Privacy Policy

SIA “Gem Invest”
Reg. Nr. 40203515999
Reg. adres.: Krišjāņa Valdemāra iela 149-4, Riga, LV-1013, Latvia
Store & Return Address: Riga, Lačplēša iela 72
Phone: +371 25319004
Email: info@gemlords.com
Data Protection Officer (DPO) contact: dpo@gemlords.com (or other specific email)

1. Data Collection, Purpose & Legal Basis

We collect and process your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Latvian law. We only collect data that is necessary for the following specific purposes:

  • Order fulfillment & delivery: We collect your name, contact details, and shipping address to process and deliver your order. The legal basis for this is Performance of a Contract with you.
  • Payment processing: We collect necessary payment details to authorize your transaction and prevent fraud. The legal basis is Performance of a Contract and our Legitimate Interest in preventing fraud. Please note that we do not store your full credit card details on our servers. Your payment information is securely processed by our PCI DSS certified payment processor.
  • Customer support: We use your contact information to respond to your inquiries and provide support. The legal basis is our Legitimate Interest in providing excellent customer service.
  • Marketing & communication: With your explicit consent, we may use your email to send you promotional offers and newsletters. The legal basis for this is your Consent. You have the right to withdraw your consent at any time.

2. Cookies and Tracking Technologies

Gemlords.com uses cookies and similar technologies. You have full control over non-essential cookies via our cookie banner and your browser settings.

  • Essential cookies: Required for core website functions (shopping cart, checkout, security). They do not store personal data.
  • Analytical cookies: Help us understand how visitors use our site to improve performance and user experience (e.g., Google Analytics).
  • Marketing cookies: Used to show you relevant advertisements on other platforms (e.g., Facebook Pixel, Google Ads).

3. Data Sharing

We only share your data with trusted third-party service providers strictly for the purpose of fulfilling your order and operating our business. These include:

  • Payment processors (e.g., EveryPay, Stripe): for secure transaction handling.
  • Shipping carriers (e.g., DHL, FedEx, DPD): for order delivery.
  • IT service providers: for website hosting, analytics, and security.

We ensure all third parties adhere to strict data protection standards (GDPR, PCI DSS).

4. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected. We must also retain data for legal, accounting, or tax obligations (up to 10 years in Latvia), or for warranty purposes, unless a longer retention period is required by law.

5. Data Transfers

Your data is primarily processed within the European Union (EU) and European Economic Area (EEA). If any data is transferred to a country outside the EU/EEA, we ensure that appropriate safeguards are in place (e.g., Standard Contractual Clauses) to protect your data in accordance with GDPR standards.

6. Your Rights

You have the following rights under GDPR:

  • Right of access: To request a copy of the personal data we hold about you.
  • Right to rectification: To have incorrect or incomplete data corrected.
  • Right to erasure (‘right to be forgotten’): To request that we delete your personal data.
  • Right to restrict processing: To limit how we use your data.
  • Right to data portability: To receive your data in a machine-readable format and have it transferred to another service.
  • Right to object: To object to the processing of your data in certain cases.

To exercise these rights, please contact our Data Protection Officer at info@gemlords.com. You also have the right to file a complaint with the Latvian Data State Inspectorate or another EU supervisory authority.

7. Protection of Minors

Our website is not intended for persons under the age of 18. We do not knowingly collect personal data from minors.