Privacy Policy
Effective Date: August 2, 2025
Website: https://guashawholesale.com
Entity: Deyi Gems (referred to as “Company,” “we,” “us,” or “our”)
1. Overview
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage with our services. It complies with major international data protection laws, including:
General Data Protection Regulation (EU GDPR and UK GDPR)
California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)
Children’s Online Privacy Protection Act (COPPA)
Other applicable global privacy frameworks
We are committed to protecting your privacy and using your data responsibly.
2. Information We Collect
We collect the following types of information:
a) Personal Data You Provide Directly
Full name
Email address
Company name
Billing and shipping addresses
Phone number
Order history
Account credentials (if you register)
b) Payment Data
Credit/debit card details are collected securely via third-party payment processors (e.g., Stripe, PayPal). We do not store this information on our servers.
c) Automatically Collected Data
IP address
Browser type and version
Operating system
Pages visited, time spent, clickstream data
Device identifiers
Referring URLs
d) Cookies and Similar Technologies
We use cookies, web beacons, pixels, and other tracking technologies for:
Session management
Cart preservation
Analytics (e.g., Google Analytics)
Advertising personalization (e.g., Meta Ads, Google Ads)
You can control cookie settings via our cookie banner or your browser.
3. Legal Bases for Data Processing (EU/UK Users)
We process personal data under the following legal bases:
Consent – for newsletters, analytics, remarketing
Contract – to fulfill and manage your orders
Legal obligations – for tax or regulatory compliance
Legitimate interests – fraud prevention, user experience improvement
4. How We Use Your Information
Your information is used for the following purposes:
To process orders and deliver products
To send order confirmations, updates, and shipping notifications
To provide customer service and technical support
To personalize user experience
To administer promotions and marketing campaigns (with consent)
To analyze website performance and improve functionality
To comply with applicable legal and regulatory obligations
5. Sharing and Disclosure of Data
We share your data only when necessary and never sell it.
a) Service Providers
We may share information with vendors who help us:
Process payments
Ship orders
Host websites
Analyze data (e.g., Google Analytics)
Run email campaigns (e.g., Mailchimp, Klaviyo)
All service providers are contractually bound to protect your data.
b) Legal Obligations
We may disclose data if required by law, court order, or to enforce our legal rights.
c) Business Transfers
If our business is acquired or merged, your information may be transferred to the new owner under appropriate safeguards.
6. International Transfers
We may transfer your data outside of your jurisdiction (e.g., to the US from the EU). When doing so, we rely on:
Standard Contractual Clauses (SCCs) approved by the European Commission
UK Addendum to the SCCs
Appropriate safeguards for countries not recognized as having adequate protections
7. Retention Period
We retain personal data only as long as necessary:
| Data Type | Retention Period |
|---|---|
| Order & payment records | 7 years (tax and legal compliance) |
| Marketing data | Until you opt out or withdraw consent |
| User accounts | Until deleted or after inactivity |
8. Your Privacy Rights
a) EU/UK Users (GDPR/UK GDPR)
You have the right to:
Access your data
Correct inaccurate data
Request deletion (“right to be forgotten”)
Restrict or object to processing
Data portability
Withdraw consent at any time
b) California Residents (CCPA/CPRA)
You have the right to:
Know what personal information is collected, used, shared, or sold
Request deletion of your personal data
Opt-out of the “sale” or “sharing” of personal data (we do not sell)
Correct inaccurate data
Limit use of sensitive data
Exercise your rights without discrimination
To exercise your rights, email: privacy@guashawholesale.com
We will verify your identity before processing your request.
9. Cookies and Tracking Preferences
We use a cookie consent banner in compliance with GDPR, CCPA, and ePrivacy Directive. You can:
Accept or reject non-essential cookies
Change preferences anytime by clicking “Cookie Settings” on our site
Use browser settings to block all cookies (may affect functionality)
10. Data Security
We implement administrative, technical, and physical safeguards, including:
SSL/TLS encryption for all communications
Regular security audits and updates
Role-based access control (RBAC)
Secure server hosting and firewalls
Data minimization and pseudonymization practices
No method is 100% secure, but we strive to protect your data to industry standards.
11. Third-Party Links
Our website may contain links to third-party sites. We are not responsible for their privacy practices. We recommend reviewing their privacy policies before sharing any personal information.
12. Children’s Privacy
We do not knowingly collect or process data from individuals under 16 years old (or under 13 in the US). If we learn that a minor has provided us with personal data, we will delete it promptly.
13. Updates to This Policy
We may update this Privacy Policy from time to time to reflect:
Legal or regulatory changes
New features or services
Technology changes
All changes will be posted on this page with an updated “Effective Date.” You are encouraged to review this policy periodically.
14. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact:
Email: jaderollersaels@gmail.com
Website: guashawholesale.com
