Privacy policy

This Policy applies to every visitor and customer of the online shops www.diamondsky.lv, www.diamondsky.lt, www.diamondsky.ee and www.diamondsky.fi. By placing an order or contacting us you agree with what is written here.

Cookies are covered separately in the Cookie policy.

1. General information

1.1. This Policy explains what data of yours reaches us when you buy at www.diamondsky.lv, www.diamondsky.lt, www.diamondsky.ee and www.diamondsky.fi or write to us, what we do with it and how you can control it.

1.2. The shop belongs to SIA BLACK DIAMOND GROUP, registration number 40203194764, registered address: Krišjāņa Valdemāra iela 149-205, Riga, LV-1013. All questions about data go to info@diamondsky.fi.

1.3. We ask only for the data without which an order cannot be packed and delivered. We collect nothing beyond that.

1.4. The shop is for people over 16. If you are younger, an order can be placed only with your parents consent.

1.5. We are responsible for what we do with your data ourselves. You are responsible for what you type into the order form: a parcel will not reach a wrong address.

2. What data we collect

2.1. When placing an order you provide:

• name and surname;
• phone number;
• e-mail address;
• delivery address or the chosen parcel locker.

2.2. If you create an account, a password is added — it is stored encrypted, and not even we can read it.

2.3. When you write to us or leave a review, we see what you wrote and the address the letter came from.

2.4. The site collects anonymous visit statistics: which pages were opened, from a phone or a computer. It cannot be linked to a particular person. Details are in the Cookie policy.

2.5. We do not collect data about your health, beliefs, origin or other special categories: selling jewellery does not need them.

2.6. If you write to us on WhatsApp, we see your phone number, your WhatsApp profile name and everything you send: text, photos, voice messages.

3. Why we need it

3.1. To pack and send your order, and to warn you if an item is out of stock.

3.2. To issue an invoice and process the payment.

3.3. To answer your letter or handle a warranty and return case.

3.4. To meet legal requirements: keep accounting documents and answer lawful requests from state authorities.

3.5. To understand how the shop works, from anonymous visit statistics.

3.6. We do not build customer profiles and make no automated decisions about you.

3.7. Reply to you on WhatsApp. Either we reply ourselves or our AI assistant Marta does, for example outside working hours. If Marta replies, we say so in her first reply. We see the whole conversation and can step in at any time. Only we decide on discounts, returns and exceptions.

4. On what legal basis we process it

4.1. Performance of the contract — everything needed to take, pack, charge and deliver an order. Article 6(1)(b) of the General Data Protection Regulation.

4.2. Legal obligation — accounting and keeping invoices. Point (c).

4.3. Our legitimate interest — protecting forms from robots, keeping the site working, anonymous statistics, and quick replies to your WhatsApp messages with the help of an AI assistant. Point (f).

4.4. Your consent — if you separately subscribed to our news. Consent can be withdrawn at any time; every letter has an unsubscribe link. Point (a).

5. Payment

5.1. In the online store www.diamondsky.fi, card, Apple Pay, Google Pay, MobilePay and online banking payments are received by Montonio Finance UAB. Klarna payments are handled by Stripe Technology Europe Limited and Klarna Bank AB (publ). Card details are entered on the payment service's secure page and are not disclosed to Diamond Sky. In the online stores www.diamondsky.lv, www.diamondsky.lt and www.diamondsky.ee, payments are received by Klix by Citadele (AS Citadele banka).

5.2. If payment is made with PayPal, it is processed by PayPal (Europe) S.à r.l. et Cie, S.C.A. under its own terms. We only see the result — whether the order is paid.

5.3. With a prepayment invoice we see your payment in the bank statement: payer name, account number and amount. This goes into accounting.

5.4. If you pay by card on delivery, the payment is taken by the delivery company on its own terminal.

6. Delivery

6.1. For the parcel to arrive, the delivery company needs your name, phone, e-mail and the address or locker number. Without them a shipment cannot be created.

6.2. We work with Omniva, Unisend and Latvijas Pasts and, for deliveries to Finland, SmartPosti (Posti Group), with shipment data processed by Montonio Finance OÜ. Each receives data only about its own shipments and uses it for delivery.

6.3. The delivery company informs you about the parcel itself, by message or e-mail depending on the chosen method.

7. Who else receives your data

7.1. Your data reaches only those without whom an order cannot happen:

• delivery companies Omniva, Unisend, Latvijas Pasts — name, phone, e-mail, address or locker;
• SmartPosti (Posti Group) — name, phone number, email address, delivery address or parcel locker details, if the order is delivered by SmartPosti;
• Montonio Finance UAB and Montonio Finance OÜ — payment and shipment data, if the order is placed in the online store www.diamondsky.fi;
• Stripe Technology Europe Limited and Klarna Bank AB (publ) — payment data, if payment is made with Klarna;
• PayPal (Europe) S.à r.l. et Cie, S.C.A. — payment data, if payment is made with PayPal;
• AS Citadele banka and its Klix service — payment data, if the order is placed in the online stores www.diamondsky.lv, www.diamondsky.lt or www.diamondsky.ee;
• our accountant — invoices and payments, as much as the law requires;
• the hosting provider whose servers run the shop;
• Google Ireland Limited — anonymous visit statistics and form protection;
• WhatsApp Ireland Limited — your phone number, profile name and messages, if you write to us on WhatsApp;
• Anthropic, PBC — the text of your WhatsApp messages, so that Marta can prepare a reply. We do not pass photos or voice messages to Anthropic. Anthropic does not use this data to train its models.

7.2. Each of them works under a contract and may use the data only for its own task.

7.3. We do not sell your data and do not pass it on for anyone else advertising.

7.4. Data may be given to state authorities if they request it on a lawful basis.

8. Transfers outside the European Union

8.1. Orders, payment and delivery stay within the European Union.

8.2. There are two exceptions. The first is visit statistics and form protection: Google may process this data outside the EU under the European Commission standard contractual clauses. It contains no personal details.

8.3. The second is WhatsApp messages: Anthropic processes the text of your messages in the USA. For this transfer we use the European Commission standard contractual clauses; you can ask us for a copy. Anthropic normally keeps this data for up to 30 days.

9. How long we keep your data

9.1. Invoices and other accounting documents — 5 years, as the accounting law requires.

9.2. Order details — 2 years after delivery: that is how long the warranty runs.

9.3. Correspondence with a customer, including on WhatsApp — up to 2 years after the last message.

9.4. Your account — as long as you use it. If you ask us to delete it, we will; order data stays as long as the law says.

9.5. Once the period is over, data is deleted or anonymised.

10. How we protect your data

10.1. The connection to the shop is protected by a certificate and data travels over an encrypted channel.

10.2. Passwords are stored as an irreversible fingerprint, not as text.

10.3. Only those who need it for work can see orders, and the admin panel has its own password.

10.4. The site runs on the servers of a hosting provider in the European Union, with its own protection measures and round-the-clock physical security.

10.5. Absolute security does not exist online, but we do everything reasonable to keep your data away from strangers.

11. Cookies

11.1. Cookies are needed for the cart and checkout to work, and for us to see anonymous visit statistics.

11.2. Which files are stored, how long they live and how to refuse them is written in the Cookie policy.

12. Your rights

12.1. You may:

• ask what data of yours we hold and get a copy;
• have inaccurate data corrected;
• have data deleted if there is no longer a reason to keep it;
• restrict the processing or object to it;
• receive your data in a machine-readable form and pass it to another company;
• withdraw consent to the newsletter.

12.2. Write to info@diamondsky.fi from the address you used in the order. We usually answer within a couple of working days; the legal deadline is one month.

12.3. Before handing data over we make sure it is really you asking: otherwise a stranger could learn your address and purchase history.

12.4. Note that after deletion we cannot find your purchase if you come with a warranty case, and cannot restore the documents for it.

12.5. If our answer does not satisfy you, you may complain to the State Data Inspectorate of Latvia (Datu valsts inspekcija), Elijas iela 17, Riga, LV-1050, www.dvi.gov.lv.

13. Who is responsible

13.1. The controller of your data is SIA BLACK DIAMOND GROUP, registration number 40203194764, Krišjāņa Valdemāra iela 149-205, Riga, LV-1013.

13.2. Questions and requests go to info@diamondsky.fi.

14. Changes to this policy

14.1. When the way we handle data changes, we update this page.

14.2. This Policy was last updated on 19.08.2026.