Privacy policy

This Policy applies to every visitor and customer of the online shop www.diamondsky.lv. By placing an order or contacting us you agree with what is written here.

Cookies are covered separately in the Cookie policy.

1. General information

1.1. This Policy explains what data of yours reaches us when you buy at www.diamondsky.lv or write to us, what we do with it and how you can control it.

1.2. The shop belongs to SIA BLACK DIAMOND GROUP, registration number 40203194764, registered address: Krišjāņa Valdemāra iela 149, Riga, LV-1013. All questions about data go to info@diamondsky.lv.

1.3. We ask only for the data without which an order cannot be packed and delivered. We collect nothing beyond that.

1.4. The shop is for people over 16. If you are younger, an order can be placed only with your parents consent.

1.5. We are responsible for what we do with your data ourselves. You are responsible for what you type into the order form: a parcel will not reach a wrong address.

2. What data we collect

2.1. When placing an order you provide:

• name and surname;
• phone number;
• e-mail address;
• delivery address or the chosen parcel locker.

2.2. If you create an account, a password is added — it is stored encrypted, and not even we can read it.

2.3. When you write to us or leave a review, we see what you wrote and the address the letter came from.

2.4. The site collects anonymous visit statistics: which pages were opened, from a phone or a computer. It cannot be linked to a particular person. Details are in the Cookie policy.

2.5. We do not collect data about your health, beliefs, origin or other special categories: selling jewellery does not need them.

3. Why we need it

3.1. To pack and send your order, and to warn you if an item is out of stock.

3.2. To issue an invoice and process the payment.

3.3. To answer your letter or handle a warranty and return case.

3.4. To meet legal requirements: keep accounting documents and answer lawful requests from state authorities.

3.5. To understand how the shop works, from anonymous visit statistics.

3.6. We do not build customer profiles and make no automated decisions about you.

4. On what legal basis we process it

4.1. Performance of the contract — everything needed to take, pack, charge and deliver an order. Article 6(1)(b) of the General Data Protection Regulation.

4.2. Legal obligation — accounting and keeping invoices. Point (c).

4.3. Our legitimate interest — protecting forms from robots, keeping the site working, anonymous statistics. Point (f).

4.4. Your consent — if you separately subscribed to our news. Consent can be withdrawn at any time; every letter has an unsubscribe link. Point (a).

5. Payment

5.1. Payments are handled by Klix by Citadele (AS Citadele banka). You enter card details on the secure bank page — they never reach us and we do not store them.

5.2. If you choose to pay in instalments (Klix Pay Later), the application is filled in at Klix too. The decision is made by the lender, not by us; in that case your data is processed by them on their terms. We only see the result — whether the order is paid.

5.3. With a prepayment invoice we see your payment in the bank statement: payer name, account number and amount. This goes into accounting.

5.4. If you pay by card on delivery, the payment is taken by the delivery company on its own terminal.

6. Delivery

6.1. For the parcel to arrive, the delivery company needs your name, phone, e-mail and the address or locker number. Without them a shipment cannot be created.

6.2. We work with Omniva, Unisend and Latvijas Pasts. Each receives data only about its own shipments and uses it for delivery.

6.3. The delivery company informs you about the parcel itself, by message or e-mail depending on the chosen method.

7. Who else receives your data

7.1. Your data reaches only those without whom an order cannot happen:

• delivery companies Omniva, Unisend, Latvijas Pasts — name, phone, e-mail, address or locker;
• AS Citadele banka and its Klix service — payment data;
• our accountant — invoices and payments, as much as the law requires;
• the hosting provider whose servers run the shop;
• Google Ireland Limited — anonymous visit statistics and form protection.

7.2. Each of them works under a contract and may use the data only for its own task.

7.3. We do not sell your data and do not pass it on for anyone else advertising.

7.4. Data may be given to state authorities if they request it on a lawful basis.

8. Transfers outside the European Union

8.1. Orders, payment and delivery stay within the European Union.

8.2. The exception is visit statistics and form protection: Google may process this data outside the EU under the European Commission standard contractual clauses. It contains no personal details.

9. How long we keep your data

9.1. Invoices and other accounting documents — 5 years, as the accounting law requires.

9.2. Order details — 2 years after delivery: that is how long the warranty runs.

9.3. Correspondence with a customer — up to 2 years.

9.4. Your account — as long as you use it. If you ask us to delete it, we will; order data stays as long as the law says.

9.5. Once the period is over, data is deleted or anonymised.

10. How we protect your data

10.1. The connection to the shop is protected by a certificate and data travels over an encrypted channel.

10.2. Passwords are stored as an irreversible fingerprint, not as text.

10.3. Only those who need it for work can see orders, and the admin panel has its own password.

10.4. The site runs on the servers of a hosting provider in the European Union, with its own protection measures and round-the-clock physical security.

10.5. Absolute security does not exist online, but we do everything reasonable to keep your data away from strangers.

11. Cookies

11.1. Cookies are needed for the cart and checkout to work, and for us to see anonymous visit statistics.

11.2. Which files are stored, how long they live and how to refuse them is written in the Cookie policy.

12. Your rights

12.1. You may:

• ask what data of yours we hold and get a copy;
• have inaccurate data corrected;
• have data deleted if there is no longer a reason to keep it;
• restrict the processing or object to it;
• receive your data in a machine-readable form and pass it to another company;
• withdraw consent to the newsletter.

12.2. Write to info@diamondsky.lv from the address you used in the order. We usually answer within a couple of working days; the legal deadline is one month.

12.3. Before handing data over we make sure it is really you asking: otherwise a stranger could learn your address and purchase history.

12.4. Note that after deletion we cannot find your purchase if you come with a warranty case, and cannot restore the documents for it.

12.5. If our answer does not satisfy you, you may complain to the State Data Inspectorate of Latvia (Datu valsts inspekcija), Elijas iela 17, Riga, LV-1050, www.dvi.gov.lv.

13. Who is responsible

13.1. The controller of your data is SIA BLACK DIAMOND GROUP, registration number 40203194764, Krišjāņa Valdemāra iela 149, Riga, LV-1013.

13.2. Questions and requests go to info@diamondsky.lv.

14. Changes to this policy

14.1. When the way we handle data changes, we update this page.

14.2. This Policy was last updated on 19.08.2026.