THE SHORT ANSWER
Static collection → hosted marketplace with inventory
These are architecture judgments for this scenario, not audited provider rankings or promises that any setup is breach-proof.
CHOOSE SOMETHING YOU CAN MAINTAIN
Three technologies. Different responsibilities.
Here, “outdated” means unsupported or known-unpatched components. React is assumed to be built into static files; adding a live server, accounts or an API changes the assessment. Simple HTML is assumed to have no backend or remote scripts.
Outdated WordPress
UpsideConvenient product editing, catalog plugins and order workflows.
TradeoffAn outdated store accumulates customer records and vulnerable extensions; checkout compatibility can break.
For this businessA compromise can expose delivery addresses and order history as well as replace payment instructions.
Current React, many dependencies
UpsideExcellent search, filtering and galleries for a large public catalog.
TradeoffInventory and price checks need a trustworthy backend; dependencies and API integrations add maintenance.
For this businessClient-only stock counts cannot prevent two customers buying the same unique item.
Simple HTML + self-contained JS
UpsideLow-maintenance showcase with direct links to each authoritative listing.
TradeoffManual updates become tedious for hundreds of items; stale “available” labels mislead shoppers.
For this businessUse “Check availability” links and leave final inventory enforcement to the commerce platform.
FROM ADVICE TO ACTION
The details that matter.
Choose a marketplace that actually permits your inventory
eBay provides a resale-oriented jewelry workflow. Describe condition, materials and authenticity accurately, and check whether a particular item qualifies for its authentication service. Etsy is not a general resale marketplace: its creativity rules restrict what can be resold, with qualifying vintage items at least 20 years old. Being unique or attractive does not by itself make a resold piece eligible.
Sources: eBay: Selling fine jewelry (external) ↗ · Etsy: Etsy Creativity Standards (external) ↗
Inventory mistakes are part of customer safety
Use a unique identifier for every piece. Avoid separate stock counts on a catalog, a payment-link dashboard and two marketplaces unless there is a dependable synchronization process. A payment link that can be used repeatedly may oversell a one-off piece; check quantity or completed-payment limits in the chosen product. For high-value pieces, confirm payment in the real provider dashboard, never from a screenshot or an email alone.
Sources: Stripe: Payment Links (external) ↗ · PayPal US: Payment Links (external) ↗
Shipping information is still your responsibility
Keeping address entry on a platform reduces your site’s exposure, but printing labels or downloading an order report creates another copy. Use a protected device, limit access and avoid emailing full customer lists to yourself. Give shoppers a clear returns process; inspect the platform’s seller-protection conditions before accepting an address change or shipping expensive jewelry.
Sources: FTC: Protecting Personal Information: A Guide for Business (external) ↗ · eBay: Selling fine jewelry (external) ↗
What information goes where?
Physical delivery requires a name and address somewhere. Let the marketplace collect them. You may still receive shipping labels, buyer messages and order reports; secure and delete unnecessary copies.
On your public site
Descriptions, prices, public images, policies and direct provider links. No customer checkout form is required.
In private services
Necessary payment, customer or client records. Protect provider logins and any copies on your devices.
Link out before asking for payment information. Avoid hidden fields, query strings or analytics events containing customer details. A hosted checkout reduces collection on your server; it does not mean that the provider, your logs or your private business records contain no personal information.
See the data-flow and PCI explanationDo you need to pay the host for security?
A catalog linking outward seldom needs a paid malware package if it has no server-side application. Pay for real maintenance and independent recovery if you operate WooCommerce. A WAF can help filter hostile requests, but it cannot correct unsupported plugins, fraudulent address changes or overselling.
The baseline still includes working HTTPS, protected accounts, a clean backup and someone responsible for changes. An included scanner is useful, but a scanner is not a patch, a restore test or an incident-response service.
Use the hosting spending guideKEEP THE TOOLBOX SMALL
Start at $0. Know the limits.
Start with the marketplace’s order tools. Add a CRM when repeat-buyer requests and follow-ups become hard to track. These are three $0 subscription options for a small nonclinical customer list; none is a substitute for inventory or consent.
Bigin by Zoho
Free
1 user · 500 total records
Repeat buyers, requests and a simple follow-up pipeline.
Records include notes and activities. Express is $7/user/month billed annually ($84/year). Not inventory management.
Check plan & pricingHubSpot
Free CRM
2 users · 1,000 contacts
A modest customer or donor relationship list.
Paid marketing and advanced automation have separate limits. Do not use this free tier for clinical records.
Check plan & pricingBrevo
Free
300 emails/day · up to 100,000 contacts
Simple contact lists and permission-based announcements.
One seat; daily send cap can spread a launch over days. Starter begins at $9/month; upgrades depend on volume.
Check plan & pricingPrices checked September 25, 2026, USD before taxes. Free plans are not free payment processing. These are the three cheapest suitable entry subscriptions in our reviewed shortlist, tied at $0—not an exhaustive ranking of every vendor. Verify features, region, limits and upgrade costs.
What are the odds of customer data being stolen?
Of these businesses, a self-hosted jewelry store creates substantial local exposure because it tends to retain many address and order records. Outbound marketplace links reduce that local exposure, but seller-account takeover and leaked shipping exports remain material risks.
Ask your designer.
Can I use Etsy for any jewelry I buy and resell?
No. Check the actual eligibility rules. General resale of recently manufactured jewelry is not automatically allowed; a resale marketplace such as eBay may fit better.
Can a Buy Now link oversell a one-of-a-kind ring?
Yes, unless the payment or commerce system enforces the available quantity. A visual “sold” label on your site is not a payment lock.
Do I need a CRM for every buyer?
No. The platform’s order tools may be enough. Add a minimal relationship record only when it solves a real follow-up need, and do not subscribe buyers to marketing automatically.
Sources for this business
- eBay: Selling fine jewelry ↗
- Etsy: Etsy Creativity Standards ↗
- Stripe: Payment Links ↗
- PayPal US: Payment Links ↗
- Bigin by Zoho: Bigin editions and pricing ↗
- HubSpot: HubSpot free tools ↗
- Brevo: About Brevo pricing plans ↗
Shared technical evidence and research limitations appear in the source library.