[LEGAL ENTITY NAME] ("Shell Diamonds", "we", "us" or "our") operates the Shell Diamonds online store at [FINAL DOMAIN] domain pending. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what personal data we collect, why we collect it, the legal basis on which we process it, how long we keep it, who we share it with, and the rights you have.
Applicable law. We process personal data in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and, for customers in the United Kingdom, the UK GDPR and the Data Protection Act 2018. Because we sell to customers in the United States, the European Union (Germany) and the United Kingdom, we apply GDPR-level protections to all customers.
1. Who we are (data controller)
The data controller responsible for your personal data is:
- Controller [LEGAL ENTITY NAME] pending
- Address [REGISTERED ADDRESS] pending
- Tax ID / VAT [TAX ID / VAT] pending
- Email info@caratlabprecision.com confirm data-protection contact
We have not appointed a designated Data Protection Officer (DPO), as we are not required to under Article 37 GDPR. All data-protection enquiries can be sent to info@caratlabprecision.com DPO contact to be confirmed if appointed.
2. What personal data we collect
We collect personal data that you provide to us directly and data that is generated automatically when you use our website. We collect only what we need for the purposes described below.
2.1 Data you provide
- Account and registration data — when you create a retail (B2C) account: name, email address, password (stored encrypted), and optionally a phone number.
- Professional (B2B) registration data — when a business applies for a trade account: the above plus company name, business registration or VAT number, business address, professional role and any documentation you supply to prove your trade status. B2B accounts are subject to manual approval before trade pricing is granted (see section 4).
- Order and checkout data — billing and shipping name and address, email, phone number, order contents and order history. Because delivery is by international dropshipping, your shipping details are also required to arrange customs clearance in the destination country.
- Payment data — payments are processed by our external payment provider(s) [PAYMENT PROVIDER] Redsys / PayPal / Klarna — confirm. We do not store full card numbers on our systems; we receive only a transaction reference and status.
- Communications — the content of messages you send us via contact forms, email or WhatsApp, and our replies.
- Marketing preferences — if you subscribe, your email address and consent status for our newsletter.
2.2 Data collected automatically
- Technical and usage data — IP address, browser type and version, device information, pages viewed, referring pages and timestamps.
- Cookies and similar technologies — see our Cookie Policy for the full list and how to manage your preferences. Non-essential cookies (for example analytics) are only set with your consent.
3. Why we use your data and our legal basis
| Purpose | Legal basis |
|---|---|
| Creating and managing your account (B2C and B2B) | Performance of a contract (Art. 6(1)(b)) |
| Processing orders, payments, delivery and customs documentation | Performance of a contract (Art. 6(1)(b)) |
| Reviewing and approving professional (B2B) trade applications | Performance of a contract / steps prior to a contract (Art. 6(1)(b)); legitimate interest in verifying trade status (Art. 6(1)(f)) |
| Complying with tax, accounting and consumer-law obligations | Legal obligation (Art. 6(1)(c)) |
| Responding to enquiries and providing customer support | Legitimate interest / performance of a contract (Art. 6(1)(f) / (b)) |
| Site security, fraud prevention and improving our services | Legitimate interest (Art. 6(1)(f)) |
| Sending marketing communications and setting non-essential cookies | Consent (Art. 6(1)(a)), withdrawable at any time |
4. The professional (B2B) approval process
Businesses can apply for a trade account to access wholesale (trade) pricing. To do this we collect the professional registration data described in section 2.1 and review it manually before granting access. We use this information solely to verify that the applicant is a genuine trade customer and to set the correct pricing on their account. If an application is declined, we retain the application data only for as long as needed to document the decision and then delete it, unless a longer period is required by law.
5. How we share your data
We do not sell your personal data. We share it only with the parties we need to in order to run the store, and only to the extent necessary:
- Payment providers — [PAYMENT PROVIDER] confirm to process your payment securely.
- Suppliers and shipping / logistics partners — to fulfil and deliver your order, including the customs information required for international shipments.
- Technology providers — our hosting provider, the WooCommerce / WordPress platform that runs the store, and analytics and tag-management services (see the Cookie Policy).
- Professional advisers and authorities — accountants, legal advisers, and tax or public authorities where we are legally required to disclose data.
These recipients act as our processors under written agreements, or as independent controllers where the law requires (for example tax authorities).
6. International transfers
Because we operate an international dropshipping model and serve customers in the US, Germany and the UK, some data (for example shipping details sent to suppliers, or data processed by our technology providers) may be transferred outside the European Economic Area. Where this happens, we rely on an appropriate safeguard under Chapter V GDPR — such as an adequacy decision or the European Commission's Standard Contractual Clauses — to protect your data. Specific transfer mechanisms to be confirmed once suppliers and processors are finalised.
7. How long we keep your data
- Account data — for as long as your account is active, and then deleted or anonymised on request.
- Order, invoicing and tax records — for the period required by applicable tax and commercial law retention period to be confirmed for the entity's jurisdiction (typically 4–10 years).
- Marketing data — until you unsubscribe or withdraw consent.
- Support communications — for as long as needed to handle your request and a reasonable period afterwards.
8. Your rights
Under the GDPR and UK GDPR you have the right to:
- Access the personal data we hold about you;
- Rectify inaccurate or incomplete data;
- Erase your data ("right to be forgotten"), where applicable;
- Restrict or object to our processing;
- Data portability — receive your data in a structured, machine-readable format;
- Withdraw consent at any time, without affecting processing carried out before withdrawal;
- Lodge a complaint with a supervisory authority.
To exercise any of these rights, contact us at info@caratlabprecision.com. We will respond within the time limits set by law (normally within one month). You can also complain to the data-protection authority in your country — for example, the Spanish Agencia Española de Protección de Datos (AEPD), the German data-protection authorities, or the UK Information Commissioner's Office (ICO). Lead supervisory authority to be confirmed once the controller's establishment is known.
9. Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse, including encrypted connections (HTTPS), access controls and the use of reputable, security-compliant service providers for payments and hosting.
10. Children
Our website and products are intended for adults. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top shows when it was last revised. Significant changes will be communicated through the website.
12. Contact
- Email info@caratlabprecision.com
- WhatsApp +34 614 028 817
- Postal [REGISTERED ADDRESS] pending
Shell Diamonds is operated by [LEGAL ENTITY NAME], [REGISTERED ADDRESS], [TAX ID / VAT]. legal entity, address and tax number pending — to be completed with the client's registered details before publication.