Legal
Privacy Policy
Last updated: June 2026
At Sapphire Story, your privacy is important to us. This policy explains how we collect, use, and protect your personal information when you use our website or services. We are committed to handling your data with the same integrity that defines our approach to gemstone trade.
1. Information We Collect
We collect information you provide directly: name, email address, phone number, shipping address, and payment details. We also collect browsing data such as pages visited, time on site, and device information through cookies. For bespoke jewelry commissions, we may collect design preferences and communication history.
2. How We Use Your Information
We use your information to process orders, send order confirmations and shipping updates, respond to enquiries, provide bespoke jewelry design consultations, and (with your consent) send marketing communications about new gem arrivals and exclusive offers.
3. Sharing of Information
We do not sell your personal data. We share information only with trusted third parties necessary to operate our business: payment processors (PayHere), shipping carriers (DHL, FedEx), gem laboratory partners (GIA, GRS, AGL, Gübelin), and email service providers. All third parties are contractually bound to keep your data secure.
4. Data Security
All data is transmitted over SSL-encrypted connections. Payment information is processed by PCI-DSS compliant payment processors and is never stored on our servers. Our website and systems are regularly reviewed for vulnerabilities.
5. Cookies
We use cookies to maintain your session, remember your cart, and analyse site traffic. You can manage cookie preferences through the cookie banner on your first visit. See our Cookie Policy for full details on the types of cookies we use.
6. Your Rights
You have the right to access, correct, or request deletion of your personal data at any time. You may also object to marketing communications or request a copy of all data we hold about you. To exercise these rights, contact us at info@thesapphirestory.com. We will respond within 30 days.
7. Data Retention
We retain customer data for as long as necessary to provide our services and comply with legal obligations. Order records are retained for 7 years in accordance with accounting regulations. You may request earlier deletion of personal data not required for legal compliance.
8. International Transfers
As an international gem and jewelry company, your data may be processed in countries outside Sri Lanka when fulfilling international orders or communicating with our global sourcing partners. We ensure all transfers comply with applicable data protection laws.
9. Contact
For privacy-related enquiries, contact us at info@thesapphirestory.com or via WhatsApp at +94 72 101 5510. Our registered address is 414/A, Leyland Road, Panagoda, Sri Lanka.