Terms of Use

Last updated: September 2, 2026

These Partner Data Processing Terms (“Data Terms”) form part of the agreement between Erishan Jewels Ltd. (“Erishan”) and an approved jewellery-business Partner (“Partner”) when the Partner uses Erishan’s Services to enter or manage information about its customers, leads, personnel, or business contacts (“Partner Data”).

1. Roles and scope

For Partner Data submitted and controlled by a Partner for Customer Mode, follow-up, selections, quotations, orders, tasks, notes, or related jewellery-business activity, the Partner determines the lawful business purpose and instructions. Erishan processes that data to provide, secure, support, and maintain the requested Services. Each party remains independently responsible for information it controls for its own account administration, fraud prevention, legal compliance, billing, security, and direct relationship purposes.

2. Partner instructions and responsibilities

The Partner instructs Erishan to process Partner Data only as needed to provide the enabled Services, comply with documented Partner actions, maintain security, and meet applicable law. The Partner must:

• have lawful authority to collect, disclose, and use Partner Data;

• provide required privacy notices and obtain any required consent;

• enter only data reasonably necessary for a legitimate jewellery-business purpose;

• keep records accurate and respect opt-out, correction, and deletion requests;

• limit access to authorized personnel and protect account credentials; and

• not submit sensitive information that the Services are not designed to handle.

3. Erishan obligations

Erishan will process Partner Data only for the Services, documented instructions, security, or legal requirements; require relevant personnel to protect confidentiality; maintain reasonable administrative, technical, and organizational safeguards; and not sell Partner Data or use it for unrelated advertising.

4. Tenant isolation and access

Partner Data is scoped to the authorized Partner company. Erishan uses company membership, role, session, and capability controls designed to prevent one Partner from accessing another Partner’s records. Authorized Erishan personnel may access Partner Data only where reasonably necessary for support, security, fulfilment, compliance, or service operation.

5. Subprocessors

Erishan may use hosting, storage, communications, security, payment, shipping, support, and AI/media providers where needed for an enabled feature. Erishan will require providers to protect the information and process it for the contracted service. Stripe, Shippo, HubSpot, carriers, and configured AI/media providers may act under their own terms for the specific service. Mobile-app Partner and customer data is not automatically synchronized into HubSpot marketing lists.

6. Security and incidents

Safeguards may include protected transport, access controls, company-scoped authorization, password hashing, expiring and revocable sessions, restricted media routes, audit records, and incident-response procedures appropriate to the Services. Each party will notify the other without undue delay after confirming a security incident affecting Partner Data where notice is required, and will reasonably cooperate on investigation and legally required communications.

7. Individual requests

The Partner is responsible for responding to requests from its customers and leads unless law assigns responsibility differently. Taking account of the nature of the processing, Erishan will provide reasonable available assistance with access, correction, deletion, restriction, objection, or portability requests. Erishan may verify authority and may preserve records required for orders, consent, security, disputes, accounting, or law.

8. Retention, return, and deletion

During the relationship, Partners can use available controls to manage current records. When the applicable service or relationship ends, Erishan will delete or de-identify eligible Partner Data within a reasonable period unless continued retention is required for an order, invoice, consent record, security event, legal claim, backup cycle, or other lawful purpose. Required records will be restricted to the permitted purpose. Deleting an individual Partner user account does not automatically delete the Partner company’s data or another person’s record.

9. International processing

Partner Data may be processed in Canada, the United States, India, or another location where Erishan or an approved provider operates. Where required, the parties will use an appropriate contractual or legal transfer mechanism and reasonable safeguards.

10. Information and review

On reasonable written request, Erishan will provide information reasonably necessary to demonstrate compliance with these Data Terms. Any review must protect security, confidentiality, other customers, and provider obligations; avoid unnecessary disruption; use existing independent reports where sufficient; and be limited to once annually unless a confirmed incident or law reasonably requires more.

11. Conflicts, liability, and term

These Data Terms apply while Erishan processes Partner Data for the Partner and survive as needed for retained records. If these Data Terms conflict with general Terms on the processing of Partner Data, these Data Terms control. The agreement’s applicable liability limits and governing-law terms apply unless data-protection law requires otherwise.

12. Contact

Privacy and data-processing questions: director@erishanjewels.com. Service support: sales@erishanjewels.com · +1 (365) 360-2982 · Support.