Privacy Policy

1. Personal Data We Collect

When you register, place an order or contact us, we may collect the following categories of data: contact information - name, surname, email address, phone number; delivery address - country, city, street, postcode; order data - list of items, amounts, purchase history; technical data - IP address, browser type, device, pages visited, visit timestamps. We collect only the data necessary to fulfil your order, provide support and improve our service.

2. Purposes and Legal Bases for Processing

Your data is processed exclusively for the following lawful purposes: fulfilling the order and arranging delivery; issuing invoices and processing payment; responding to enquiries and providing support; compliance with legal requirements (tax and customs records); and analysing and improving site quality. The legal basis for processing is your consent given at checkout and the performance of a sales contract. We do not use your data for marketing purposes without a separate explicit consent.

3. Sharing Data with Third Parties

We may share your data with third parties solely to fulfil your order: delivery services (to organise courier delivery to your address) and payment providers (to process and confirm your payment). All engaged partners are bound by confidentiality obligations and may not use your data for their own commercial purposes. We do not sell, rent or transfer personal data to third parties for advertising or commercial purposes.

4. Data Storage and Protection

Personal data is stored on secured servers for the period necessary to achieve processing purposes. We apply technical security measures including SSL/TLS encryption for data in transit, access restrictions limiting staff to only the data needed for their role, and regular security system updates. After an order is fulfilled, data is retained for the period required by the tax and accounting legislation of the Kyrgyz Republic.

5. Your Rights Regarding Personal Data

Under the law of the Kyrgyz Republic you have the right to: obtain confirmation of whether your data is being processed and receive a copy; demand correction of inaccurate or outdated data; request deletion of your data (where processing is no longer necessary or lawful); withdraw consent to processing at any time. To exercise any of these rights, send a request to info@diamondgoldcompany.com with the subject line "Personal Data". We will respond within 10 business days.