Privacy Policy

1. Data Controller

For the purposes of applicable data protection laws, the Data Controller responsible for your personal information is:

• Registered Company: Nexus Consultancy & Services Pvt Ltd (Trading as Ceylon Gem Nexus)
• Location: 55/2/1 Horana Rd, Bandaragama 12530 Sri Lanka.
• Contact Email: [email protected]

2. Information We Collect

We collect and process the following categories of personal data to provide a seamless and secure shopping experience:

• Identity & Contact Data: Name, billing address, shipping address, email address, and telephone number.
• Financial & Transaction Data: Payment card details (processed securely via encrypted third-party gateways; we do not store full credit card numbers on our servers) and details of the gemstones or jewelry you have purchased.
• Technical & Usage Data: Internet Protocol (IP) address, browser type and version, time zone setting, operating system, and information about how you navigate and interact with our website.

3. How We Use Your Data and Lawful Basis

Under the GDPR and other applicable laws, we must have a valid lawful basis to process your data. We use your information for the following purposes:

• To Fulfill a Contract: To process your order, arrange for international shipping (e.g., to the UK, Germany, or Australia), and provide customer support regarding your purchase.
• Legitimate Interests: To improve our website functionality, prevent fraud, and maintain the security of our e-commerce platform.
• Consent: To send you marketing communications, newsletters, or promotional offers, provided you have explicitly opted in. You may withdraw this consent at any time.

4. Data Sharing and Third Parties

We do not sell your personal data. We only share your information with trusted third parties necessary to operate our business, including:

• Logistics Partners: International couriers (e.g., DHL, FedEx) strictly for the purpose of securely delivering your high-value shipments.
• Payment Processors: Secure financial gateways to authorize and complete your transactions.
• Analytics Providers: Services like Google Analytics or Cloudflare Analytics to understand website traffic and improve user experience.

5. International Data Transfers

Ceylon Gem Nexus operates from Sri Lanka. If you are accessing our website from the European Economic Area (EEA), the United Kingdom, or Australia, please be aware that your data will be transferred to and processed outside of your jurisdiction. We ensure that any such international transfers comply with applicable laws and that adequate safeguards (such as Standard Contractual Clauses) are in place to protect your data.

6. Data Security and Retention

We implement robust technical and organizational security measures, including SSL encryption and restricted access controls, to protect your personal data from unauthorized access, alteration, or disclosure.

We will retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, including satisfying any legal, accounting, or reporting requirements.

7. Your Privacy Rights

Depending on your location (such as under the GDPR), you possess specific rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request that we correct any inaccurate or incomplete data.
• Right to Erasure (Right to be Forgotten): You can request the deletion of your personal data, subject to certain legal exceptions.
• Right to Restrict or Object: You can limit or object to our processing of your data, particularly for direct marketing.
• Right to Data Portability: You can request that we transfer your data to another organization in a structured, machine-readable format.

To exercise any of these rights, please contact us using the details provided below.

8. Cookies Policy

We utilize essential and non-essential cookies to ensure our website functions correctly, to track SEO performance, and to enhance your browsing experience. You have the right to manage your cookie preferences and can accept or reject non-essential cookies via the banner presented upon your first visit to our site.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact our privacy team:

• Email: [email protected]
• Phone: +94 77 737 8740
• Mailing Address: 55/2/1 Horana Rd, Bandaragama 12530 Sri Lanka.