Privacy policy

VAVAGEMS (“the shop”) recognises the importance of personal data protection. This policy explains how the shop collects, uses, discloses and retains your personal data, and what rights you hold as a data subject under Thailand's Personal Data Protection Act B.E. 2562.

This website is a catalogue of gemstones. It has no member accounts, no shopping cart and no payment facility. Orders are discussed through the contact channels listed at the end of this policy.

Definitions

• Personal data means information relating to a person that enables that person to be identified, directly or indirectly, excluding information of a deceased person.
• Data controller means the person with authority to decide on the collection, use or disclosure of personal data; in this policy, the shop.
• Data subject means the person to whom the personal data relates; in this policy, you.

Personal data collected

The shop collects only such personal data as is necessary for the purposes stated in this policy, as follows.

• Identity and contact data, such as name, telephone number, email address, messaging-app account and delivery address.
• Transaction data, such as the gemstones you enquire about or order, and the delivery details.
• Technical data, such as IP address, date and time of access, pages requested and browser type, generated automatically in system logs.
• Search terms you enter in the search box, which are transmitted as part of the page address and may therefore appear in the system logs described above.

This website has no form for entering personal data, and does not collect sensitive personal data under section 26 of the Personal Data Protection Act B.E. 2562.

Because search terms are recorded as described above, please use the search box for gem names, SKU codes or carat weights only.

Sources of personal data

• Directly from you, when you contact the shop through a messaging app, by telephone, by email or through social media. Data you send through those channels is also subject to the privacy policy of the channel's own provider.
• Automatically from your use of the website, in the form of the system's technical logs.

Purposes of collection, use and disclosure

• To answer enquiries and provide information about the gemstones you are interested in.
• To fulfil orders, arrange delivery and honour the warranty.
• To arrange gemmological certification, only where you request it.
• To maintain the security of the system and prevent misuse.
• To comply with applicable legal obligations.

The shop relies on the legal bases of contractual necessity, legitimate interest and legal obligation, as the case may be.

The shop does not sell your personal data to third parties.

Disclosure of personal data

The shop may disclose your personal data, to the extent necessary, to the following.

• Information-system providers, namely the hosting and network providers that keep this website in service.
• Delivery service providers, limited to the recipient details required for delivery: name, address and telephone number.
• Gemmological laboratories, only where you request a certificate.
• Government agencies or authorities, where required by law or under a lawful order.

The website relies on providers whose servers may be located outside Thailand. Such use constitutes a transfer of personal data abroad, which the shop limits to what is necessary and carries out in accordance with the law.

Storage and retention

The shop stores your personal data in electronic form, and in paper form only where necessary.

The shop retains your personal data for as long as necessary to achieve the purposes stated in this policy, including the warranty period and any period required by law. Technical logs are retained on the providers' ordinary cycle. Once those periods end or the data is no longer needed, the shop deletes or destroys it, or renders it non-identifying.

Security measures

The shop maintains appropriate security measures, including encrypted transmission (HTTPS), access to the management system restricted to assigned staff, and no third-party resources loaded on visitor-facing pages.

Cookies and similar technologies

A cookie is a small piece of data saved onto your computer or device when you visit a website. The shop also refers to other technologies with a similar function as cookies.

Cookies are categorised by function as follows.

• Strictly necessary cookies are required for the website to function, for example signing in and verifying identity. You cannot disable them through the website.
• Analytic cookies record how the website is used, so that content and service can be measured and improved.
• Functional cookies remember settings or choices you have made, to make the website easier to use.
• Targeting cookies record usage in order to present content or advertising matched to your interests, which may be operated by outside providers as third-party cookies.

At present this website uses only strictly necessary cookies, and only for the shop staff's own login. The visitor-facing pages use no cookies, and no analytic, targeting or third-party cookies are in use yet.

This website counts usage of the “Gifts for someone special” and “Weddings, engagements and favours” pages as daily totals, so that the shop can see which part of the selection tool is used most. Only the date, the type of action and the option chosen are recorded. This counting uses no cookies and records no IP address, browser information or identifier of any kind that could identify a person or link separate visits together. It runs on the shop's own server; no data is sent to any outside provider.

In addition to the counting described in the preceding paragraph, this website counts usage of every page as daily totals. Only the date, the type of counter and its value are recorded: the address of the page opened, the first page you arrived at, the name of the referring website, advertising link tags (UTM), the type of device only as mobile or desktop, the host name you arrived through, the country you connect from at country level only, the gem code and category name viewed, the terms you enter in the search box, and actions on the page, namely saving a gem to view later, removing it from the list, opening the My Tray page and pressing a button through to the LINE application. The country is determined by matching the IP address against a table of address ranges held on the shop’s own server, and only the two-letter country code is recorded. This counting uses no cookies and records no IP address, browser information, time to the second, or identifier of any kind that could identify a person or link separate visits together. Addresses of pages carrying a code unique to you, such as video pages and shared tray pages, are recorded with that code removed. The counting runs on the shop's own server; no data is sent to any outside provider.

Some pages provide input fields for your convenience, such as the guest count and budget fields on the “Weddings, engagements and favours” page. What you type there is used only to compose a message that waits in your own LINE app. It is never sent to our server and is never stored. You can review and edit the message before sending it, and we receive it only if you choose to send it.

Should the shop begin using other categories of cookie in future, it will update this policy and obtain your consent beforehand as required by law.

Besides cookies, this website stores eight values on your device using the browser's Web Storage: one recording your cookie choices, where a consent banner is shown, one recording that you acknowledged the notice on the lucky-gem page, the gems you saved to view later, the gems you recently viewed, the tray you chose on the My Tray page, the table surface you chose, the listing page you had open before entering the My Tray page, and one recording that you collapsed the empty-slot row on the tray. None of these values is transmitted from your device.

The lucky-gem page accepts a name, date of birth and telephone number. All processing takes place inside your browser; that data is not sent to the shop's server and is not stored.

You can set your browser to refuse or delete cookies, and clear site data to remove the values described above.

Rights of the data subject

Under the Personal Data Protection Act B.E. 2562 you have the following rights.

• Right to withdraw consent — where you have given consent, you may withdraw it at any time.
• Right to access — you may request access to and a copy of your personal data held by the shop, and ask how it was obtained.
• Right to data portability — you may request your personal data in a machine-readable form and ask for it to be sent or transferred to another data controller.
• Right to object — you may object to the collection, use or disclosure of your personal data at any time.
• Right to erasure — you may request that your personal data be deleted, destroyed or made non-identifying.
• Right to restriction of processing — you may request that the use of your personal data be suspended temporarily.
• Right to rectification — you may request that your personal data be corrected so that it is accurate, current, complete and not misleading.
• Right to lodge a complaint — you may complain to the competent authority if you consider that the shop has not acted in accordance with the personal data protection law.

You may exercise these rights by contacting the shop through the channels below. The shop may ask you to verify your identity first, so that nobody else can exercise your rights in your name, and will notify you of the outcome within 30 days of receiving the request. Where the shop refuses a request, it will inform you of the reasons.

Changes to this policy

The shop may revise this policy to reflect changes in its services and in applicable law. The date of the most recent revision is shown at the top of this page.

Contact channels

The data controller under this policy, and the channels for exercising your rights or asking further questions.

VAVAGEMS
80/48 Moo 1, Tha It
Pak Kret, Nonthaburi 11120, Thailand
LINE @vavagems · +66 99 190 7575 · vavagems@gmail.com