Privacy notice — GEMSEARCH

01Who is responsible

GEMSEARCH LIMITED (trading as GEMSEARCH) is the controller of the personal data described here. Contact: support@gemsearc.shop. Our postal address is on the Legal information page.

02What we collect

Order details: name, billing and delivery address, e-mail, phone number, items ordered, amounts and currency.
Account details if you create an account: e-mail, password (stored in encrypted form) and order history.
Messages you send us through the contact or withdrawal forms or by e-mail.
Technical data needed to run the site: IP address and the cookies listed on our Cookies page.
Payment card details are handled by the payment service provider and are not stored by us.

03Why we use it, and the legal basis

To take, deliver and support your order, handle returns and refunds — performance of a contract.
To keep accounting and tax records — legal obligation.
To answer your messages and complaints, and to prevent fraud — legitimate interests.
We do not send marketing e-mails and we do not sell your data.

04Who we share it with

The suppliers who pack and ship your order, and the carriers who deliver it (name, address, phone, items).
The payment service provider that processes your payment.
Our website hosting and e-mail providers.
Authorities where the law requires, such as customs or tax authorities.

05International transfers

Some suppliers, carriers and service providers are outside the UK and the European Economic Area. Where data goes to a country without an adequacy decision, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses.

06How long we keep it

Order and accounting records: 6 years after the end of the financial year, as required by UK law.
Messages: up to 2 years after the matter is closed.
Accounts: until you ask us to delete them, apart from order records we must keep.

07Your rights

You can ask for access to your data, correction, deletion, restriction, a portable copy, and you can object to processing based on legitimate interests. Write to support@gemsearc.shop; we reply within one month. You can also complain to the UK Information Commissioner’s Office (ico.org.uk) or, in the EU, to the data protection authority in your country.

08Changes

We will update this notice if the way we use data changes. The date of the current version is shown below.

Version: September 2026