PRIVACY POLICY

1. General Provisions

Gems Box respects the privacy of its website's visitors and registered users.

This policy applies to all main sections of the gemsbox.net website, including:

• the online store,
• the process of ordering and purchasing products,
• users' personal accounts,
• the mineral exchange system,
• the blog,
• communication and support services provided through the website,
• the website's administrative and technical functions.

2. What Personal Data We May Collect

Depending on how You use the website, we may collect the following data.

2.1. Registration and Account Data

If You create an account on gemsbox.net, we may collect:

• first and last name,
• email address,
• phone number,
• an encrypted version of your password,
• username or profile information,
• a profile photo, if provided by You,
• technical data about account creation and logins.

2.2. Order and Delivery Data

If You make a purchase from our store, we may process:

• the customer's first and last name,
• phone number,
• email address,
• delivery address,
• city and country,
• data about the order and purchased products,
• information necessary for processing payment,
• order history.

Full payment card data, where possible, is processed by the relevant payment service provider and is not stored in Gems Box's systems, unless otherwise provided for by that payment service's own terms.

2.3. Mineral Exchange Data

When using Gems Box's exchange system, we may collect and publish data necessary for the exchange, including:

• the user's name or display name,
• photographs of the mineral being offered,
• the mineral's name and description,
• the city and country where the mineral is located,
• the desired exchange terms,
• communication details provided by the user, where necessary to carry out the exchange.

Data made available to other users through the exchange system may be used only within the scope of the relevant offer and exchange process.

3. Blog and Published Content

The Gems Box blog may contain articles, comments, photographs, and other informational material.

If a user is able to publish a comment or other content, that data may become visible to other visitors of the website.

The user is responsible for the information they publish and must not publish:

• personal confidential data,
• other people's data without their consent,
• payment card details,
• passwords,
• other sensitive information.

4. Purposes for Which We Use Personal Data

Your personal data may be used for the following purposes:

1. To create and maintain a user account on Gems Box.
2. To receive, confirm, and fulfill orders.
3. To organize the delivery of products.
4. To contact the user regarding an order or service.
5. To keep the mineral exchange system running.
6. To enable exchange offers and communication between users.
7. To respond to the user's questions and requests.
8. To ensure the website's security and technical operation.
9. To prevent fraud, abuse, and unauthorized access.
10. To improve the website and its services.
11. To fulfill obligations required by law.
12. With the user's consent — to send news, offers, and marketing messages.

5. Legal Basis for Processing Personal Data

Depending on the purpose of processing and applicable law, personal data may be processed on the following legal bases:

• the user's consent,
• the conclusion or performance of a contract,
• compliance with an obligation provided for by law,
• the pursuit of Gems Box's legitimate interests, subject to the user's rights and freedoms.

6. Disclosure of Data to Third Parties

Gems Box does not sell users' personal data to third parties.

However, certain categories of data may be transferred to, or made accessible to, service providers when necessary for the operation of the website, for example:

• payment service providers,
• delivery and logistics service providers,
• hosting and server service providers,
• email or messaging service providers,
• website technical maintenance and security service providers,
• analytics and technical service providers.

In such cases, the data must be used solely to provide the relevant service and within the limits permitted by applicable law.

7. Payments

When purchasing a product through Gems Box, payment may be processed through third-party payment systems.

The processing of data transmitted through payment services may be governed by that service provider's own, separate privacy policy.

Gems Box recommends that users review the terms of the relevant payment system before making a payment.

8. Cookies and Technical Data

Gemsbox.net may use cookies and similar technologies to ensure the normal operation, security, and usability of the website.

Cookies may be used, for example, to:

• keep the user signed in,
• keep the shopping cart working,
• remember the site's language or certain preferences,
• gather statistics on website usage,
• improve the website's performance and security.

The website may use both necessary cookies and analytical or other non-essential cookies — subject to an appropriate consent mechanism where required by applicable law.

9. IP Address and Technical Information

While using the website, certain technical data may be automatically collected, for example:

• IP address,
• device type,
• operating system,
• browser type,
• the date and time of the visit,
• pages visited,
• data about technical errors.

This information may be used to ensure the website's security, operation, and performance.

10. Retention of Personal Data

Gems Box retains personal data for as long as necessary to achieve the purposes for which it was collected, to maintain contractual relationships, to fulfill legal obligations, or to resolve disputes.

The retention period may vary depending on the type of data and the purpose of its processing.

Once no longer needed, data may be deleted, anonymized, or retained only where its further retention is required by law.

11. Security of Personal Data

Gems Box takes reasonable technical and organizational measures to protect personal data from unauthorized access, alteration, disclosure, loss, or destruction.

However, no system for transmitting data over the internet or for electronic storage can guarantee absolute security.

The user is responsible for keeping their account login details confidential and must not share their password with others.

12. Third-Party Sites and Services

Gemsbox.net may contain links to third-party websites or services, including social networks, payment systems, and other platforms.

The privacy policies of such sites may differ from Gems Box's own policy.

Gems Box is not responsible for the processing of personal data by third-party websites.

13. Social Networks

The website may integrate or embed social network services, such as Instagram, Facebook, TikTok, YouTube, or other platforms.

When using these services, the corresponding data processing may be carried out in accordance with that platform's own policy.

14. Minors

Gemsbox.net is not intended for persons who are not legally permitted to use the website's services or to enter into the relevant transactions.

If we become aware that a minor's personal data has been collected without an appropriate legal basis or the necessary consent of a parent or legal guardian, we may take appropriate steps to remove the data.

15. User Rights

Where provided for by applicable law, the user may have the following rights:

• to receive information about the processing of their personal data,
• to request correction of data,
• to request that data be updated,
• to request deletion of data,
• to restrict the processing of data,
• to object to certain processing of data,
• to withdraw consent, where processing is based on consent,
• to request a copy of their data,
• other rights provided for by law.

The ability to exercise these rights may depend on the legal basis for processing and applicable law.

16. Account Deletion

A registered user may request the deletion of their Gems Box account.

After an account is deleted, some data may be retained where its retention is necessary for legal obligations, financial record-keeping, dispute resolution, security, or other lawful purposes.

17. Marketing Communications

If a user has agreed to receive news, special offers, discounts, or other marketing communications from Gems Box, these messages may be sent to the email address provided or through other means of communication.

The user may opt out of marketing communications at any time, either by using the unsubscribe option included in the message or by contacting Gems Box.

18. Changes to This Privacy Policy

Gems Box may amend or update this Privacy Policy from time to time.

The revised version will be published on the gemsbox.net website, indicating the date of the last update.

In the event of material changes, users may, where necessary, be provided with additional notice.

19. Contact Us

For questions about the processing of personal data, Your rights, or this Privacy Policy, You may contact Gems Box using the contact details listed on the website.

Website: gemsbox.net

Brand: Gems Box

If the website publishes the company's official name, legal address, and email address, they should also be listed in this section.

20. Final Provisions

By using the gemsbox.net website, You acknowledge that You have read this Privacy Policy.

If any provision conflicts with applicable mandatory legal norms, the relevant legal norms shall apply, and the remaining provisions shall continue to apply to the extent that they do not conflict with the law.