Privacy Policy

Diamond Duo & Co. ("we," "us," or "our") is a custom diamond jewelry business. Our contact email is diamondduo.co@gmail.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or contact us about a commission.

Information you provide directly

• Name, email address, and message content when you submit our contact or inquiry form.
• Any design references, images, or files you voluntarily share with us during the commission process.
• Email address if you subscribe to communications.

Information collected automatically

• Log data (IP address, browser type, pages visited, time spent) via our hosting provider (Cloudflare).
• Device and connection information for security and performance purposes.

We do not use tracking pixels, third-party analytics, or advertising cookies.

• To respond to your inquiry and manage your jewelry commission.
• To send transactional emails related to your order or consultation.
• To send marketing emails if you have opted in (you may opt out at any time).
• To comply with legal obligations.
• To protect the security and integrity of our website.

We do not sell, rent, or trade your personal information to third parties.

If you are located in the European Economic Area, our legal basis for processing your personal data is:

• Contract performance — to fulfil your jewelry commission.
• Legitimate interests — to respond to inquiries and operate our business.
• Consent — for marketing communications (you may withdraw consent at any time).
• Legal obligation — where required by law.

We may share your information with:

• Service providers: Resend (email delivery), Cloudflare (hosting and security). Each bound by confidentiality obligations.
• Legal authorities: where required by law, court order, or to protect our legal rights.

No third party receives your information for their own marketing purposes.

We retain your personal information for as long as necessary to fulfil the purposes in this policy and to comply with legal obligations. Commission-related communications are retained for seven (7) years for accounting and legal purposes. Marketing subscriber data is deleted within 30 days of unsubscribing.

Depending on your location, you may have the right to:

• Access, correct, or delete your personal data.
• Restrict or object to processing.
• Data portability (receive your data in a machine-readable format).
• Withdraw consent at any time (for consent-based processing).
• Lodge a complaint with a data protection authority (EEA residents).
• Opt out of the sale of personal information (California residents under CCPA — we do not sell personal information).

To exercise any of these rights, email us at diamondduo.co@gmail.com. We will respond within 30 days.

Our website uses only technically necessary cookies for security (Cloudflare) and session management. We do not use advertising, analytics, or tracking cookies. You can disable cookies in your browser settings; this will not affect your ability to view our website.

We implement appropriate technical and organizational measures to protect your personal information, including HTTPS encryption, access controls, and secure third-party processors. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

Our website is not directed to children under 16. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. The "Last Updated" date at the top reflects the most recent revision. Continued use of our website after changes constitutes acceptance of the updated policy.

Questions about this Privacy Policy? Email diamondduo.co@gmail.com.