Last Updated: September 10, 2026

JOHNNYSICEANDCO (“JOHNNYSICEANDCO,” “we,” “us,” or “our”) respects your privacy and is committed to protecting personal information.

This GDPR / EEA Privacy Notice explains how we collect, use, disclose, retain, and protect personal data relating to individuals located in the European Economic Area (EEA) when they visit our websites, communicate with us, purchase our products or services, create an account, participate in our membership programs, or otherwise interact with JOHNNYSICEANDCO.

For purposes of this Notice, the EEA includes the European Union member states together with Iceland, Liechtenstein, and Norway.

This Notice is intended to supplement our general Privacy Policy and applies specifically to processing of personal data that is subject to the EU General Data Protection Regulation (GDPR).

1. WHO WE ARE

The entity responsible for your personal data is:

JOHNNYSICEANDCO
621 Beville Road
Daytona Beach, Florida [ZIP CODE]
United States

Website: johnnysiceandco.com
Email: info@johnnysiceandco.com
Phone: 386-944-9988

For purposes of the GDPR, JOHNNYSICEANDCO generally acts as the data controller for personal data that we collect and determine the purposes and means of processing.

If you have questions about this Notice or your personal data, you may contact us using the information above.

European Representative

Where required by Article 27 of the GDPR, JOHNNYSICEANDCO will appoint a representative in the European Union and provide that representative's contact information in this Notice.

If Article 27 does not apply to JOHNNYSICEANDCO based on the nature, scope, and circumstances of our processing activities, no EU representative will be designated.

2. WHAT PERSONAL DATA WE COLLECT

Depending on how you interact with JOHNNYSICEANDCO, we may collect the following categories of personal data:

Identity and Contact Information

• Full name
• Email address
• Telephone number
• Billing address
• Shipping address
• Other contact information you voluntarily provide

Account Information

If you create an account or membership profile, we may collect:

• Username or account information
• Account credentials
• Membership status
• Account preferences
• Purchase history
• Rewards, credits, or membership activity
• Communications and interactions associated with your account

Transaction Information

When you purchase products or services from us, we may collect:

• Products or services purchased
• Order information
• Transaction amounts
• Billing and shipping information
• Order history
• Customer service communications

Payment card information may be processed directly by our third-party payment processors. We generally do not need to retain your complete payment-card number.

Custom Jewelry Information

If you request custom jewelry, repairs, engraving, grillz, permanent jewelry, or other personalized services, we may collect information necessary to fulfill the project, such as:

• Design specifications
• Engraving information
• Jewelry specifications
• Measurements or fitting information
• Images or reference materials you provide
• Project communications
• Order and production details

You should not provide unnecessary sensitive personal information when submitting custom project information.

Membership and Digital Services

If you participate in JOHNNYSICEANDCO membership programs or related digital services, we may collect:

• Membership information
• Membership status
• Rewards and credits
• Challenges, operations, or activities completed
• Event RSVPs
• Community participation
• Jewelry tracking information you voluntarily provide
• Jewelry-related information associated with your account
• Certificates or documentation associated with jewelry
• Communications relating to your membership

Communications

If you contact us, we may retain:

• Emails
• Messages
• Customer-service requests
• Reviews or feedback
• Information you voluntarily provide during communications

Technical and Usage Information

When you access our websites or digital services, we or our service providers may automatically collect certain technical information, including:

• IP address
• Browser type
• Device type
• Operating system
• Approximate geographic location derived from technical information
• Website pages viewed
• Referring and exit pages
• Date and time of access
• General usage information
• Cookie and similar technology information

The exact information collected depends on the technologies and third-party services active on our websites.

3. HOW WE COLLECT PERSONAL DATA

We may collect personal data:

• Directly from you when you purchase products or services
• When you create an account
• When you apply for or participate in a membership program
• When you contact us
• When you submit a custom jewelry request
• When you subscribe to communications
• When you participate in promotions, events, challenges, or rewards
• When you interact with our websites
• Through cookies and similar technologies
• From service providers that assist us with our business operations
• From publicly available sources where permitted by applicable law

---

4. WHY WE USE YOUR PERSONAL DATA

We may use personal data for the following purposes:

Providing Products and Services

We use personal data to:

• Process and fulfill orders
• Provide requested products and services
• Create and manage customer accounts
• Complete custom jewelry projects
• Process repairs and service requests
• Communicate about orders and projects
• Provide customer support
• Deliver requested membership benefits

Managing Memberships

We may use personal data to:

• Verify membership status
• Administer membership accounts
• Provide rewards or credits
• Manage challenges, operations, and activities
• Manage event RSVPs
• Provide membership communications
• Maintain membership records
• Prevent unauthorized access to members-only services

Business Operations

We may use information to:

• Operate and improve our websites
• Maintain business records
• Analyze website usage
• Improve products and services
• Maintain security
• Detect and prevent fraud or abuse
• Troubleshoot technical problems
• Enforce our policies and agreements

Marketing and Communications

Where permitted by applicable law, we may use personal data to:

• Send promotional communications
• Provide information about products and services
• Send membership-related communications
• Notify you about promotions or events
• Measure the effectiveness of marketing campaigns

Where consent is required for marketing communications, we will obtain that consent before sending the relevant communications.

You may unsubscribe from marketing communications at any time.

---

5. LEGAL BASES FOR PROCESSING

Where the GDPR applies, we process personal data on one or more of the following legal bases:

Performance of a Contract

We may process information when necessary to perform a contract with you or take steps at your request before entering into a contract.

Examples include:

• Processing an order
• Completing a custom jewelry project
• Providing requested services
• Managing an account
• Administering a membership

Legal Obligations

We may process personal data when necessary to comply with applicable legal or regulatory obligations.

Examples may include:

• Accounting and tax requirements
• Fraud prevention
• Legal requests
• Recordkeeping obligations

Legitimate Interests

We may process personal data where necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.

Our legitimate interests may include:

• Operating and improving our business
• Improving our websites and services
• Maintaining website and account security
• Preventing fraud and abuse
• Communicating with existing customers
• Managing customer relationships
• Protecting our legal rights

Consent

We may process personal data based on your consent when required by law.

Examples may include:

• Certain marketing communications
• Certain non-essential cookies
• Certain optional data-processing activities

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

6. COOKIES AND SIMILAR TECHNOLOGIES

Our websites may use cookies, pixels, tags, analytics technologies, and similar tools.

These technologies may be used to:

• Keep websites functioning
• Remember preferences
• Maintain shopping-cart functionality
• Understand website traffic
• Analyze website performance
• Improve user experience
• Measure advertising effectiveness
• Provide relevant marketing where permitted

Where required by applicable law, we will request consent before placing or using non-essential cookies.

You may be able to control cookies through your browser settings and, where available, through our cookie-consent tools.

Disabling certain cookies may affect website functionality.

For additional information, please refer to our Cookie Policy.

7. THIRD-PARTY SERVICE PROVIDERS

We may use third-party companies to help us operate our business and provide our services.

Depending on the services currently active on our websites, these providers may include companies that provide:

• E-commerce and website hosting
• Payment processing
• Shipping and fulfillment
• Customer relationship management
• Email and communications
• Analytics
• Advertising and marketing
• Fraud prevention
• Security
• Customer support
• Membership or account-management functionality
• Cloud storage
• Website functionality

Examples may include Shopify and other technology providers that we use from time to time.

These providers may process personal data on our behalf and may be contractually required to process information only for authorized purposes and to maintain appropriate security measures.

The actual third-party providers used by JOHNNYSICEANDCO may change over time.

---

8. INTERNATIONAL DATA TRANSFERS

JOHNNYSICEANDCO is based in the United States.

As a result, personal data collected from individuals in the EEA may be transferred to, stored in, or processed in the United States or other countries outside the EEA.

European data-protection law requires appropriate safeguards for certain transfers of personal data outside the EEA.

Where required, we will rely on an applicable lawful transfer mechanism, which may include:

• An applicable European Commission adequacy decision;
• Standard Contractual Clauses approved by the European Commission;
• Other legally recognized transfer mechanisms or safeguards; or
• A permitted GDPR derogation where applicable.

Our third-party service providers may also process information outside the EEA.

If you would like additional information regarding the safeguards applicable to a particular international transfer, you may contact us using the information provided below.

9. HOW LONG WE KEEP PERSONAL DATA

We retain personal data only for as long as reasonably necessary for the purposes described in this Notice, unless a longer retention period is required or permitted by applicable law.

Retention periods may depend on:

• The purpose for which the information was collected
• Whether we have an ongoing business relationship with you
• Legal, accounting, or tax requirements
• Dispute-resolution requirements
• Fraud-prevention requirements
• The need to establish, exercise, or defend legal claims
• Technical or operational requirements

When personal data is no longer necessary, we will delete it, anonymize it, or otherwise securely dispose of it where reasonably practicable.

10. YOUR GDPR RIGHTS

If the GDPR applies to your personal data, you may have the following rights.

Right of Access

You may request confirmation as to whether we process your personal data and request access to that data.

Right to Rectification

You may request correction of inaccurate or incomplete personal data.

Right to Erasure

In certain circumstances, you may request that we delete your personal data.

This right is not absolute and may be subject to legal or other exceptions.

Right to Restriction of Processing

In certain circumstances, you may request that we restrict how we process your personal data.

Right to Data Portability

Where applicable, you may request certain personal data in a structured, commonly used, and machine-readable format and may have the right to transmit that information to another controller.

Right to Object

You may object to certain processing of your personal data, including processing based on legitimate interests.

You may also object to processing of your personal data for direct marketing purposes.

Right to Withdraw Consent

Where we process your personal data based on consent, you may withdraw that consent at any time.

Withdrawal of consent does not affect the lawfulness of processing that occurred before consent was withdrawn.

Rights Regarding Automated Decision-Making

Where applicable, you may have rights relating to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects.

JOHNNYSICEANDCO does not intend to make decisions producing legal or similarly significant effects about individuals solely through automated processing unless permitted by applicable law and appropriate safeguards are provided.

The availability of these rights depends on the circumstances and applicable legal requirements. The GDPR itself provides certain conditions and exceptions to these rights.

11. HOW TO EXERCISE YOUR RIGHTS

To submit a GDPR privacy request, contact:

JOHNNYSICEANDCO
621 Beville Road
Daytona Beach, Florida [ZIP CODE]
United States

Email: info@johnnysiceandco.com
Phone: 386-944-9988

Please clearly state that your request concerns your GDPR / EEA privacy rights.

We may need to request reasonable information to verify your identity before fulfilling certain requests. We will not request passwords, complete payment-card numbers, or other unnecessary sensitive credentials for purposes of ordinary privacy verification.

We generally respond to valid GDPR requests without undue delay and, where required by GDPR, within one month of receiving the request. Where a request is particularly complex or where multiple requests are made, applicable law may permit an extension. If an extension is necessary, we will communicate the applicable reasons as required by law.

---

12. RIGHT TO LODGE A COMPLAINT

If you are located in the EEA and believe that our processing of your personal data violates applicable data-protection law, you have the right to lodge a complaint with a competent supervisory authority.

You may generally contact the data-protection authority in the EEA country where you live, work, or where you believe an alleged infringement occurred.

You may find information about European data-protection authorities through the European Data Protection Board.

We encourage you to contact us first so that we can attempt to resolve your concern, but you are not required to do so before contacting a supervisory authority.

13. DATA SECURITY

We use reasonable administrative, technical, and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

However, no method of transmission over the Internet or method of electronic storage is completely secure.

Accordingly, we cannot guarantee absolute security of personal data.

---

14. CHILDREN'S PRIVACY

Our websites and services are not intentionally directed toward children who are not legally permitted to use our services under applicable law.

We do not knowingly collect personal data from children in violation of applicable legal requirements.

If you believe that a child has provided personal data to us in circumstances where such collection was not permitted, please contact us so that we can investigate and take appropriate action.

15. SENSITIVE PERSONAL DATA

We generally do not seek to collect special categories of personal data under Article 9 of the GDPR.

Please do not submit sensitive personal information through our websites unless it is specifically requested and necessary for a service.

If information that may constitute special-category personal data is necessary for a particular service, we will process it only where an appropriate legal basis and, where required, an additional GDPR condition for processing special-category data applies.

16. SOCIAL MEDIA AND THIRD-PARTY WEBSITES

Our websites may contain links to or integrations with third-party websites, social-media platforms, or other services.

If you interact with those services, the third party may collect and process information according to its own privacy policy.

JOHNNYSICEANDCO is not responsible for the privacy practices, security, or content of third-party services that we do not control.

We encourage you to review the privacy policies of third-party services before providing them with personal information.

17. MARKETING COMMUNICATIONS

If you receive marketing communications from us, you may unsubscribe by:

• Using the unsubscribe mechanism included in the communication;
• Contacting us at info@johnnysiceandco.com; or
• Using any applicable account or communication preferences provided through our services.

Unsubscribing from marketing communications will not necessarily stop transactional or service-related communications, such as order confirmations, account notices, security notifications, or information necessary to provide services you have requested.

18. DATA PROVIDED BY YOU ABOUT OTHER PEOPLE

If you provide JOHNNYSICEANDCO with personal data relating to another individual, you should ensure that you have a lawful basis to provide that information and that you are permitted to share it with us.

Where required by applicable law, you should also ensure that the individual has received appropriate information regarding the processing of their personal data.

19. CHANGES TO THIS NOTICE

We may update this GDPR / EEA Privacy Notice from time to time to reflect changes in:

• Our services
• Our business practices
• Technology
• Applicable laws
• Regulatory requirements
• Third-party service providers

When we make changes, we will update the “Last Updated” date at the beginning of this Notice.

Where required by law, we will provide additional notice or obtain consent for material changes.

20. CONTACT US

If you have questions about this GDPR / EEA Privacy Notice, our privacy practices, or your rights under applicable data-protection law, please contact us:

JOHNNYSICEANDCO
621 Beville Road
Daytona Beach, Florida [ZIP CODE]
United States

Email: info@johnnysiceandco.com
Phone: 386-944-9988
Website: johnnysiceandco.com

Privacy Requests: info@johnnysiceandco.com

We will make reasonable efforts to respond to privacy inquiries and rights requests in accordance with applicable law.