Privacy Policy

1. Introduction

Pure Lab Gems ("we," "us," or "our") operates the website at purelabgems.com. This Privacy Policy explains what information we collect when you visit our site, how we use it, and what rights you have regarding your data.

We are committed to protecting your privacy in compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and applicable UK and Canadian privacy laws.

If you have questions about this policy, please contact us at: info@purelabgems.com

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily submit through our contact form, including:

• Your name
• Your email address
• The content of your message

We do not collect payment details, postal addresses, or other sensitive personal data.

2.2 Information Collected Automatically

When you visit our website, certain information is collected automatically by our analytics tools:

• Usage data: Pages visited, time on site, referral source, clicks
• Technical data: Browser type, device type, operating system, screen resolution
• Approximate location: Country and region (derived from IP address — your full IP is not stored)
• Session data: Session cookies to support site functionality

2.3 Cookies

We use cookies placed by Google Analytics and session cookies essential to site operation. For full details, see our Cookie Policy.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your enquiries submitted via the contact form
• To understand how visitors use our site and improve our content
• To monitor site performance and diagnose technical issues
• To comply with legal obligations

We do not sell, rent, or trade your personal information to any third party.

4. Third-Party Services

We use the following third-party services that may process your data:

4.1 Google Analytics

We use Google Analytics (property ID: G-WP0L9EZB8R) to understand how visitors interact with our site. Google Analytics collects anonymised usage data via cookies. Google may transfer this data to servers in the United States.

• Privacy policy: policies.google.com/privacy
• Opt-out: Google Analytics opt-out browser add-on

4.2 Formspree

Our contact form is powered by Formspree (formspree.io). When you submit the contact form, your name, email address, and message are transmitted to Formspree's servers for delivery to us. Formspree is subject to its own privacy policy.

• Privacy policy: formspree.io/legal/privacy-policy

4.3 Affiliate Networks

Our site contains affiliate links to retailers including James Allen, Brilliant Earth, and Clean Origin, managed through Impact.com, CJ Affiliate, and direct affiliate programmes. When you click an affiliate link, those platforms may set their own cookies to track conversions. We do not control or have access to the personal data collected by those platforms. Please review the privacy policies of any retailer before making a purchase.

5. Legal Basis for Processing (GDPR)

For visitors in the European Economic Area (EEA) and the UK, we process your personal data on the following legal bases:

• Legitimate interests (Article 6(1)(f) GDPR): Analytics to improve our site and respond to contact enquiries
• Consent (Article 6(1)(a) GDPR): Where you have opted in to non-essential cookies
• Legal obligation (Article 6(1)(c) GDPR): Where processing is required by law

6. Data Retention

We retain personal data only as long as necessary for the purpose it was collected:

• Contact form submissions: Retained for up to 12 months, then deleted
• Analytics data: Retained by Google Analytics for 14 months (our configured retention period)
• Server logs: Retained by our hosting provider (Hostinger) for up to 30 days

7. Your Rights

Depending on your location, you have the following rights regarding your personal data:

7.1 Rights Under GDPR (EEA & UK Visitors)

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate data
• Right to erasure ("right to be forgotten"): Request deletion of your data
• Right to restrict processing: Request that we limit how we use your data
• Right to data portability: Request your data in a machine-readable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent for cookie-based processing at any time

7.2 Rights Under CCPA (California Residents)

• Right to know: What personal information we collect, use, and share
• Right to delete: Request deletion of your personal information
• Right to opt-out: We do not sell personal information — no opt-out is required
• Right to non-discrimination: We will not discriminate for exercising your rights

7.3 How to Exercise Your Rights

To exercise any of the above rights, please contact us at info@purelabgems.com. We will respond within 30 days. We may need to verify your identity before processing your request.

8. International Data Transfers

Our site is operated from Poland (EU). Data processed by Google Analytics and Formspree may be transferred to the United States. Such transfers are made pursuant to appropriate safeguards, including Standard Contractual Clauses approved by the European Commission.

9. Children's Privacy

Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us immediately at info@purelabgems.com and we will delete it.

10. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our site is served over HTTPS. However, no internet transmission is completely secure and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised version on this page with an updated "Last Updated" date. We encourage you to review this policy periodically. Continued use of our site after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

For any questions, requests, or complaints regarding this Privacy Policy or our data practices, please contact us:

• Email: info@purelabegems.com
• Contact form: purelabgems.com/contact/

If you are an EEA resident and are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority. The lead supervisory authority for our operations is the Polish Data Protection Authority (UODO).