Privacy
Privacy
This site collects almost nothing. There is no advertising pixel, no third-party tracking and no cookie set by this site. There is one exception, and it is named below rather than glossed over.
What is stored in your browser
Your basket, and nothing else. It lives in your own browser’s local storage, never leaves your device except as a list of stone references when you go to pay, and clearing your browser data removes it. There are no cookies set by this site.
What we receive when you buy
Your name, delivery address, email address and phone number — which we need in order to send you a stone and to talk to you about it. Payment is handled entirely by Stripe: your card number goes to it and never touches this site or our systems. We see only that a payment succeeded, and the last four digits.
Stripe is an independent controller of the data you give it, under its own privacy policy, and may process it overseas.
For high-value purchases, and for any stones we buy from you, we are required to sight photo identification. Where we do, we record that it was sighted and retain what the law requires us to retain, for as long as it requires.
What we receive when you enquire
The name, email address and message you type into the enquiry form. That is used to answer your enquiry and for nothing else — you are not added to a mailing list, and your details are never sold, rented or passed to a third party for their own purposes.
Who else is involved
The site is hosted by Cloudflare, which also counts page views — Cloudflare Web Analytics, which sets no cookie, records no identifier and cannot follow you to another site. That is the only measurement on this site, and it is the reason the paragraph above says “no cookie” rather than “nothing at all”: a page-view count is a fact about a page, not about you.
Payments go through Stripe. Enquiry emails are relayed by our email provider. Parcels are carried by the postal or courier service, which necessarily receives your delivery address. That is the complete list.
How long anything is kept
Order records are kept for seven years, because tax law requires it. Enquiries that don’t become orders are kept for two years, then deleted.
Your rights
You can ask what we hold about you, ask for it to be corrected, or ask for it to be deleted where we are not legally required to keep it. A contact address for those requests is not published yet; it goes in the Contact section below, and the thirty-day undertaking that goes with it belongs there rather than here, where you could not act on it.
If you are unhappy with how we have handled your information you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Contact
Stones of Ceylon, Sydney, Australia. No contact address is published yet, and the enquiry form is not connected — so there is currently no way to make a privacy request through this site. That is a gap, we know it is one, and it closes when the address goes in above.