Privacy Policy

Privacy Policy

Last updated: November 30, 2025

Our Commitment to Privacy

At Ishq Gems, operated by Ishq (Gems Pvt) Ltd, we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, share, and protect your information when you use our platform at https://ishqgems.com.

1. What Data We Collect

Personal Information

  • Identity Information: Name, email address, phone number, date of birth
  • Address Information: Billing address, shipping address, country of residence
  • Government ID: National Identity Card (NIC), passport number, or other government-issued ID
  • Financial Information: Payment method details, billing information
  • Professional Information: Business license, tax registration (for sellers)

Business Information (For Sellers)

  • Business name and registration details
  • Tax identification numbers
  • Bank account information for payments
  • Business licenses and certifications
  • Professional references and credentials

Product Information

  • Gemstone listings, descriptions, and specifications
  • Product images and videos
  • Certification documents and lab reports
  • Pricing and inventory information
  • Transaction history and order details

Technical Information

  • IP address and device information
  • Browser type and version
  • Operating system and device specifications
  • Pages visited and time spent on our platform
  • Cookies and similar tracking technologies

2. Why We Collect Your Data

We collect and process your personal data for the following purposes:

  • Account Management: Creating and managing your user account
  • Transaction Processing: Processing purchases, payments, and orders
  • KYC & Verification: Verifying identity and business credentials for sellers
  • Order Fulfillment: Shipping products and tracking deliveries
  • Customer Support: Providing assistance and resolving issues
  • Platform Security: Preventing fraud and ensuring platform safety
  • Legal Compliance: Meeting regulatory requirements and legal obligations
  • Communication: Sending updates, notifications, and promotional materials
  • Analytics: Improving our platform and user experience
  • Marketing: Personalizing content and advertising (with consent)

3. How We Share Your Data

We may share your personal data with:

Service Providers

  • Payment processors (Stripe, PayPal, etc.)
  • Shipping and logistics companies
  • Cloud storage and hosting providers
  • Email service providers
  • Analytics and marketing platforms

Legal Authorities

  • Law enforcement when required by law
  • Tax authorities for tax compliance
  • Regulatory bodies for compliance purposes
  • Courts and legal representatives in legal proceedings

Business Partners

  • Other users (buyers and sellers) for transaction purposes
  • Verification services for identity and business checks
  • Insurance providers for shipment protection

4. Cookies & Analytics

We use cookies and similar technologies to enhance your experience:

Essential Cookies

  • Authentication and session management
  • Shopping cart functionality
  • Security and fraud prevention

Analytics Cookies

  • Google Analytics for website performance
  • User behavior and interaction tracking
  • Platform optimization and improvements

Marketing Cookies

  • Personalized advertising and content
  • Social media integration
  • Email marketing optimization

You can manage your cookie preferences through your browser settings or our cookie consent banner.

5. Your Rights

You have the following rights regarding your personal data:

Access Right

Request a copy of your personal data we hold

Correction Right

Request correction of inaccurate or incomplete data

Deletion Right

Request deletion of your personal data

Portability Right

Request transfer of your data to another service

Objection Right

Object to processing of your data for certain purposes

Restriction Right

Request limitation of processing in certain circumstances

To exercise any of these rights, please contact us using the information provided below.

6. Data Retention

We retain your personal data for as long as necessary to:

  • Provide our services and maintain your account
  • Comply with legal and regulatory requirements
  • Resolve disputes and enforce our agreements
  • Prevent fraud and ensure platform security

Specific Retention Periods:

  • Account Data: Retained while account is active + 2 years after closure
  • Transaction Records: 7 years for tax and legal compliance
  • Communication Records: 3 years for customer support purposes
  • Marketing Data: Until consent is withdrawn or 2 years of inactivity

7. Data Security

We implement appropriate technical and organizational measures to protect your data:

  • SSL/TLS encryption for data transmission
  • Secure data centers with restricted access
  • Regular security audits and updates
  • Access controls and authentication measures
  • Data backup and recovery procedures
  • Employee training on data protection

8. International Data Transfers

As we serve customers globally, your data may be transferred to and processed in countries outside Sri Lanka. We ensure appropriate safeguards are in place for such transfers, including:

  • Standard contractual clauses
  • Adequacy decisions by relevant authorities
  • Certification schemes and codes of conduct
  • Your explicit consent where required

9. Contact for Privacy Requests

For any privacy-related questions or to exercise your rights, please contact:

Data Protection Officer

Ishq (Gems Pvt) Ltd

Email: gemsishq@gmail.com

Phone: +94 76 495 9148

Address: Sri Lanka

We will respond to your request within 30 days of receipt.

10. Children's Privacy

Our platform is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting a notice on our website or sending you an email notification.