Privacy Policy

1. Introduction

This Privacy Policy explains how AYDOV GEMS CO., LTD. (“AYDOV Gems”, “we”, “us”, or “our”) collects, uses, stores, discloses, and protects personal data obtained through our website (https://aydovgems.com), direct sourcing requests, customer communications, bespoke gemstone transactions, and related services.

We operate as a company incorporated under the laws of the Kingdom of Thailand and are committed to processing personal data in compliance with Thailand’s Personal Data Protection Act B.E. 2562 (2019) (“Thai PDPA”) and international data privacy best practices applicable to cross-border luxury commerce.

3. Personal Data We Collect

We only collect personal data that is necessary, relevant, and directly connected to providing professional B2B gemstone sourcing services, responding to inquiries, executing commercial contracts, and fulfilling statutory requirements under Thai law.

4. Payment Information and Stripe Processing

Payment for gemstones sold by AYDOV GEMS CO., LTD. may be completed via international bank wire transfer or credit/debit card processed securely through Stripe, Inc.(“Stripe”) using Stripe-hosted Checkout or Stripe Payment Links.

5. How We Collect Personal Data

We collect personal data through the following legitimate channels:

• Directly from you: When you complete the sourcing request drawer, sign up for weekly email selections, message us via WhatsApp, call us, or email us.
• From transaction and logistics partners: From Stripe regarding payment confirmation and status; from banks regarding wire transfers; from FedEx regarding shipment progress, customs clearance milestones, and delivery signature confirmations.
• From independent gemological laboratories: From accredited laboratories (e.g., GIA, GIT, AIGS, Lotus Gemology) where documentation is generated for certified gemstones involved in your order.

6. Purposes and Lawful Bases for Processing

Under Section 24 and Section 19 of the Thai PDPA, we process your personal data under the lawful bases outlined in the table below:

Consequences of not providing data: Providing contact, identification, and delivery information is necessary for us to issue commercial invoices, receive payment, obtain Thai customs export clearance, and deliver gemstones. Without this data, we cannot fulfill orders.

7. Disclosure and Sharing of Personal Data

We do not sell, rent, or trade your personal data to third parties. We disclose personal data only to trusted recipients strictly necessary for business operations:

• Payment Processors & Banks: Stripe, Inc. and commercial banking partners to process and settle payments securely.
• Logistics & Express Couriers: FedEx Express, specialized insured couriers, customs brokers, and transit insurance underwriters to transport and deliver shipments internationally.
• Gemological Testing Laboratories: Independent laboratories (GIA, GIT, AIGS, Lotus Gemology) to verify and issue gemstone identification reports.
• Professional Advisers: Licensed Thai accountants, auditors, tax consultants, and legal counsel for statutory compliance.
• Cloud Infrastructure & Communication Providers: DigitalOcean (server hosting), Cloudflare, Inc. (DNS, CDN, edge security), Supabase (secure database hosting), and Telegram Bot API (internal operational notifications to authorized management).
• Government & Regulatory Authorities: Thai Revenue Department, Thai Customs Department, law enforcement, or judicial courts where required by applicable Thai or international law.

8. International Data Transfers

Because AYDOV GEMS CO., LTD. serves international jewelry clients and utilizes enterprise cloud infrastructure, your personal data may be transferred to, stored, or processed in countries outside Thailand (such as Germany where our primary server hosting is located, or the United States where Stripe and Cloudflare operate).

When transferring data across international borders, we ensure that appropriate safeguards are implemented in accordance with Section 28 and Section 29 of the Thai PDPA, such as standard data protection agreements, contractual clauses, or transfers necessary for the performance of your purchase contract.

9. Data Retention Periods

We retain personal data only for as long as necessary to satisfy the purposes for which it was collected, comply with statutory obligations under Thai law, and establish or defend legal claims:

• Invoices, Tax, and Accounting Records: Retained for a minimum of 5 to 7 years in compliance with the Thai Revenue Code, Accounting Act B.E. 2543, and corporate audit standards.
• Sourcing Inquiries (Non-transactional): Retained for up to 24 months to enable follow-up gemstone searches and market inquiries.
• Marketing & Newsletter Subscriptions: Retained until you withdraw consent or unsubscribe, after which a minimal suppression record is retained to honor your preference.
• Technical & Server Logs: Retained for a maximum period of 90 days for network security and operational audit purposes.

When retention periods expire, personal data is securely deleted, destroyed, or irreversibly anonymized.

10. Your Rights Under the Thai PDPA

Under Thailand’s Personal Data Protection Act B.E. 2562 (2019), you have the following statutory rights regarding your personal data, subject to legal qualifications and statutory exemptions:

11. Marketing Communications

We only send promotional communications (such as our Weekly Curated Gemstone Selection) to individuals who have provided affirmative opt-in consent. We do not use pre-checked checkboxes, and submitting a gemstone sourcing inquiry does not automatically enroll you in marketing newsletters.

You may opt out of promotional emails at any time by contacting us at [email protected]or replying directly with “Unsubscribe”.

12. Cookies and Similar Technologies

13. Security Measures

We maintain reasonable and appropriate technical and organizational measures designed to protect personal data against unauthorized or unlawful loss, access, use, alteration, disclosure, or destruction. These measures include TLS/HTTPS encryption for data in transit, strict access control restrictions, and secure cloud database infrastructure.

14. Minors and Legal Capacity

Our services and high-value gemstone sourcing transactions are intended exclusively for adults possessing the full legal capacity to enter into commercial contracts. We do not knowingly collect personal data from minors. If a parent or guardian becomes aware that a child has provided us with personal information, please contact us immediately.

15. Changes to This Privacy Policy

We may periodically update this Privacy Policy to reflect modifications in our business operations, technological infrastructure, or statutory obligations under Thai law. When changes occur, we will update the “Last Updated” date at the top of this page.