The Finest Cabochon Gemstones in the World

GemstoneCabochon.co.uk

General Data Protection Regulation (GDPR) Privacy Policy

About Gemstone Cabochon

Gemstone Cabochon is a small London UK based gemstone wholesaler, operated by sole trader, Ricky Catwell. This GDPR document applies to the company territorially, as we process personal data about EU residents, as customers, employees, contractors and service providers. We gather the minimum amount of personal information to enable us to operate our business efficiently and professionally, while offering an excellent experience to all who interact with our company. Our website and business collects and stores some Personal Data from its Users.

Owner and Data Controller

Ricky Catwell
4 Byers Court, 96 Junction Road
London, UK N19 5FE
United Kingdom

Owner contact email: rickycatwell@gmail.com

The company processes data that can identify an individual wholly or partly through automated means or manually as part of a filing system.

Types of Data collected

Identity Data may include your first name, last name, username, marital status, title and gender.
Contact Data may include your billing address, delivery address, email address and telephone numbers.
Financial Data may include your bank account details.
Transaction Data may include details about payments between us.
Technical Data may include your login data, internet protocol addresses, browser type and version, browser plug-in types and versions, time zone setting and location, operating system and platform and other technology on the devices you use to access our website.
Profile Data may include your username, purchases or orders, preferences, feedback and survey responses.
Usage Data may include information about how you use our website, products and services.
Marketing and Communications Data may include your preferences in receiving marketing communications from us and your communication preferences.

Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or by specific explanation texts displayed prior to the Data collection.

The Personal Data may be freely provided by the User, or, in case of Usage Data, collected automatically when using this Application.

Any use of Cookies - or of other tracking tools - by this Application or by the owners of third-party services used by this Application serves the purpose of providing the service required by the User, in addition to any other purposes described in the present document and in the available Cookie Policy.

Mode and place of processing the Data

Methods of processing

The Data Controller processes the Data of Users in a proper manner and takes appropriate security measures to prevent unauthorised access, disclosure, modification, or unauthorised destruction of the Data.

The Data processing is carried out using computers and/or IT enabled tools, following organisational procedures and modes strictly related to the purposes indicated. In addition to the Data Controller, in some cases, the Data may be accessible to certain types of persons in charge, involved with the operation of the site (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Owner. The updated list of these parties may be requested from the Data Controller at any time.

Our website and mailserver is hosted on servers secured to ISO 27001 standard. This accreditation covers Information Security Management Systems.

Place

The Data is processed at the Data Controller's operating offices and in any other places where the parties involved with the processing are located. For further information, please contact the Data Controller.

Retention time

The Data is kept for the time necessary to provide the service requested by the User, or stated by the purposes outlined in this document, and the User can always request that the Data Controller suspend or remove the data.

The use of the collected Data

The Data concerning the User is collected to allow the Owner to provide its services, as well as for the following purposes: Analyzing website performance, Displaying content from external platforms, Interaction with external social networks and platforms, remarketing and behavioural targeting, SPAM protection, Managing contacts, Billing and Shipping Orders.

The Personal Data used for each purpose is outlined in the specific sections of this document.

Detailed information on the processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

Analytics
Google Analytics (Google Inc.): Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google utilises the Data collected to track and examine the use of this Application, to prepare reports on its activities and share them with other Google services. Google may use the Data collected to contextualise and personalise the ads of its own advertising network.
Personal Data collected: Cookies and Usage data.
Place of processing: US – Privacy Policy – Opt Out
Add This (Oracle Inc.): AddThis provides the tools that collect information from visitors to your website or mobile device application. This information does not directly identify an individual and is instead designed to identify the devices used by your visitors. However, in certain circumstances, the visitor may opt to share their email address with AddThis to facilitate the services. These email addresses are not used for online behavioral advertising.
Personal Data collected: Cookies and Usage data, in some cases email address upon request.
Place of processing: US – Privacy Policy – Opt Out
Contacting the User: Contact form (this Application) By filling in the contact form with their Data, the User authorises this Application to use these details to reply to requests for information, quotes or any other kind of request as indicated by the form’s header.
Personal Data collected: email address, first name and last name.
Managing contacts and sending messages: This type of services makes it possible to manage a database of email contacts, phone contacts or any other contact information to communicate with the User. These services may also collect data concerning the date and time when the message was viewed by the User, as well as when the User interacted with it, such as by clicking on links included in the message.
MailChimp (The Rocket Science Group, LLC.)
MailChimp is an email address management and message sending service provided by The Rocket Science Group, LLC. Personal Data collected: email address, first name and last name. Place of processing: US – Privacy Policy
Paypal
We use Paypal as a secure payment processor. Personal Data collected: email address, first name and last name. Place of processing: US – Privacy Policy
AdWords Remarketing (Google Inc.): AdWords Remarketing is a remarketing and behavioural targeting service provided by Google Inc. that connects the activity of this Application with the Adwords advertising network and the Doubleclick Cookie.
Personal Data collected: Cookies and Usage data.
Place of processing: US – Privacy Policy – Opt Out
Google reCAPTCHA (Google Inc.): Google reCAPTCHA is a SPAM protection service provided by Google Inc.
Personal Data collected: Cookies and Usage data.
Place of processing: US – Privacy Policy

Cookie Policy

This Application uses Cookies. To learn more and for a detailed cookie notice, you may consult the Cookie Policy available on our website.

Additional information about Data collection and processing

Legal action

The User's Personal Data may be used for legal purposes by the Data Controller, in Court or in the stages leading to possible legal action arising from improper use of this Application or the related services. The User declares to be aware that the Data Controller may be required to reveal personal data upon request of public authorities.

System logs and maintenance

For operation and maintenance purposes, this Application and any third-party services may collect files that record interaction with this Application (System logs) or use for this purpose other Personal Data (such as IP Address).

Information not contained in this policy

More details concerning the collection or processing of Personal Data may be requested from the Data Controller at any time. Please see the contact information at the beginning of this document.

The rights of Users

Users have the right, at any time, to know whether their Personal Data has been stored and can consult the Data Controller to learn about their contents and origin, to verify their accuracy or to ask for them to be supplemented, cancelled, updated or corrected, or for their transformation into anonymous format or to block any data held in vi

olation of the law, as well as to oppose their treatment for any and all legitimate reasons. Requests should be sent to the Data Controller at the contact information set out above.

This Application does not support “Do Not Track” requests.

To determine whether any of the third-party services it uses honour the “Do Not Track” requests, please read their privacy policies.

Changes to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy at any time by giving notice to its Users on this page. It is strongly recommended to check this page often, referring to the date of the last modification listed at the bottom. If a User objects to any of the changes to the Policy, the User must cease using this Application and can request that the Data Controller remove the Personal Data. Unless stated otherwise, the then-current privacy policy applies to all Personal Data the Data Controller has about Users. Information about this privacy policy

The Data Controller is responsible for this privacy policy.

This Revision: May 23rd, 2018