1. Who we are
JewelFindy is a B2B outreach agency for the diamond and jewelry trade, based in Sharjah, United Arab Emirates. In this policy "we" and "us" mean JewelFindy. We decide how and why the personal data described here is used, so we are responsible for it (the "controller"). For client campaigns we share that responsibility with the client the campaign is for.
We follow the data protection laws that apply to our work, including the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and, where they apply, the EU GDPR, the UK GDPR and the privacy and anti-spam laws of the countries our campaigns reach.
Contact for anything in this policy: hello@jewelfindy.com.
2. What we collect
- Enquiries: your name, work email, company, what you sell, your target market and your message when you use our contact form or email us.
- Call bookings: your name, email, the time you choose and any answers you give in the booking form.
- Clients: contact names, roles, email and phone, contract details, invoices and payment records.
- Campaign contacts: business contact details of people at jewelry businesses that we email for our clients. Section 4 explains this in full.
- Website visits: pages viewed, the site that referred you, country and device type. We do not build profiles of individual visitors.
We do not collect sensitive data (such as health, religion or political views), and we ask you not to send it.
3. How we use it and our legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Reply to enquiries and arrange calls | What you send through the contact form, by email or when booking a call | Steps you ask for before a contract; our legitimate interest in answering business enquiries |
| Provide our services to clients and bill them | Client contact, contract and billing details | Contract; legal obligation (tax and accounting records) |
| Run B2B outreach for our clients | Business contact details and campaign activity (see section 4) | Legitimate interests: ours and our client’s interest in offering relevant goods and services to businesses |
| Keep a do-not-contact list | Email address or domain and the date of the request | Legal obligation and legitimate interests (making sure opt-outs keep working) |
| Run a secure website and count visits | Pages viewed, referring site, device type; IP address for security only | Legitimate interests in a working, secure website |
Where we rely on legitimate interests, we have weighed them against your rights: we only use business contact details, only for messages relevant to your role, and you can object at any time.
4. If you received an outreach email from us
We run email campaigns for suppliers to the jewelry trade. If one of them reached you, this is what you should know:
- Who it is from: each email names the person sending it and the business it is for. JewelFindy runs the campaign on that business’s behalf.
- Where we found your details: public business sources such as your company website, professional profiles, trade directories and trade show exhibitor lists, and B2B data providers that supply business contact data.
- What we hold: your name, job title, company, business email address and, sometimes, business phone number, company address and website, plus whether our emails were delivered, bounced or answered.
- Why we think it is fair: we write to you in your business role, about something relevant to your business, with a short sequence of emails and a simple way to stop them. We never email personal addresses about business offers, and we never sell or share our lists.
- How to stop it: reply "stop", use the opt-out link in the email, or use our opt-out page. We then add your address to our do-not-contact list, so no campaign we run, for any client, emails you again.
Our outreach standards describe the rules every campaign follows.
5. Who we share it with
We do not sell or rent personal data. We share it only with the providers that help us run the business, under agreements that protect it, and with the people involved in a campaign:
| Who | What for |
|---|---|
| Contabo | Hosts our website, enquiry database and statistics (data centre in France) |
| Cloudflare | Delivers the website securely and counts visits without cookies |
| Hostinger | Business email (hello@jewelfindy.com) |
| Cal.com | Scheduling discovery calls |
| Saleshandy | Sending client campaigns and collecting replies |
| B2B data and email-verification providers | Finding and checking business contact details for campaigns (named on request) |
| The client a campaign is for | Receives replies and the contact details of people who show interest |
Our website statistics (Umami) run on our own server, so no analytics company sees them. We may also share data with professional advisers, or with authorities when the law requires it.
6. Where it is stored and transferred
Our website, enquiry database and statistics run on a server in France, in the European Union. Some providers above process data in other countries, including the United States and India, and we work from the United Arab Emirates. Where the law requires it, we rely on appropriate safeguards for these transfers, such as the European Commission’s standard contractual clauses or the UK’s equivalent.
7. How long we keep it
| Data | Kept for |
|---|---|
| Enquiries and leads | 24 months after our last contact |
| Client records, contracts and invoices | As long as UAE tax and accounting rules require (currently up to 7 years) |
| Outreach contact data | For the campaign, plus 12 months |
| Do-not-contact list (email or domain and date only) | As long as we run campaigns, so the opt-out keeps working |
| Privacy requests | 24 months after we close them |
| Website statistics | Kept as totals that do not identify anyone |
| Server and security logs | Short periods, for security and troubleshooting |
After that we delete it, or keep it only in a form that no longer identifies anyone.
8. Your rights
Depending on where you live, you can ask us to:
- stop sending you emails – you can do this at any time, without giving a reason;
- give you a copy of the data we hold about you;
- correct data that is wrong or incomplete;
- delete your data, or limit how we use it;
- object to our use of it based on legitimate interests;
- send your data to you or another organisation in a common format.
Use our opt-out and privacy request page or email hello@jewelfindy.com. Opt-outs take effect within 10 business days at the latest, usually much sooner. We answer other requests within 30 days. We may ask you to confirm the request from the email address it concerns. Making a request is free.
9. Cookies and website statistics
This website does not set cookies. Our statistics tool, Umami, runs on our own server, works without cookies and does not store IP addresses. Cloudflare, which delivers the site, also counts visits without cookies; it may set a strictly necessary security cookie when it checks that a visitor is not an automated bot. Because we use no advertising or tracking cookies, there is no cookie banner to accept.
10. Security
All traffic to our website and admin systems is encrypted (HTTPS). Access to personal data is limited to the people who need it and protected with strong passwords, sign-in limits and two-factor authentication. Stored passwords and keys are encrypted, and we back up our database daily. If a breach is likely to affect you, we will tell you, and the regulator where the law requires it.
11. Other things to know
- Children: our services are for businesses. We do not knowingly collect data from anyone under 18.
- Automated decisions: we use software to verify email addresses and organise replies, but we make no automated decisions that have legal or similarly significant effects on you.
- Changes: we will post any change on this page with a new date. If a change matters for our clients, we will also tell them by email.
12. Contact and complaints
JewelFindy, Sharjah, United Arab Emirates. Email: hello@jewelfindy.com.
If you are unhappy with how we handled your data, please tell us first so we can put it right. You can also complain to the privacy regulator where you live, for example the UAE Data Office, the UK Information Commissioner’s Office, a data protection authority in the EU, the Office of the Privacy Commissioner of Canada or the Office of the Australian Information Commissioner.