1. Controller and contact details
The controller is SIA Fine Cast Gems, VAT number LV50103869951, registered address Merķeļa iela 5–4, Riga, LV-1050, Latvia. Privacy questions and data requests: finecastgems@gmail.com, +371 25721696.
2. Scope of the website
This is a jewelry, gemstone and service catalog with enquiry forms. It has no customer accounts, cart or online checkout, so we receive no card or online-banking data through it. An enquiry is not a purchase; orders are agreed separately.
3. Data we receive
Forms provide your name, email, optional telephone and contact method, message and consent confirmation. We add language, page URL, enquiry type and, where relevant, product name, SKU, link and size. Follow-up may include photographs, sketches, certificates, budget and delivery details you choose to send.
4. Technical and security data
For form security we record IP address, browser identifier, time, reCAPTCHA risk score and a one-way fingerprint of message characteristics to detect repeat spam. Logs may temporarily contain IP, URL and error data. With analytics consent, we store only aggregated product-view counts and a browser-session marker against duplicates.
5. Purposes and legal bases
Replying, proposals and order fulfilment rely on Article 6(1)(b) GDPR; mandatory invoice and transaction records on point (c); security and fraud prevention on legitimate interest under point (f). Catalog analytics and Google Maps rely on consent under point (a). The website does not automatically subscribe you to marketing.
6. Recipients, transfers and retention
Access is limited to authorized Fine Cast Gems personnel and necessary server, database and email providers. Cloudflare supplies network and R2 product-image services; Google supplies reCAPTCHA and, with consent, Maps. Their processing may involve GDPR-compliant transfers outside the EEA. We do not sell data or provide it for another party’s marketing. Enquiries are kept for the response, reasonable follow-up and disputes; order and accounting records for statutory periods; security logs only as needed. Data is then deleted or anonymized unless law requires otherwise.
7. Your rights and policy changes
You may request access, correction, erasure, restriction and, where applicable, portability, object to legitimate-interest processing and withdraw consent. Email finecastgems@gmail.com; proportionate identity verification may be required. Complaints may be made to the Latvian Data State Inspectorate at dvi.gov.lv. We update this policy when features, providers or law change; the current date appears above.