Privacy Policy

Your design journey involves personal information shared between you, your assigned Member and DCA. This policy explains that flow and how to contact us about your information.

Who handles your information

Diamond Cut Atelier is operated by [full legal entity and ABN] (“DCA”, “we” or “us”). This policy explains how DCA collects, uses, shares, stores and protects personal information in its Australian website, customer dashboard and bespoke jewellery service. For privacy questions or requests, use the support icon in your customer dashboard. If you cannot access it, use [insert accessible privacy contact channel before publication].

What we collect

We may collect your name, contact and delivery details, account and login information, Member referral relationship, messages, design briefs, photographs and inspiration images, ring size and preferences, CAD approvals, orders, payment status, delivery records, customer support correspondence and website usage information. We may receive some information from the Member who assists you, from our payment and delivery providers, and directly from you.

DCA should not routinely store full payment card numbers if payment is handled by a payment provider. Confirm exactly what payment data DCA receives and state it here before publication. Please avoid including unnecessary personal or sensitive information about other people in a design brief or image.

Why we use it

We use information to create and secure accounts; link a customer to their Member; prepare and revise designs; provide quotes; take and reconcile payments; produce, inspect and deliver jewellery; provide support, remedies and statements; prevent fraud; meet recordkeeping duties; improve portal reliability; and communicate essential service updates. We use information for marketing only where permitted and provide any legally required unsubscribe choice.

What your Member can see

The Member linked to your account can see the information needed to help with your consultation, brief, design feedback and order progress. DCA must configure access so a Member cannot view another Member’s customers or DCA’s internal supplier and network information. DCA staff access information according to their job responsibilities. A Member’s own network inviter should not automatically receive your identity or private design details merely because a commission may arise.

Who else receives it

We may share information necessary to fulfil an order with design and production partners, payment processors, delivery providers, technology and hosting providers, professional advisers and authorities when legally required. A production partner should receive only the information needed to make the piece. [Confirm supplier names or categories, countries of processing and cross-border disclosures before publication.] We do not sell your personal information.

Website analytics and cookies

The website may use essential cookies for login and security and, if enabled, analytics or marketing technologies. [Insert the actual tools, purposes, consent controls and cookie retention after a technical inventory.] Your browser may let you manage some cookies; disabling essential cookies can affect account functions.

Security and retention

We take reasonable steps to protect personal information through account controls and restricted staff access. [Confirm encryption, access logging, backup and provider arrangements before publication.] We keep information while needed for the purposes above and applicable legal, accounting, warranty and dispute requirements, then delete or de-identify it when appropriate. [Insert actual retention periods or clear criteria after the recordkeeping review.] No online service can guarantee absolute security; tell DCA promptly through the dashboard if you suspect account misuse.

Access, correction and complaints

You can request access to information DCA holds about you, ask us to correct inaccurate information, or raise a privacy complaint through the dashboard support icon. If dashboard access is unavailable, use [insert privacy contact]. We will verify identity where appropriate and respond in accordance with applicable law. If you remain dissatisfied, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.

Marketing choices

Operational messages about registration, quotes, payments, delivery and support are needed to provide the service. Marketing is separate. Where required, we obtain consent before sending marketing and include a working unsubscribe option. Unsubscribing from marketing does not stop essential order messages.

Updates to this policy

We may update this policy as the service changes. We will show the current version and effective date on our website and give an appropriate notice of material changes. This draft becomes effective only when approved and published.

Before publication

The privacy officer and developer must confirm the legal entity, contact channel for locked-out users, actual data fields, provider list and locations, cross-border handling, cookies, payment data, retention schedule, security controls and breach process. Review applicability of the Privacy Act and Australian Privacy Principles, and align customer consent and Member access with the implemented portal.