Gemstone Cabochon is a small London UK based gemstone wholesaler, operated by sole trader, Ricky Catwell. This GDPR document applies to the company territorially, as we process personal data about EU residents, as customers, employees, contractors and service providers. We gather the minimum amount of personal information to enable us to operate our business efficiently and professionally, while offering an excellent experience to all who interact with our company. Our website and business collects and stores some Personal Data from its Users.
4 Byers Court, 96 Junction Road
London, UK N19 5FE
Owner contact email: firstname.lastname@example.org
The company processes data that can identify an individual wholly or partly through automated means or manually as part of a filing system.
The Personal Data may be freely provided by the User, or, in case of Usage Data, collected automatically when using this Application.
The Data Controller processes the Data of Users in a proper manner and takes appropriate security measures to prevent unauthorised access, disclosure, modification, or unauthorised destruction of the Data.
The Data processing is carried out using computers and/or IT enabled tools, following organisational procedures and modes strictly related to the purposes indicated. In addition to the Data Controller, in some cases, the Data may be accessible to certain types of persons in charge, involved with the operation of the site (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Owner. The updated list of these parties may be requested from the Data Controller at any time.
Our website and mailserver is hosted on servers secured to ISO 27001 standard. This accreditation covers Information Security Management Systems.
The Data is processed at the Data Controller's operating offices and in any other places where the parties involved with the processing are located. For further information, please contact the Data Controller.
The Data is kept for the time necessary to provide the service requested by the User, or stated by the purposes outlined in this document, and the User can always request that the Data Controller suspend or remove the data.
The Data concerning the User is collected to allow the Owner to provide its services, as well as for the following purposes: Analyzing website performance, Displaying content from external platforms, Interaction with external social networks and platforms, remarketing and behavioural targeting, SPAM protection, Managing contacts, Billing and Shipping Orders.
The Personal Data used for each purpose is outlined in the specific sections of this document.
Personal Data is collected for the following purposes and using the following services:
The User's Personal Data may be used for legal purposes by the Data Controller, in Court or in the stages leading to possible legal action arising from improper use of this Application or the related services. The User declares to be aware that the Data Controller may be required to reveal personal data upon request of public authorities.
For operation and maintenance purposes, this Application and any third-party services may collect files that record interaction with this Application (System logs) or use for this purpose other Personal Data (such as IP Address).
More details concerning the collection or processing of Personal Data may be requested from the Data Controller at any time. Please see the contact information at the beginning of this document.
Users have the right, at any time, to know whether their Personal Data has been stored and can consult the Data Controller to learn about their contents and origin, to verify their accuracy or to ask for them to be supplemented, cancelled, updated or corrected, or for their transformation into anonymous format or to block any data held in violation of the law, as well as to oppose their treatment for any and all legitimate reasons. Requests should be sent to the Data Controller at the contact information set out above.
This Application does not support “Do Not Track” requests.
To determine whether any of the third-party services it uses honour the “Do Not Track” requests, please read their privacy policies.
This Revision: May 23rd, 2018