Who is responsible?
For the purposes of this website, the business operating the GemsVault service is identified on the website as GemsVault, based in Istanbul, Türkiye.
Privacy enquiries and data-subject requests can be sent to info@germsvault.com.
Privacy Policy
This Privacy Policy explains how GemsVault collects, uses, stores, protects and discloses personal information when you visit germsvault.com, create an account, place an order, contact us, subscribe to communications or otherwise use our services.
Important: This notice is intended to provide transparent information about GemsVault’s current website and e-commerce processing. It should be read together with our Terms & Conditions, Return & Refund Policy and any cookie notice displayed by our website.
When this policy applies
This policy applies to personal information collected through the GemsVault website, including shopping, checkout, account functions, contact forms, newsletter or marketing subscriptions, customer support and website technologies such as cookies and analytics.
Information you may provide or generate
Depending on how you use GemsVault, we may process the following categories of information:
- Identity and contact data: name, email address, telephone number and information you include in an enquiry.
- Account data: login credentials and account/profile information necessary to provide account functionality.
- Order and transaction data: products purchased, order number, billing and delivery information, order history, correspondence and related records.
- Customer-support information: messages, attachments or other information you choose to send to us.
- Marketing preferences: whether you subscribe to newsletters or promotional communications and your communication preferences.
- Technical and usage information: IP address, browser/device information, pages viewed, approximate usage information, security logs and cookie identifiers where applicable.
- Information received from service providers: limited information needed to operate analytics, security, payment, shipping, anti-spam, communications and website services.
We do not ask you to submit sensitive personal information unless it is genuinely necessary and permitted by applicable law. Please do not include unnecessary sensitive information in contact forms.
Purposes of processing
Orders & contracts
To process purchases, fulfil orders, arrange delivery, communicate about transactions, handle returns/refunds and maintain transaction records.
Customer support
To answer enquiries, investigate order issues, provide product information and communicate with you about requests.
Website operation
To authenticate users, maintain accounts, secure the website, prevent fraud and abuse, troubleshoot technical problems and keep the service functioning.
Analytics & improvement
Where enabled and permitted, to understand website use, measure performance and improve the customer experience.
Marketing
Where legally permitted and where required consent has been obtained, to send newsletters, product news, collection announcements or offers. You can withdraw marketing consent at any time.
Legal compliance
To comply with tax, accounting, consumer-protection, regulatory, court, law-enforcement and other legal obligations, and to establish or defend legal claims.
Under Türkiye’s Personal Data Protection Law No. 6698 (KVKK), personal data must be processed lawfully, for specified and legitimate purposes, in a relevant and proportionate manner and for no longer than necessary or legally required.
Legal bases
Depending on the activity and applicable law, GemsVault may rely on one or more lawful bases, including performance of a contract or steps requested before a contract; compliance with legal obligations; legitimate interests such as website security, fraud prevention and service improvement where those interests are not overridden by applicable rights; and consent where consent is legally required.
For Türkiye, the applicable processing condition is determined under KVKK and related legislation. Consent is not treated as the only legal basis where another lawful processing condition applies.
For individuals in the European Economic Area or United Kingdom, where GDPR applies, the relevant GDPR legal basis will be determined for the particular processing activity. GDPR Article 13 requires information about the controller, purposes, legal bases, recipients and related matters to be provided when personal data are collected.
Who may receive personal information?
We may disclose information only as reasonably necessary for the purposes described above and in accordance with applicable law. Recipient categories may include:
- payment processors and financial institutions needed to complete a transaction;
- couriers, logistics and delivery providers needed to fulfil an order;
- hosting, website infrastructure, security, backup and technical-support providers;
- email, customer-support and communication providers;
- analytics, advertising, cookie-consent and website-performance providers where these services are enabled;
- anti-spam and security services;
- professional advisers, auditors, insurers or legal representatives where appropriate; and
- public authorities, courts or law-enforcement bodies where disclosure is required or permitted by law.
We do not sell your personal information as a commodity. We also do not disclose information to unrelated parties for their own independent marketing purposes unless legally permitted and appropriately disclosed.
Website technologies and providers
GemsVault currently operates with website technologies and services including WooCommerce, cookie-consent technology, Google-related analytics/site services, anti-spam protection, email/marketing tools and third-party form processing. The exact services used may change as the website develops.
For example, the current contact-page implementation sends submitted contact-form information to info@germsvault.com through FormSubmit. Information entered into that form can therefore be processed by that service for delivery of the message. Please avoid including unnecessary sensitive information in a contact request.
Third-party services may process information in countries other than Türkiye. Where personal data are transferred internationally, GemsVault will use the transfer mechanism and safeguards required by applicable data-protection law.
Türkiye’s KVKK contains specific rules governing transfers of personal data abroad, and KVKK guidance also emphasizes transparency about international transfers associated with website cookies and services.
Cookies and similar technologies
GemsVault uses cookies and similar technologies that may be necessary for security, account functions, shopping-cart and checkout operation, preferences, analytics, performance or marketing, depending on which services are enabled.
Our website uses Complianz for cookie-consent management. Where consent is legally required for non-essential cookies or similar technologies, the consent mechanism should allow the relevant choices and withdrawal of consent.
Cookies may also be set by third-party services integrated into the website. Their processing is subject to the applicable third-party terms and privacy information. Please use the cookie controls displayed on the website to manage available preferences.
How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, to provide services, maintain records, resolve disputes, enforce agreements, prevent fraud or comply with legal and accounting obligations.
Order, tax, accounting and other business records may need to be retained for periods prescribed by applicable law. Account and marketing information may be retained while the account or subscription remains active, subject to applicable rights and deletion requests. Security and technical logs may be retained for appropriate security periods.
How we protect information
GemsVault uses reasonable technical and organizational measures appropriate to the nature of the information and the risks involved. These may include access controls, authentication, secure connections, security monitoring, backups and restricted administrative access.
No internet transmission or storage system can be guaranteed to be completely secure. If a data-security incident occurs, GemsVault will take the steps required by applicable law.
Access, correction, deletion and other rights
Depending on your location and the applicable law, you may have rights including:
- to learn whether your personal data are processed;
- to request access to personal data and information about the processing;
- to request correction or updating of inaccurate information;
- to request deletion or destruction where legally applicable;
- to request restriction or object to certain processing where applicable;
- to request data portability where the law provides that right;
- to withdraw consent where processing is based on consent, without affecting processing already carried out lawfully; and
- to lodge a complaint with the competent data-protection authority where applicable.
Under KVKK Article 11, data subjects have statutory rights concerning their personal data, subject to the conditions and exceptions in the law.
Where GDPR applies, additional rights may apply depending on the circumstances. GDPR Article 3 can apply to non-EU businesses that offer goods or services to people in the EU or monitor their behaviour in the EU.
How to contact us about privacy
Send a privacy or personal-data request to info@germsvault.com. Please provide enough information for us to identify the relevant account, order or interaction and to verify your identity where necessary.
We will handle valid requests within the time limits and procedures required by applicable law. Some information may have to be retained because of legal, accounting, security or dispute-resolution obligations.
Children’s information
GemsVault is an e-commerce service for general consumers and is not directed specifically at children. We do not knowingly seek to collect children’s personal information for marketing. If you believe a child has provided personal information improperly, please contact us so the matter can be reviewed.
Changes to this Privacy Policy
We may update this policy when our services, technologies, legal obligations or processing activities change. The latest version will be published on this page with its updated date. Material changes will be communicated through appropriate website or account channels where required by law.
Related policies & customer pages
For a complete understanding of your purchase, please review the documents below.
Trending now
3.58 Ct GIA Certified Good Quality Natural Grayish Green Sapphire Tanzania Original price was: 1,955.00$.1,855.00$Current price is: 1,855.00$.
Colombia Emerald, 21.79 Carats, Medium Green Oval Original price was: 2,452.00$.2,300.00$Current price is: 2,300.00$.
18.97 CT EMERALD MINE ZAMBIA 100% NATURAL UNHEATED GEM Original price was: 80.00$.70.00$Current price is: 70.00$.
2.00CTS AFGHANISTAN EMERALD CAB TBM-1114-trueblueminerals Original price was: 800.00$.750.00$Current price is: 750.00$.