social media pages, including your associated profile information.
- Referral Data: Information about you provided to us from other sources, including your email address.
- Interaction Data: Information identifiable to you when you access or use the Site or otherwise interact with us, including: Log Data (e.g., IP addresses, referral URLs, date and time, and crash data); Device Data (e.g., information about your device, including type of device, operating system, application IDs, and unique device identifiers); Browser Data (e.g., information about your browser type and settings, language preferences, and cookie data); and Analytics Data (e.g., approximate geolocation, information about your time of access, session and duration, and your interactions with the Site).
- Advertising and Tracking Data: When you interact with our website, we and our advertising partners (including TikTok, Meta/Facebook/Instagram, Pinterest, and Google) may collect data via pixels, tags, and tracking technologies, including: hashed email addresses, phone numbers, and other contact details you provide; browsing behavior, page views, add-to-cart events, and purchase events; device identifiers, IP addresses, and browser/app signals; and custom audience identifiers used for ad targeting, retargeting, and conversion measurement. This data is used to measure ad performance, optimize campaigns, and serve relevant advertising on these platforms and across the internet.
- Recruiting and Job Applicant Data: Information concerning your recruitment and/or application for employment, including resume data, references, education records, certificates, biodemographic information (e.g., race, ethnicity, gender, sexual orientation, nationality, veteran status), trade union membership, citizenship and residency information, SSN, and reputational information, as may be provided by you or through a recruiter, staffing agency, or other referring party, and background check information, as may be provided by you or supplied by a background verification service and/or consumer reporting agencies.
- Data From Other Sources: Information from data brokers, social networks, financing providers, advertising and marketing firms, and publicly-available sources. We partner with online data providers and identity resolution platforms to associate your anonymous browsing activity and interactions on our Site with personal information they or others hold about you, including your email address.
- How We Use Your Information
We may use personal information collected about you for the following purposes:
- Presenting the Site and its contents to you.
- Processing and fulfilling transactions and orders, including billing and shipment.
- Managing, operating, and administering our business, including your registration and account.
- Communicating by email, phone, SMS (text message), and other means to respond to your comments, questions, and requests.
- Providing you with customer support.
- Sending appointment reminders and confirming or scheduling interactions with us.
- Business insights and product development, including improving our marketing and promotional efforts.
- Monitoring and analyzing trends, usage, activities, and tracking interactions.
- Conducting surveys and research on consumer demographics, interests, and behavior.
- Providing and serving advertising on our Site and unaffiliated websites and services.
- Measuring, reporting on, and optimizing advertising campaign performance across third-party platforms including TikTok, Meta (Facebook and Instagram), Pinterest, and Google, including through the use of pixels, conversion APIs, and enhanced conversion tracking.
- Sales and marketing, including developing and utilizing data obtained from identity resolution partners to develop and send you direct marketing, such as advertisements, and email communications about our products, offers, and services and other parties’ products, offers, promotions, rewards, events, and services.
- Evaluating and processing applications for employment.
- Detecting and preventing abuse, security threats, and illegal activities, including suspected fraud.
- Complying with applicable legal and regulatory requirements, including legal process and government requests.
- Engaging in corporate transactions involving our business.
- Notifying you regarding updates, security alerts, and changes to the Site, Terms & Conditions, and Privacy Policy.
- For any other purpose disclosed to you or upon your intention, direction, or consent.
- How We Share Your Information
We may disclose any category of personal information and Interaction Data to the following categories of recipients for the purposes described below:
- Related Entities, Subsidiaries, and Affiliates: We may disclose personal information with related entities, subsidiaries, and affiliates to operate and improve our business, provide customer support, in connection with offering you co-branded products and services, selling or distributing our products, or engaging in joint marketing activities.
- Vendors and Service Providers: We may disclose personal information to our vendors and service providers for business and commercial purposes, including web hosting, shipping and fulfillment, insurance, data analysis, analytics and advertising technology, customer service, consulting or marketing, accounting, legal, financial services, and technology companies, as well as data partners and identity resolution providers who help us match online browsing behavior with consumer contact profiles. We will share information with other companies and organizations for credit fraud protection and risk reduction.
- Advertising and Analytics Services and Ad Networks: We may disclose personal information to advertising and analytics services providers, advertising networks, and social media platforms to deliver advertising and promote our products and brand. These platforms currently include TikTok (via TikTok Pixel and Events API), Meta/Facebook/Instagram (via Meta Pixel and Conversions API), Pinterest (via Pinterest Tag and API), and Google (via Google Ads tags and Enhanced Conversions). Data shared with these platforms may include hashed contact information (email addresses, phone numbers), behavioral and conversion event data (e.g., page views, add-to-cart, purchases), device identifiers, and IP addresses, used for ad targeting, retargeting, lookalike audience creation, and campaign measurement. Amorati Diamonds does not share raw (unhashed) personally identifiable information through standard advertising tags. Each platform processes this data pursuant to its own privacy policy.
- Special Events Partners: If you participate in a special event (e.g., a promotion), we may share your information with those organizations participating in the applicable event. Typically, these other parties do not use your information for any other purpose other than to manage the event. In some cases, these promotional affiliates may send you promotional materials regarding their products and services.
- Recruiting Services Providers: We may disclose personal information to recruiting and staffing service providers to identify job candidates and facilitate the evaluation and processing of applications for employment.
- Security, Compliance, and Fraud Protection Partners: We may disclose your personal information as we deem necessary to comply with any applicable law, regulation, rule, legal process or governmental request. We will also share your information in order to investigate, prevent or take action regarding illegal activities, including suspected fraud, or as otherwise required by law. We will also share your information to protect the rights, property, life, health, security and safety of us and/or any person or party.
- Corporate Transaction: We may disclose personal information as part of a corporate transaction or investment, e.g., to a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of assets, whether as a going concern or as a part of a bankruptcy, liquidation or similar proceeding.
- E-Commerce Platform: Our Site is hosted on Shopify, Inc. Shopify acts as our e-commerce platform and service provider and may process personal information on our behalf in connection with operating our online store, processing orders, and related services. Shopify's processing of your data is governed by Shopify's Privacy Policy and our data processing agreements with Shopify.
- Financing Partners: If you choose to finance a purchase, we may share limited transaction information with our third-party financing partners to process your financing application and payments. Their processing of your data is governed by their own privacy policy.
- Cookies and Tracking Technologies
We may use various technologies, including small data files placed on your computer or device when you visit the Site, such as “Cookies,” “Pixels,” “Web Beacons,” and similar technologies, including those provided by third parties, with whom your information may be shared.
A Cookie file may contain information that can identify you each time you visit the Site. The Site may use Cookies as a way to measure activity and traffic patterns on the Site in order to improve your experience, remember user preferences, monitor usage, compile analytics, and for advertising and marketing purposes. By interacting with our Site, you agree to our use of Cookies.
We and our advertising partners specifically use the following tracking technologies for advertising purposes:
- TikTok Pixel and Events API: We use the TikTok Pixel and TikTok Events API to track website visitor actions (such as page views, add-to-cart events, and purchases) and share this data with TikTok for ad measurement, optimization, and custom audience targeting. This data is governed by TikTok’s Business Products (Data) Terms. You may limit TikTok’s use of your data through TikTok’s privacy settings.
- Meta Pixel and Conversions API (Facebook/Instagram): We use the Meta Pixel and Meta Conversions API to track visitor actions on our Site and share conversion and behavioral data with Meta Platforms, Inc. for ad delivery, retargeting, and measurement. Meta acts as a third-party controller of this data under Meta’s Data Policy. You may manage your ad preferences at www.facebook.com/ads/preferences or through the AdChoices program.
- Pinterest Tag and API: We use the Pinterest Tag to collect visitor activity data from our Site and share it with Pinterest, Inc. for advertising and analytics purposes, including retargeting and conversion measurement. By sharing this data with Pinterest, both Amorati Diamonds and Pinterest may act as joint controllers with respect to certain data. You may opt out of Pinterest’s use of this data through Pinterest’s personalization settings at pinterest.com/settings/privacy or through optout.aboutads.info.
- Google Ads Tags, Google Analytics, and Enhanced Conversions: We use Google Ads tags, Google Analytics, and Google’s Enhanced Conversions feature to track user interactions with our Site and advertising campaigns, and to measure conversions. Google LLC may use this information to serve ads on your behalf across the internet. We do not share raw personally identifiable information (PII) through standard Google tags; Enhanced Conversions use hashed data only. You may opt out of Google’s use of cookies or device identifiers by visiting Google’s Ads Settings at adssettings.google.com. You may also opt out through the Network Advertising Initiative at optout.networkadvertising.org.
Global Privacy Control (GPC). Where legally required, we honor browser‑based opt‑out preference signals, such as Global Privacy Control (GPC), for activities that constitute a “sale” or “share” of personal information under applicable law. When we detect a valid GPC signal from your browser, we will apply your opt‑out to that browser for sale/share. Some features rely on these technologies and may be limited after your choice.
Do Not Track Signals Under the California Online Privacy Protection Act (“CalOPPA”), we want to inform you about our “Do Not Track” (“DNT”) request policy. We have not implemented the necessary programming changes to honor “DNT” browser signals at this time. Please return to this Privacy Policy for further updates on this topic.
- Your Privacy Rights (U.S. Consumers)
Residents of certain U.S. states may have specific privacy rights regarding their personal information, subject to certain limitations. These rights may include:
- Access: You may have the right to access the personal information collected about you.
- Deletion: You may have the right to request that we delete any of the personal information we have collected or maintain about you.
- Correction: You may have the right to correct inaccuracies in your personal information.
- Opt-out of the “Sale” and/or “Sharing” of Personal Information or its Use for Profiling or Targeted Advertising: You may have a right to opt-out of the “sale” and “sharing” of your personal information, profiling, and/or the use of your personal information for targeted advertising.
- Sensitive Personal Information: You may have the right to opt-out of the use and disclosure of your sensitive personal information in certain circumstances, or consent (opt-in) prior to its use and disclosure.
- Restrict Profiling: You may have the right to restrict the use of your personal information for the purposes of profiling.
- Portability: You may have the right to obtain a copy of certain personal information in portable (e.g., machine readable) format.
- Opt-out of Automated Decision-making: You may have the right to opt-out to certain types of automated decision-making, subject to certain exceptions.
- Non-Discrimination: You may have the right to not be discriminated against in the event you exercise your privacy rights, such that you will not be denied goods or services, charged a higher rate, or provided with lower quality products or services.
Exercising Your U.S. State Consumer Privacy Rights You, or an authorized agent, may exercise your rights by submitting a request at privacy@amoratidiamonds.com. Unless otherwise required by law, we will allow two disclosure requests per 12-month period at no cost to you. We respond to legitimate privacy requests within 10 days of receipt and process requests within 45 days unless there is cause for an extension. If you are a resident of a state that provides a right to appeal, you may appeal our decision by contacting us at privacy@amoratidiamonds.com with the subject line "Privacy Rights Appeal" within 30 days of our decision. We will respond to your appeal as required under applicable law.
Do Not Sell or Share My Personal Information. Please note that Amorati Diamonds does not sell your personal information for monetary compensation. However, we do share personal information with our service providers, product suppliers, data partners, advertising and analytics services, and networks — including TikTok, Meta (Facebook/Instagram), Pinterest, and Google — to facilitate the operation of our website, the fulfillment of your orders, coordinate marketing communications, and to deliver and measure targeted advertising (sometimes referred to as “cross-context behavioral advertising”). Certain US state laws provide consumers the right to limit the use of their personal information for targeted advertising and profiling. To exercise this right, please go to our Website Data Collection Practices (Your Privacy Choices / Cookie consent) and customize your Cookie Preferences & Tracking Opt-Out to opt out of certain data collection categories.
California “Shine the Light” Law We do not share personal information, as defined by Cal. Civ. Code § 1798.83, with third parties for their own direct marketing purposes.
Categories of Personal Information We Collect (California Specific):
|
Categories of Personal Information |
Purposes for Use and Disclosure |
Source |
Disclosed for Business Purpose |
Sold or Shared |
|
Identifiers (name, postal address, IP address, email, account name, SSN, driver's license, passport, or other similar identifiers) |
Presenting the Site; Processing and fulfilling transactions; Operating our business; Communicating with you; Providing support; Appointment reminders; Eligibility for prizes; Business insights; Monitoring interactions; Surveys and research; Advertising; Direct marketing; Processing employment applications; Fraud prevention; Legal compliance; Corporate transactions; Notifications |
From you, directly or indirectly, or third parties |
Yes, to Related Entities, Service Providers; Advertising Services (including TikTok, Meta, Pinterest, and Google); Events Partners; Recruiting Services; Security and Fraud Partners; Corporate Transactions |
Yes, to Advertising and Analytics Services and Networks (including TikTok, Meta, Pinterest, and Google), and online data/identity resolution partners |
|
Personal information under Cal. Civ. Code § 1798.80(e) (name, SSN, financial info, etc.) |
Processing and fulfilling transactions; Operating our business; Communicating with you; Providing support; Eligibility for prizes; Business insights; Surveys and research; Advertising; Direct marketing; Processing employment applications; Fraud prevention; Legal compliance; Corporate transactions; Notifications |
From you, directly, or third parties |
Yes, to Related Entities; Service Providers; Advertising Services; Events Partners; Recruiting Services; Security Partners; Corporate Transactions |
No |
|
Protected classification characteristics (age, race, religion, sex, disability, etc.) |
Operating our business; Eligibility for prizes; Business insights; Surveys and research; Advertising; Direct marketing; Processing employment applications; Fraud prevention; Legal compliance; Corporate transactions; Notifications |
From you, directly |
Yes, to Service Providers; Events Partners; Security Partners; Corporate Transactions |
No |
|
Commercial information (products/services purchased, purchasing histories) |
Processing and fulfilling transactions; Operating our business; Providing support; Eligibility for prizes; Business insights; Monitoring interactions; Surveys and research; Advertising; Direct marketing; Fraud prevention; Legal compliance; Corporate transactions; Notifications |
From you, directly or indirectly, or third parties |
Yes, to Related Entities, Service Providers; Advertising Services (including TikTok, Meta, Pinterest, and Google); Events Partners; Recruiting Services; Security Partners; Corporate Transactions |
Yes, to Advertising and Analytics Services and Networks (including TikTok, Meta, Pinterest, and Google) |
|
Biometric information |
Not collected |
Not applicable |
No |
No |
|
Internet or other electronic network activity (browsing history, search history, interactions with ads) |
Presenting the Site; Processing and fulfilling transactions; Operating our business; Communicating with you; Providing support; Business insights; Monitoring interactions; Surveys and research; Advertising; Direct marketing; Fraud prevention; Legal compliance; Corporate transactions; Notifications |
From you, indirectly, or third parties |
Yes, to Related Entities, Service Providers; Advertising Services (including TikTok, Meta, Pinterest, and Google); Events Partners; Security Partners; Corporate Transactions |
Yes, to Advertising and Analytics Services and Networks (including TikTok, Meta, Pinterest, and Google) |
|
Sensory information (audio, electronic, visual from recorded calls) |
Processing and fulfilling transactions; Operating our business; Communicating; Providing support; Business insights; Surveys and research; Advertising; Direct marketing; Processing employment applications; Fraud prevention; Legal compliance; Corporate transactions; Notifications |
From you, directly or indirectly, or third parties |
Yes, to Related Entities, Service Providers; Advertising Services; Events Partners; Recruiting Services; Security Partners; Corporate Transactions |
No |
|
Professional or employment-related information |
Operating our business; Communicating with you; Processing employment applications; Fraud prevention; Legal compliance; Corporate transactions; Notifications |
From you, directly, or third parties |
Yes, to Related Entities, Service Providers; Recruiting Services; Security Partners; Corporate Transactions |
No |
|
Education information (non-public FERPA-protected information) |
Operating our business; Communicating with you; Processing employment applications; Fraud prevention; Legal compliance; Corporate transactions; Notifications |
From you, directly, or third parties |
Yes, to Related Entities, Service Providers; Recruiting Services; Security Partners; Corporate Transactions |
No |
|
Inferences drawn to create consumer profiles (preferences, behavior, attitudes) and Interaction Data (log, device, browser data) |
Presenting the Site; Processing and fulfilling transactions; Operating our business; Communicating with you; Providing support; Appointment reminders; Eligibility for prizes; Business insights; Monitoring interactions; Surveys and research; Advertising; Direct marketing; Processing employment applications; Fraud prevention; Legal compliance; Corporate transactions; Notifications |
From you, directly or indirectly, or third parties |
Yes, to Related Entities, Service Providers; Advertising Services (including TikTok, Meta, Pinterest, and Google); Events Partners; Recruiting Services; Security Partners; Corporate Transactions |
Yes, to Advertising and Analytics Services and Networks (including TikTok, Meta, Pinterest, and Google) |
Categories of Sensitive Personal Information We Collect (California Specific) From you, directly or indirectly, or from third parties, we may collect, and have collected in the preceding 12-months, the following categories of sensitive personal information for business and commercial purposes:
|
Categories of Sensitive Personal Information |
Purposes for Use and Disclosure |
Source |
Disclosed for Business Purpose |
Sold or Shared |
|
Sensitive identifier (SSN, driver's license, passport) |
Processing and fulfilling transactions; Operating our business; Providing support; Eligibility for prizes; Processing employment applications; Fraud prevention; Legal compliance; Corporate transactions; Notifications |
From you, directly |
Yes, to Related Entities, Service Providers; Security Partners; Corporate Transactions |
No |
|
Account information (login credentials, financial account numbers with access codes) |
Processing and fulfilling transactions; Operating our business; Providing support; Fraud prevention; Legal compliance; Corporate transactions; Notifications |
From you, directly |
Yes, to Related Entities, Service Providers; Security Partners; Corporate Transactions |
No |
|
Precise geolocation (within radius of 1,850 feet) |
Not collected |
Not applicable |
No |
No |
|
Demographic information (race, ethnic origin, religious beliefs, union membership) |
Processing employment applications |
From you, directly |
Yes, to Related Entities, Service Providers; Recruiting Services; Corporate Transactions |
No |
|
Communications content (mail, email, text messages where business is not intended recipient) |
Not collected |
Not applicable |
No |
No |
|
Genetic data |
Not collected |
Not applicable |
No |
No |
|
Biometric information processed for unique identification |
Not collected |
Not applicable |
No |
No |
|
Personal information concerning health |
Not collected |
Not applicable |
No |
No |
|
Personal information concerning sex life or sexual orientation |
Not collected |
Not applicable |
No |
No |
Retention Period or Criteria (California Specific). We retain personal information for as long as reasonably necessary to fulfill the purposes for which it was collected, including to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods may vary based on legal, contractual, or operational requirements.
Personal Information of Minors (California Specific). We have no knowledge of having collected the personal information of minors under 16 years of age. Our services are not directed to children and we do not knowingly collect personal information from anyone under 16. We do not sell or share personal information of consumers we know are under 16.
Nevada Residents. Nevada law (NRS 603A) permits Nevada residents to opt out of the sale of certain covered information to third parties for those third parties to license or sell the information to others. Amorati Diamonds does not currently sell personal information in the manner covered by Nevada law. If this changes, or if you wish to submit a verified request under Nevada law, you may do so by emailing privacy@amoratidiamonds.com with the subject line "Nevada Do Not Sell Request."
- Additional Important Information
SMS/Text Message Notifications and Mobile Marketing. If you opt in, we may use your mobile phone number to send you SMS (text message) notifications and marketing messages. SMS communications may be received and recorded by third parties. By opting in, you consent to receive recurring automated marketing text messages (e.g., cart reminders, promotions, order updates) at the mobile number provided. Message frequency varies. Message and data rates may apply. Consent to receive marketing text messages is not a condition of any purchase. Reply STOP to opt out at any time, or reply HELP for assistance. Carriers are not liable for delayed or undelivered messages.
Communications Recording. Communications with us, including communications made through our Site, online chatbot, email, phone, SMS, and other means, may be received and recorded by us and by third parties. By communicating with us, you agree to the receipt and recording of your information by us and by third parties.
Third-Party Advertising Platforms. Our Site uses advertising tools and pixels from TikTok, Meta (Facebook and Instagram), Pinterest, and Google. These platforms may independently collect, use, and share data about your activities on our Site in accordance with their own privacy policies. We encourage you to review the privacy policies of these platforms: TikTok Privacy Policy (tiktok.com/legal/privacy-policy); Meta Privacy Policy (facebook.com/privacy/policy); Pinterest Privacy Policy (policy.pinterest.com/en/privacy-policy); Google Privacy Policy (policies.google.com/privacy).
Third-Party Sites, Blogs, and Social Media. Our Site includes links to other websites, social media widgets, and other interactive features hosted by third parties whose privacy practices may differ from our own. When you use a link to go from our Site to an unaffiliated website, or interact with any such features, the privacy policies of those respective third parties will apply to the processing of your personal information.
International Users. Our Site and services are intended for users located in the United States. If you access our Site from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those of your country of residence. By using our Site, you consent to this transfer, storage, and processing.
Children’s Privacy. Our services are not directed to children, and we do not knowingly collect personal information from children under the age of 13 in accordance with the Children's Online Privacy Protection Act (COPPA). Separately, and specific to California and other states with similar minor-consent requirements, we do not sell or share the personal information of consumers we know to be under 16 years of age without opt-in consent (with affirmative authorization from a parent or guardian required for consumers under 13). If we learn that we have collected personal information from a child under 13, we will delete it and take reasonable steps to close any associated account. Parents or guardians who believe we may have collected information from a child can contact us at privacy@amoratidiamonds.com.
Security of Personal Information. Taking into account the nature and scope of the processing and the particular risks to personal information, we utilize reasonable technical and organizational measures to help protect personal information. Such measures include, as applicable, the Payment Card Industry Data Security Standards (PCI DSS). In the event of a data breach affecting your personal information, we will notify affected individuals and, where required, applicable regulators, in accordance with applicable law.
Communications Preferences. To opt-out of receiving email promotions from us, please follow the unsubscribe instructions in our promotional email correspondence or contact us as set forth below. Please note that opting out of promotional communications received does not affect our non-promotional communications with you, service messages, orders placed with us, or our ongoing business relations.
- Contact Us / Privacy Inquiries
For inquiries concerning this Privacy Policy, you may contact: privacy@amoratidiamonds.com; By mail: Amorati Diamonds Inc., Attn: Legal / Privacy, 501 Union Street, STE 545 PMB 777484, Nashville, TN 37219-1876.
- Governing Law
This Privacy Policy is governed by the laws of the State of Tennessee, without regard to conflict-of-law principles, except where superseded by applicable federal or state privacy laws.