Privacy Policy.

1. Information We Collect

As a B2B diamond exporter, we primarily collect information related to businesses and industry professionals. The types of information we collect include:

• Business Information: Company name, registration details, tax identification numbers, and WFDB membership status.
• Contact Information: Names, email addresses, phone numbers, and physical addresses of authorized company representatives.
• Transaction Data: Purchase history, invoices, payment methods, and shipping preferences.
• Website Usage Data: IP addresses, browser types, device information, and browsing patterns on our website (collected via cookies and similar technologies).

2. How We Use Your Information

We use the information we collect for the following purposes:

• To facilitate trade, process orders, and manage inventory shipments.
• To verify business identities and comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations in the diamond industry.
• To communicate regarding pricing, stock availability, and ongoing transactions.
• To improve our website functionality, customer service, and overall B2B experience.

3. Information Sharing and Disclosure

We do not sell, rent, or trade your personal or business information to third parties. We may share your information only under the following circumstances:

• Service Providers: With trusted logistics partners (e.g., secure courier services), insurers, and financial institutions necessary to fulfill your orders.
• Legal Compliance: When required by law, subpoena, or to cooperate with regulatory authorities (such as the Kimberley Process certification authorities).
• Business Transfers: In connection with any merger, sale of company assets, or acquisition of all or a portion of our business.

4. Data Security

We implement commercially reasonable administrative, technical, and physical security measures to protect your information from unauthorized access, loss, or misuse. However, please be aware that no security system is impenetrable, and we cannot guarantee the absolute security of your data during transmission over the internet.

5. B2B Platform — Scope of this Policy

This website is exclusively a business-to-business (B2B) platform. We do not sell to consumers. Data subjects who register are representatives of commercial entities (jewellers, wholesalers, retailers, or trade buyers). The buyer_type field collected at registration is used solely to tailor wholesale pricing access and is never shared with third parties for marketing purposes. Sole traders and individual professionals who register are treated as business representatives and may exercise all GDPR rights as individuals.

6. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We use the following processors and have taken the following measures:

• Supabase (authentication & database) — operates under Standard Contractual Clauses (SCCs). We use an EU-region Supabase project where possible.
• Google Analytics (GA4) — operates under SCCs. Consent-mode enabled; no data flows without explicit consent.
• Plausible Analytics — EU-based (Estonia), GDPR-native, no personal data collected.
• Yandex Metrika — marketing analytics (heatmaps, session recording). Data may be processed in Russia. Only activated with explicit marketing consent via our consent banner.
• formsubmit.co — contact form relay. Inquiry data (name, email, company) is transmitted to route your message to our team. Review their privacy policy at formsubmit.co.

7. Your Rights (GDPR & Applicable Law)

If you are located in the European Union, United Kingdom, or other applicable jurisdiction, you have the right to:

• Access your personal data held by us.
• Rectify inaccurate or incomplete data.
• Erase your data (right to be forgotten) — submit a request below.
• Restrict or object to processing in certain circumstances.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time for consent-based processing.

To exercise any right, email us at info@aanandexports.com with subject line "GDPR Data Request". We will respond within 30 days.

8. Request Data Deletion

To request deletion of all personal data we hold about you (account data, inquiry history, usage logs), click below. We will process your request within 30 days and confirm by email.

Note: deletion of your account will permanently revoke access to live inventory pricing. Deletion requests are logged for compliance and cannot be reversed.

9. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact our compliance team at:

Anand Exports
Email: aanandexports@gmail.com
Address: DW-1090, Bharat Diamond Bourse, Bandra Kurla Complex, Mumbai - 400051, India