Legal
Privacy Policy
Last updated: 14 May 2026
GemVault Ceylon ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains what personal data we collect, how we use it, and your rights regarding that data. It applies to all users of gemvaultceylon.com, including buyers, sellers, and visitors.
1.
Information We Collect
Account Information
- When you register, we collect your name, email address, and password. Sellers may additionally provide business name, contact details, and identity verification documents.
Inquiry and Communication Data
- We collect messages, inquiries, and communication content sent through the platform between users or to our support team.
Usage Data
- We collect information about how you use the platform, including pages visited, search queries, listings viewed, session duration, device information, and browser type through analytics tools.
Information Shared Between Users
- Users may voluntarily share personal details such as contact information or shipping details when communicating with each other through the platform.
2.
How We Use Your Information
- Operate and maintain the GemVault Ceylon marketplace.
- Enable communication between buyers and sellers.
- Verify seller identities and improve platform trust and safety.
- Personalise listings and improve user experience.
- Send account-related notifications and support responses.
- Detect, prevent, and investigate fraud, abuse, or policy violations.
- Comply with applicable legal obligations.
- We do not use your data to process payments because GemVault Ceylon does not handle financial transactions between users.
3.
Sharing Your Information
Between Users
- When you send an inquiry or communicate with another user, relevant details you provide (such as name, email address, or message content) may be shared with the other party to facilitate communication.
Service Providers
- We may share data with trusted third-party providers such as hosting services, analytics tools, email delivery services, and security providers, under strict data protection agreements.
Legal Requirements
- We may disclose information if required by law, court order, or government request, or to protect the rights, safety, or security of users and the platform.
- We do not sell or rent your personal data to third parties.
4.
No Payment Processing
- GemVault Ceylon does not process, handle, or facilitate payments for any transactions between users. Any agreements, financial transactions, payments, or exchanges of value occur directly between buyers and sellers outside the platform and are solely their responsibility.
5.
Cookies and Tracking Technologies
- Provide essential platform functionality (such as login sessions).
- Understand platform usage and improve performance.
- Remember user preferences.
- We may use analytics tools such as Google Analytics to understand user behaviour.
- Where required by law, we will request your consent before using non-essential cookies.
- You can manage cookie preferences through your browser settings.
6.
Data Retention
- Account data: retained while your account is active.
- Communication data: retained for platform safety and support purposes.
- Deleted accounts: personal data is removed within 30 days, unless legally required to retain it.
- Analytics data: anonymised or aggregated after a limited retention period.
7.
Your Rights
- Access your personal data.
- Request correction of inaccurate data.
- Request deletion of your personal data.
- Request a copy of your data in a portable format.
- Object to certain types of data processing, such as marketing.
- To exercise these rights, contact us at info@gemvaultceylon.com.
8.
Security
- TLS encryption for data in transit.
- Secure password hashing (bcrypt or equivalent).
- Access controls restricting internal data access.
- Monitoring systems to detect suspicious activity.
- However, no system is completely secure. Users are responsible for maintaining the security of their own accounts and credentials.
9.
Third-Party Communication
- Users may communicate directly with each other through or outside the platform. GemVault Ceylon is not responsible for the content, security, or privacy practices of communications conducted outside the platform or between users.
10.
Children's Privacy
- Our platform is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors.
11.
International Data Transfers
- Your information may be processed in countries outside your country of residence where our service providers operate. We take reasonable steps to ensure appropriate data protection safeguards are in place.
12.
Changes to This Policy
- We may update this Privacy Policy from time to time. Significant changes will be communicated via email or a notice on the platform at least 14 days before they take effect.
- Continued use of the platform after changes become effective constitutes acceptance of the updated policy.