Privacy Policy

Effective date: October 2026

At STIG International ("Company", "we", "us", or "our"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit this shop or buy a diamond.

1. Controller and contact

STIG International Gemstone FZCO DMCC
HDS Business Centre · Cluster M · Al Thanyah Fifth
Jumeirah Lakes Towers
Dubai · United Arab Emirates
E-mail: info@stig-international.com
Website: www.stig-international.com

2. Personal data we process

  • Identification and contact data: name, e-mail address, phone number, billing and shipping address, company (if provided).
  • Transaction and contract data: orders, the stones ordered (item and report number), invoices, order number, payment status.
  • Payment data: payment method and transaction details. Card details are entered and processed solely at our payment provider Stripe; they never reach our servers.
  • Technical and usage data: IP address, browser type and version, operating system, referrer URL, pages viewed, date and time of access (server logs).
  • Communication data: messages you send us via the request form, e-mail, phone or WhatsApp.

3. Purposes and legal bases (GDPR)

  • Operating and securing the shop, server logs, abuse prevention – Art. 6(1)(f) GDPR.
  • Processing orders and payments via Stripe – Art. 6(1)(b) GDPR.
  • Customer support and communication – Art. 6(1)(b) or (f) GDPR.
  • Compliance with legal obligations (accounting, tax, anti-money-laundering in the gemstone trade) – Art. 6(1)(c) GDPR.
  • Analytics and marketing only with your consent – Art. 6(1)(a) GDPR. We currently use no analytics or advertising cookies.

4. Hosting

The shop runs on the servers of our hosting provider; all data you submit through the shop is processed there. The provider is contractually bound to comply with the GDPR and provides appropriate safeguards for international transfers.

5. Services used

  • Stripe (Stripe Payments Europe Ltd., Dublin, and Stripe, Inc.): payment processing. At checkout you are taken to Stripe's payment page, where name, address, e-mail, phone and payment data are collected. Stripe is PCI-DSS compliant. Privacy policy: stripe.com/privacy.
  • Inventory (Shopify): our stock of stones is kept in Shopify; the shop reads availability and prices from it and reports sold stones back. No buyer data is transferred to Shopify in the process.
  • Grading laboratories (GIA, IGI, HRD Antwerp): report numbers link to the laboratories' report-check pages, whose privacy policies apply when you open them.
  • Fonts: typefaces are loaded from Adobe Fonts (Typekit) and Google Fonts, which transmits your IP address to the respective provider. Legal basis: Art. 6(1)(f) GDPR.
  • WhatsApp: if you contact us via the WhatsApp link, WhatsApp (Meta Platforms Ireland Ltd.) processes your data under its own terms.

6. Cookies and local storage

The shop sets no tracking cookies. Your language choice and your shortlist ("selection") are stored only locally in your browser (localStorage) and are not transmitted to us. Stripe sets its own cookies on its payment page as required for the payment.

7. Retention

We retain personal data only as long as necessary for the purposes described, including legal retention obligations under commercial and tax law (invoices generally up to 10 years). Server logs are deleted after 30 days at the latest unless needed to investigate an incident.

8. Your rights

  • Request access to your personal data.
  • Rectify inaccurate or incomplete data.
  • Request erasure ("right to be forgotten").
  • Restrict or object to processing, including for direct marketing.
  • Data portability where technically feasible.
  • Withdraw consent at any time with effect for the future.
  • Lodge a complaint with a data protection authority.

9. Security

We implement appropriate technical and organisational measures to protect data against unauthorised access, loss, misuse or alteration (TLS encryption, access restriction, signature verification of all payment notifications). Nevertheless, no online transmission or storage is fully secure.

10. International transfers

Our company is based in the United Arab Emirates. Data of customers from the EEA is processed on the basis of recognised transfer mechanisms (the European Commission's Standard Contractual Clauses or equivalent safeguards).

11. Changes to this policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.

12. Contact

For questions or to exercise your rights: STIG International, e-mail info@stig-international.com, website www.stig-international.com.