Privacy Policy
**Effective Date: 20/05/2024**
Diamonds4Change.org ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you visit our website or make a purchase.
**1. Information We Collect**
We may collect and process the following data about you:
- **Personal Identification Information:** Name, address, email address, phone number.
- **Payment Information:** Credit/debit card details, billing address.
- **Technical Data:** IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system, and platform.
- **Usage Data:** Information about how you use our website, products, and services.
- **Marketing and Communications Data:** Your preferences in receiving marketing from us and your communication preferences.
**2. How We Use Your Information**
We use your data to:
- Process and fulfill your orders, including managing payments and delivery.
- Provide customer support and respond to your inquiries.
- Improve our website, products, and services.
- Send you promotional materials, if you have consented to receive them.
- Comply with legal obligations and protect our legal rights.
**3. Legal Basis for Processing Your Data**
We process your personal data based on the following legal grounds:
- **Contractual Necessity:** To perform the contract we have with you, such as processing your orders and payments.
- **Legal Obligation:** To comply with legal requirements, such as tax and accounting obligations.
- **Legitimate Interests:** To manage and improve our business operations, and to enhance customer service.
- **Consent:** Where you have given us explicit consent to process your data for specific purposes.
**4. Data Sharing and Disclosure**
We may share your personal data with:
- **Service Providers:** Companies that provide services on our behalf, such as payment processing, delivery, and IT support.
- **Legal Authorities:** When required by law or to protect our legal rights.
- **Business Transfers:** In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new owner.
**5. International Data Transfers**
We may transfer your personal data to countries outside the European Economic Area (EEA). In such cases, we ensure that adequate protection is in place, such as standard contractual clauses or other legal mechanisms.
**6. Data Security**
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse. However, no security system is impenetrable, and we cannot guarantee the absolute security of your data.
**7. Data Retention**
We retain your personal data only for as long as necessary to fulfill the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements.
**8. Your Rights**
Under UK data protection law, you have the right to:
- Access your personal data and request a copy.
- Correct any inaccurate or incomplete data.
- Request the deletion of your data, under certain conditions.
- Restrict or object to the processing of your data.
- Data portability, allowing you to obtain and reuse your data.
- Withdraw consent at any time, where we rely on consent to process your data.
To exercise these rights, please contact us at [Insert Contact Information].
**9. Cookies**
Our website uses cookies to enhance your browsing experience. For detailed information on the cookies we use and your choices regarding cookies, please refer to our Cookie Policy.
**10. Changes to This Privacy Policy**
We may update this Privacy Policy from time to time. Any changes will be posted on this page, and where appropriate, notified to you by email. Please check back frequently to see any updates or changes.
**11. Contact Us**
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:
DiamondsForChange.org
Email: letstalk@diamonds4change.org
---
This privacy policy ensures compliance with UK data protection laws, including the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).