PRIVACY NOTICE POLICY
De Vere Diamonds Limited respects your privacy and is committed to safeguarding your personal data.
1. Who We Are
De Vere Diamonds Limited (Trading as De Vere Diamonds) (“we”, “us”, “our”) is a company registered in England and Wales. We are the data controller of your personal data and are committed to protecting your privacy.
Company Name: De Vere Diamonds Limited (Trading as De Vere Diamonds)
Company Number: 16212521
Registered Office: 34–35 Hatton Garden, London, EC1N 8DX
Email: hello@deverediamonds.com
2. Data We Collect
We may collect and process the following categories of personal data:
Identity Data: name, title, date of birth, gender.
Contact Data: address, email, telephone number.
Transaction Data: details of purchases, payments, refunds.
Financial Data: payment card details (processed securely via third-party providers).
Technical Data: IP address, login details, browser type, time zone, device identifiers.
Usage Data: information about how you use our website, services, and communications.
Marketing & Communications Data: preferences for receiving marketing and event invitations.
KYC/Compliance Data: identification documents and verification information where required under AML/KYC rules.
3. How We Collect Data
Directly from you (when you place an order, create an account, sign up for marketing, or contact us).
Automatically (via cookies, server logs, analytics).
From third parties (e.g., credit reference agencies, fraud prevention databases, payment providers).
4. How We Use Your Data
We use your data for the following purposes:
To process and deliver your orders.
To verify identity for compliance with anti-money laundering (AML) and sanctions obligations.
To manage payments, fees, and charges.
To provide aftercare, repairs, warranties, and customer service.
To send marketing communications (where you have consented or under soft opt-in rules).
To improve our website, services, and user experience.
To maintain records for tax, audit, and legal purposes.
To prevent fraud, money laundering, or other criminal activity.
5. Lawful Bases for Processing
We rely on the following lawful bases under UK GDPR:
Contract – processing necessary to perform a contract with you.
Legal Obligation – e.g., AML/KYC, tax and accounting obligations.
Legitimate Interest – e.g., improving services, preventing fraud, direct marketing to existing customers.
Consent – e.g., sending marketing emails to new subscribers, use of non-essential cookies.
6. Sharing Your Data
We may share your personal data with:
Payment service providers, banks, insurers.
Couriers and logistics companies.
Professional advisers (lawyers, auditors, accountants).
Compliance and fraud prevention agencies.
IT and system administration providers (hosting, cloud storage, analytics).
Regulatory authorities (HMRC, law enforcement, supervisory bodies) where legally required.
We do not sell your personal data.
7. International Transfers
Where data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place, such as:
Adequacy regulations (e.g., UK–EU adequacy decision).
Standard Contractual Clauses approved by the ICO.
Additional safeguards where necessary.
8. Data Retention
Orders and transaction data: kept for at least 7 years (tax and accounting purposes).
AML/KYC data: retained for 5 years after the end of the business relationship.
Marketing data: kept until you unsubscribe or withdraw consent.
Technical/usage data: retained for as long as necessary to improve our services.
9. Data Security
We implement appropriate technical and organisational measures to protect your data, including:
Encrypted payment processing.
Secure servers and firewalls.
Access controls and staff training.
Regular audits and penetration testing.
10. Cookies and Tracking
We use cookies and similar technologies. See our Cookie Policy for details of the cookies we use, why, and how you can manage them.
11. Automated Decision-Making and Profiling
We may use automated tools to detect fraudulent activity or suspicious transactions. We do not make fully automated decisions that have a legal or significant effect on you without human review.
12. Marketing
You may receive marketing communications if:
You have opted in, or
You purchased from us and have not opted out (“soft opt-in”).
You can unsubscribe at any time via the link in each email or by contacting us.
13. Children’s Data
We do not knowingly collect data relating to children under 16. If we become aware that we hold such data, it will be deleted.
14. Your Rights
Under UK GDPR, you have the right to:
Access your personal data.
Request correction of inaccurate data.
Request erasure of your data.
Object to processing (e.g., direct marketing).
Request restriction of processing.
Request data portability.
Withdraw consent at any time (without affecting prior lawful processing).
To exercise these rights, contact hello@deverediamonds.com.
15. Changes to This Notice
We may update this Privacy Notice from time to time. The latest version will always be published on our website.
16. Contact and Complaints
If you have questions about this Notice, contact us at: hello@deverediamonds.com.
If you are not satisfied, you may lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.