1. Scope of This Privacy Policy

This Privacy Policy applies to information collected, used, disclosed, stored, or otherwise handled by Erishan Jewels Ltd. through or in connection with:

• Our website
• Website contact forms
• Wholesale catalogue request forms
• Business inquiry forms
• HubSpot or similar CRM records
• Email communications
• Phone communications
• Business messaging or communication tools
• Social media or website links submitted by you
• Catalogue access requests
• Product interest submissions
• Custom jewellery inquiries
• Loose diamond, gemstone, or sourcing inquiries
• Quote, order, invoice, payment, shipping, delivery, customs, or wholesale discussion records
• Customer relationship management records
• Other business communications connected to Erishan Jewels Ltd.

This Privacy Policy does not apply to third-party websites, social media platforms, payment providers, shipping providers, customs brokers, analytics platforms, email platforms, CRM providers, website hosting providers, cloud service providers, or other services that we do not own or control. Those third parties may have their own privacy policies, cookie practices, data processing terms, security practices, and legal responsibilities. We encourage you to review the privacy policies and terms of any third-party websites, platforms, or services you use.

This Privacy Policy is intended for website visitors, business contacts, wholesale inquiries, and business relationship communications. Employee, contractor, job applicant, or internal workforce privacy matters may be handled under separate notices, agreements, or internal policies where applicable.

2. About Erishan Jewels Ltd.

Erishan Jewels Ltd. is a wholesale-focused jewellery business serving retail jewellery partners, distributors, trade buyers, custom jewellery businesses, bridal specialists, e-commerce jewellery businesses, and other qualified business customers.

Our website is used to introduce our company, receive wholesale inquiries, review catalogue access requests, understand business needs, communicate with potential or approved wholesale partners, and support professional B2B jewellery discussions.

We do not operate this website as a public retail checkout store. Submitting a form, requesting catalogue access, or contacting us through this website does not automatically create a customer account, wholesale approval, credit approval, order approval, catalogue access right, supply commitment, or business relationship. Catalogue access, product discussions, pricing discussions, custom work, loose diamond discussions, payment terms, shipping terms, and order discussions are subject to review and written confirmation.

3. Privacy Accountability

Erishan Jewels Ltd. is responsible for personal information under its control. We aim to handle personal information in a responsible manner and to maintain reasonable privacy practices appropriate for our business, website, CRM systems, inquiry process, service providers, and wholesale communication activities.

Erishan Jewels Ltd. has appointed a designated Privacy Officer who is accountable for our privacy policies and practices. Privacy-related questions, access requests, correction requests, consent withdrawal requests, unsubscribe requests, deletion requests, data portability requests, privacy complaints, and other privacy concerns may be directed to the Privacy Officer using the contact information listed at the bottom of this Privacy Policy.

We maintain internal practices intended to support responsible privacy management, including limiting access to business records, using service providers with appropriate safeguards, reviewing how personal information is handled, and responding to privacy-related requests and concerns.

If Erishan Jewels Ltd. uses service providers to support website forms, CRM records, email communications, analytics, hosting, shipping, payment, accounting, or related business operations, those service providers may process information on our behalf. We remain responsible for using reasonable care when selecting and working with service providers that handle information connected to our business.

4. Privacy Governance and Internal Access

Erishan Jewels Ltd. may limit access to personal information to owners, employees, contractors, representatives, service providers, professional advisors, or authorized business personnel who reasonably need access for business, operational, legal, compliance, service, security, accounting, tax, customs, audit, insurance, fraud prevention, dispute prevention, or customer relationship purposes.

Individuals and service providers with access to information are expected to handle it responsibly and only for purposes connected to their role, service, or business need. We may review, update, or restrict access to systems, CRM records, email accounts, business software, documents, and communication records where appropriate.

Where required by applicable law, our privacy governance practices may include policies or procedures regarding the collection, use, disclosure, retention, protection, destruction, anonymization, access, correction, complaint handling, confidentiality incidents, service-provider processing, cross-border processing, and internal roles and responsibilities connected to personal information.

5. Information We May Collect

We may collect information that you choose to provide directly to us, information generated through business communications, and limited technical information collected when you use our website. The exact information collected may depend on how you interact with our website, what forms you submit, what information you provide, what services or software we use, and what business discussions occur.

Information submitted through forms

When you submit a wholesale catalogue request, contact form, business inquiry form, or similar website form, we may collect:

• First name and last name
• Company name and business name
• Job title or role
• Email address and phone number
• Website or social media page
• Business address or mailing address, if provided
• City, province/state, and country
• Business type
• Product, catalogue, and jewellery category interests
• Custom jewellery requirements
• Loose diamond, gemstone, or sourcing requirements
• Quantity or order interest details
• Message details and any other information you choose to include

Business inquiry and relationship information

We may collect information related to your wholesale inquiry, potential business relationship, or approved wholesale relationship, including:

• Product categories of interest
• Catalogue request details
• Custom jewellery needs and loose diamond/gemstone requirements
• Bridal, retail, wholesale, or trade supply interests
• Order, quote, and payment term discussion details
• Shipping, delivery, customs, or logistics discussion details
• Trade references, business verification records, credit or payment review information, payment history, invoice history, approved payment terms, declined payment terms, and relationship-tier information where applicable
• Communication history with our team and relationship history with Erishan Jewels Ltd.
• Inquiry review notes, catalogue access review notes, and business suitability notes
• Internal notes related to follow-up, service, or business communication

Shipment, Insurance, and Claim Information

We may collect shipment issue records, delivery records, packaging photos, damage photos or videos, carrier communications, insurance claim documents, return authorization records, and related evidence where needed to review shipment, damage, loss, return, repair, replacement, or claim matters.

Website and technical information

When you visit our website, we may collect limited technical information, including:

• IP address
• Browser type, device type, and operating system
• Referring page or source
• Pages visited, approximate location, and date/time of visit
• Website and form interaction data
• Cookie or tracking technology data
• Analytics or performance data

This information may be collected directly by our website, through HubSpot or similar website tools, through analytics tools, through cookies, or through similar technologies.

Business contact information

Some information submitted to us may be business contact information, such as your name, business email address, business phone number, title, company name, business address, professional website, or social media business page. We use business contact information to communicate with you about your company, wholesale inquiry, catalogue request, product interests, order discussions, or business relationship with Erishan Jewels Ltd.

Information from third-party or public business sources

In some cases, we may review or collect business-related information from public or third-party sources for legitimate business purposes, such as reviewing a company website, business social media page, public business listing, trade profile, or other publicly available business information. This may help us understand whether a catalogue request or wholesale inquiry appears suitable for our business.

Sensitive information

Our website forms are intended for business and wholesale inquiry purposes. Please do not submit sensitive personal information through our website forms unless we specifically request it.

Sensitive information may include government identification numbers, financial account details, personal health information, birth dates, personal family information, personal passwords, or other information not required for a wholesale jewellery inquiry. If sensitive information is submitted unnecessarily, we may delete it, ignore it, or retain it only if needed for legal, security, fraud prevention, dispute prevention, compliance, or business record purposes.

6. Why We Collect Information

Erishan Jewels Ltd. collects information for specific and reasonable business purposes connected to our website, wholesale inquiry process, catalogue review process, CRM management, communication, legal compliance, and business operations.

We may collect information to:

• Receive and review wholesale catalogue requests and respond to business inquiries
• Understand your company, business type, and product interests
• Review whether your request is suitable for wholesale support and catalogue access
• Provide catalogue direction or product discussion where appropriate
• Communicate about jewellery categories, custom requests, loose diamonds, gemstones, quotations, payment terms, shipping, or partner opportunities
• Organize customer relationship records in our CRM and maintain records of inquiries and business discussions
• Support quote preparation, order discussion, payment discussion, shipping discussion, and business follow-up
• Improve our website, forms, communication process, and user experience
• Understand website performance and visitor engagement
• Protect our website, systems, business, and users from spam, misuse, fraud, unauthorized activity, or security threats
• Protect our legal, financial, and business interests
• Comply with legal, regulatory, accounting, tax, customs, audit, insurance, or business record requirements

We do not collect information through this website for public retail checkout purposes. Information submitted through this website is used for professional B2B jewellery inquiry review and related business communication.

7. Limiting Collection

Erishan Jewels Ltd. aims to collect only the information reasonably necessary for the purposes described in this Privacy Policy.

We do not intentionally request information that is unnecessary for wholesale inquiry review, catalogue access, business communication, website operation, CRM management, legal compliance, security, fraud prevention, dispute prevention, or legitimate business purposes. You should avoid submitting information that is not relevant to your wholesale inquiry, catalogue request, business communication, product interest, or relationship with Erishan Jewels Ltd.

8. How We Use Your Information

Erishan Jewels Ltd. may use collected information for the following purposes:

• To receive, organize, review, and evaluate wholesale catalogue requests and business inquiries
• To understand your company, business type, location, and product interests
• To verify or better understand business information submitted through forms
• To provide catalogue direction or product discussion where appropriate
• To communicate about rings, bridal jewellery, earrings, pendants, chains, bracelets, bangles, custom jewellery, loose diamonds, gemstones, sourcing requests, quotations, payment terms, shipping terms, and partner opportunities
• To manage contact records, company records, inquiry records, and communication history in our CRM
• To maintain records of inquiries, discussions, approvals, declined requests, follow-ups, and business communications
• To support quote preparation, order discussion, invoice discussion, payment discussion, shipment discussion, delivery coordination, and business follow-up
• To provide information about our wholesale process, product categories, catalogue access, or business requirements
• To improve our website, forms, internal review process, communication process, and user experience
• To measure website performance, visitor activity, and engagement with our pages
• To protect our website, CRM, email systems, business records, and communications from spam, misuse, fraud, unauthorized activity, security threats, or unlawful activity
• To enforce our website terms, payment terms, shipping terms, order terms, catalogue access rules, or written agreements where applicable
• To protect our legal, financial, operational, and business interests
• To comply with legal, regulatory, accounting, tax, customs, audit, insurance, security, or business record requirements

We do not use information submitted through this website to operate a public retail checkout process. Information submitted through this website is used for professional B2B jewellery inquiry review, wholesale communication, catalogue review, and related business purposes.

9. Business Verification, Fraud Prevention, and Security Review

Erishan Jewels Ltd. may review submitted information, public business details, website links, social media pages, trade information, communication history, and other business-related details to help assess whether a wholesale inquiry, catalogue request, custom jewellery request, loose diamond request, quote discussion, or order discussion appears legitimate and suitable for our business.

We may use information to prevent, detect, investigate, or respond to spam, fraud, misrepresentation, unauthorized catalogue access, misuse of our website, misuse of our product information, suspicious inquiries, payment risk, shipping risk, security threats, unlawful activity, or attempts to access business-sensitive information without authorization.

We may decline, limit, delay, or stop responding to inquiries where we believe it is appropriate to protect Erishan Jewels Ltd., our systems, our customers, our suppliers, our products, our catalogue, our pricing, our designs, or our business interests.

10. Anti-Money Laundering, Sanctions, and Business Verification

Where applicable to our activities and required by Canadian or other applicable law, Erishan Jewels Ltd. may collect, use, verify, retain, or disclose information to support anti-money-laundering compliance, sanctions screening, fraud prevention, payment-risk review, customs requirements, import or export compliance, accounting, tax, or business verification.

Depending on the nature of the inquiry, transaction, payment method, order value, product category, destination, or business relationship, this information may include business registration details, trade references, corporate information, beneficial ownership information, authorized representative details, identity verification information, transaction records, payment records, shipping records, customs records, source-of-funds information, business relationship information, source-of-business relationship information where applicable, and other information reasonably required to verify a business customer, review risk, comply with legal obligations, or protect Erishan Jewels Ltd.

Erishan Jewels Ltd. may decline, delay, limit, suspend, or refuse catalogue access, order discussions, payment processing, shipment, or business activity where information is incomplete, inconsistent, suspicious, unverifiable, or where required to comply with legal, regulatory, sanctions, anti-money laundering, fraud prevention, customs, payment, or business risk requirements. The type and amount of verification required will depend on the transaction, payment method, order value, product category, destination, business relationship, and the legal obligations applicable to Erishan Jewels Ltd. at that time.

11. Catalogue Access and Business-Sensitive Information

Catalogue access, pricing discussions, product images, custom jewellery discussions, loose diamond requests, gemstone sourcing requests, CAD-related communications, design references, order discussions, supplier-related information, manufacturing-related information, and business relationship details may include business-sensitive or confidential information.

Erishan Jewels Ltd. may use information submitted through catalogue requests and business communications to review whether catalogue access, pricing discussions, product discussions, or wholesale support should be provided. We may also keep records of catalogue access decisions, declined requests, approved requests, business suitability notes, communication history, and related follow-up.

Submitting a catalogue request does not guarantee catalogue access, pricing access, credit approval, order approval, custom work approval, loose diamond sourcing, product availability, or a business relationship. We may refuse, limit, suspend, or revoke catalogue access where appropriate to protect our business, suppliers, products, pricing, designs, customers, systems, or commercial interests.

Custom jewellery requests, CAD files, sketches, design references, product images, supplier information, manufacturing details, and catalogue materials may be confidential, proprietary, or commercially sensitive. Erishan Jewels Ltd. may use and retain related communications and files to review feasibility, prepare quotes, manage production discussions, protect commercial interests, prevent misuse, and maintain business records.

12. Consent and Legal Permission

Where required by applicable law, Erishan Jewels Ltd. collects, uses, and discloses personal information with your consent or as otherwise permitted or required by law.

Consent may be provided directly when you:

• Submit a website form
• Request wholesale catalogue access
• Send us an email or contact our team
• Provide business contact information
• Check a consent box or subscribe to communications
• Respond to our communications or continue a business discussion with us
• Provide information for quote, order, payment, shipping, or wholesale review purposes

Consent may also be implied where permitted by law, such as when you provide information for the purpose of receiving a response to your wholesale inquiry, catalogue request, business request, quote discussion, order discussion, or service-related communication.

Where applicable law requires express consent, including for certain sensitive information, profiling technologies, marketing communications, or other specific uses, we will seek consent in the manner required by applicable law.

You may withdraw consent where applicable, subject to legal, contractual, security, accounting, tax, customs, audit, insurance, fraud prevention, dispute prevention, and business record requirements. Withdrawal of consent may limit our ability to respond to your inquiry, provide catalogue access, continue business discussions, process a request, prepare a quote, support an order discussion, or maintain a business relationship.

13. Your Privacy Rights

Subject to applicable legal, contractual, security, fraud prevention, dispute prevention, and business record exceptions, and depending on your jurisdiction, you may have rights regarding your personal information.

These rights may include:

• Right to access: You may request access to personal information we hold about you and ask how it is collected, used, disclosed, stored, protected, or processed.
• Right to correction or rectification: You may request that inaccurate, incomplete, or outdated personal information be corrected or updated.
• Right to withdraw consent: You may withdraw consent to certain collection, use, or disclosure of personal information, subject to legal, contractual, security, accounting, tax, customs, audit, insurance, fraud prevention, dispute prevention, and business record requirements.
• Right to deletion: You may request deletion of certain personal information, subject to applicable legal and business record requirements.
• Right to de-indexation or re-indexation: Where applicable law provides this right, you may request that certain information be de-indexed, re-indexed, or that dissemination of certain information cease, subject to applicable conditions and exceptions.
• Right to data portability: Where applicable law provides this right, you may request a copy of certain computerized personal information collected from you in a structured, commonly used technological format.
• Right to ask about service providers and cross-border processing: You may ask questions about our use of service providers and whether information may be processed outside your province, state, or country.
• Right to complain: You may raise a privacy concern with us or, where applicable, with a privacy regulator.

To make a privacy-related request, contact our Privacy Officer using the contact details listed at the bottom of this Privacy Policy.

We may need to verify your identity, business relationship, or authority before responding to certain requests. We aim to respond to privacy-related requests within the timelines prescribed by applicable privacy laws, generally within 30 days, subject to extensions or exceptions permitted by law.

We may decline, limit, or delay certain requests where permitted or required by law, including where information must be retained for legal, contractual, security, accounting, tax, customs, audit, insurance, fraud prevention, dispute prevention, or business record purposes. If you withdraw consent or request deletion of information, we may not be able to continue responding to your inquiry, provide catalogue access, maintain wholesale discussions, process business requests, support order discussions, or continue certain communications.

14. HubSpot Forms, CRM, and Business Software

Erishan Jewels Ltd. may use HubSpot or similar business software to host website forms, receive wholesale inquiries, manage contact records, organize company records, track communication history, support customer relationship management, and review website activity.

When you submit a form on our website, your information may be stored in HubSpot or a similar CRM system and used by our team to review your inquiry, respond to your request, manage communication, maintain business records, and support appropriate follow-up.

HubSpot or similar tools may help us:

• Receive form submissions and store contact/company records
• Track communication history and manage catalogue request follow-up
• Understand website activity and manage email communication
• Organize sales or wholesale inquiry pipelines
• Record consent preferences where applicable
• Maintain business records connected to inquiries or relationships

Our forms may include privacy notices, consent language, or optional communication preferences explaining how your information will be used. By submitting a form, you acknowledge that Erishan Jewels Ltd. may process your submitted information to review and respond to your inquiry.

HubSpot or similar providers may process information on our behalf as service providers. Their processing may be subject to their own platform terms, data processing terms, security measures, privacy practices, and storage locations.

If we use HubSpot tracking, forms, email tools, analytics, or CRM features, certain website or contact activity may be associated with your contact record where permitted by law and depending on your consent settings, browser settings, cookie settings, and how our HubSpot account is configured. HubSpot provides privacy and consent tools, including consent banners and data privacy settings. These tools must be configured based on the website owner’s needs and applicable legal requirements.

15. Automation, CRM Workflows, Artificial Intelligence, and Business Review Tools

Erishan Jewels Ltd. may use CRM tools, website tools, workflow automation, email tools, analytics tools, form tools, task management tools, artificial intelligence tools, or similar business software to organize inquiries, route communications, manage follow-up, review wholesale catalogue requests, maintain records, and support business operations.

These tools may help us sort inquiries, identify product interests, track communication status, organize follow-up tasks, record consent preferences, understand website engagement, summarize business communications, assist with draft communications, or support internal business review.

We do not use website form submissions to make automatic legal, credit, financial, or order approval decisions without appropriate business review. Catalogue access, pricing discussions, payment terms, custom jewellery work, loose diamond sourcing, and order-related matters remain subject to review and written confirmation.

If we use artificial intelligence, automation, or similar tools to help draft communications, summarize inquiries, organize business records, review product interests, or support internal workflow, we intend to use those tools in a business-appropriate manner and subject to applicable privacy, confidentiality, security, and service-provider requirements.

Where applicable law requires notice or rights related to decisions based exclusively on automated processing of personal information, we will provide such notice and rights in accordance with applicable law.

16. Cookies, Profiling, and Website Tracking

Our website may use cookies, pixels, tracking codes, analytics tools, marketing pixels, or similar technologies to operate the website, support form functionality, understand visitor activity, improve website performance, measure engagement with our pages, and support business communication.

Essential cookies or similar technologies that are strictly necessary for website operation, security, form functionality, fraud prevention, consent management, or basic service delivery may remain active because they are needed for the website to function properly.

Where required by applicable law and supported by our consent tools, non-essential analytics, marketing, and profiling technologies are activated only after the visitor provides the required consent.

For the purposes of this Privacy Policy, profiling may include the collection and use of personal information to assess, analyze, or understand characteristics, preferences, interests, behaviour, website activity, or business inquiry activity.

Cookies and tracking tools may help us understand:

• Which pages are visited and how visitors interact with the website
• Whether forms and content are working properly and how visitors reach our website
• Approximate visitor location, device, and browser information
• Website performance issues
• Whether business communications or campaigns are effective and how the website can be improved

Types of cookies or tracking technologies may include:

• Essential cookies required for basic website function
• Preference cookies that remember certain settings
• Analytics cookies that help us understand website activity
• Marketing or measurement cookies that may support business communication, campaign analysis, or follow-up

Where our website displays a cookie banner, visitors may accept, decline, or manage available cookie preferences through that tool. Visitors may also be able to manage cookies through browser settings or device settings. If you block or disable certain cookies, some website features, forms, tracking preferences, embedded tools, or communication features may not work as intended.

We may update our cookie and tracking practices as our website, HubSpot configuration, analytics tools, advertising tools, or business communication tools change.

17. Marketing and Business Communications

If you submit a wholesale inquiry, request catalogue access, subscribe to communications, communicate with us, or continue a business discussion with Erishan Jewels Ltd., we may contact you about:

• Your inquiry and catalogue access
• Product categories and jewellery styles
• Custom jewellery discussions
• Loose diamond or gemstone discussions
• Quote, payment term, shipping, or delivery discussions
• Order-related matters and wholesale partner opportunities
• Relevant business updates and related business matters connected to your inquiry or relationship with us

Where required by applicable law, we will seek consent before sending marketing communications. Where required by Canada’s Anti-Spam Legislation (CASL) or other applicable law, commercial electronic messages will include required sender identification information and an unsubscribe mechanism.

You may unsubscribe from marketing emails or ask us to stop sending non-essential communications. Any unsubscribe mechanism included in a commercial electronic message will be designed to be clear, simple, and available for the period required by applicable law. We will process unsubscribe requests without delay and no later than 10 business days after the request is received, or within any shorter period required by applicable law.

Transactional, inquiry-related, service-related, relationship-related, legal, security, order-related, payment-related, shipping-related, or business-record communications may still be sent when necessary to respond to your request, manage a business discussion, provide catalogue-related information, provide order-related information, comply with legal obligations, or maintain required business records.

18. How We May Share Information

Erishan Jewels Ltd. does not sell personal information. We do not rent personal information. We do not share personal information with unrelated third parties for their own independent marketing purposes without consent where required by law.

We may share information only where reasonably necessary for business, operational, legal, regulatory, security, or service-related purposes. We may share information with:

• CRM and form service providers
• Website hosting and website service providers
• Email and business communication providers
• Analytics or website performance tools
• Technology, cloud storage, security, or administrative service providers
• Professional advisors such as lawyers, accountants, bookkeepers, consultants, auditors, or compliance advisors
• Payment, invoicing, accounting, banking, or collection service providers where applicable
• Shipping, delivery, logistics, customs, brokerage, insurance, or order-related service providers where applicable
• Jewellery manufacturing, sourcing, or supply-related business partners where necessary for a specific inquiry, quote, custom request, loose diamond request, gemstone request, or order discussion
• Government, regulatory, customs, tax, law enforcement, court, or legal authorities when required or permitted by law
• Other parties with your consent or as permitted or required by applicable law

Service providers are expected to use information only for the services they provide to us and to apply appropriate safeguards. Where information is shared with service providers, those providers may process or store information in Canada or in other jurisdictions.

19. Service Providers and Processing on Our Behalf

Erishan Jewels Ltd. may use third-party service providers to support website operations, CRM management, email communication, analytics, hosting, cloud storage, security, accounting, legal support, payment support, shipping support, customs support, or business administration.

These providers may access, process, store, or handle information only as reasonably necessary to provide services to us, support our business, comply with legal requirements, or protect their own systems and legal rights.

We aim to work with service providers that apply reasonable safeguards appropriate to the type of information they handle. However, we do not control every third-party platform, system, or service provider. Their use of information may also be governed by their own contracts, policies, platform terms, data processing terms, and legal obligations.

Where required by applicable law, we may use written agreements, service-provider terms, data processing terms, confidentiality obligations, security requirements, or other safeguards to support appropriate handling of personal information by service providers.

20. Legal, Regulatory, and Business Disclosures

We may collect, use, retain, or disclose information where we believe it is reasonably necessary to:

• Comply with applicable laws, regulations, court orders, subpoenas, legal processes, or lawful requests
• Respond to government, customs, tax, regulatory, law enforcement, or legal authorities
• Protect the rights, property, safety, security, or business interests of Erishan Jewels Ltd.
• Prevent, detect, investigate, or respond to fraud, misuse, unauthorized activity, security issues, or unlawful activity
• Enforce website terms, business terms, payment terms, shipping terms, invoices, purchase orders, catalogue access conditions, or written agreements
• Support accounting, tax, audit, insurance, customs, legal, compliance, or business recordkeeping requirements
• Establish, exercise, or defend legal claims
• Screen, review, or respond to sanctions, restricted-party, import/export, customs, anti-money laundering, fraud prevention, or trade compliance concerns where applicable
• Protect users, business partners, service providers, or others where legally permitted or required

21. Storage, Processing, and Cross-Border Transfers

Some of our service providers, including website, CRM, email, analytics, cloud, communication, security, hosting, or business software service providers, may store or process information outside your province, state, or country of residence. As a result, information may be subject to the laws of the jurisdiction where it is stored or processed. By submitting information through our website or communicating with us, you understand that your information may be processed by service providers in other jurisdictions for the purposes described in this Privacy Policy.

Where Quebec privacy law applies, before communicating personal information outside Quebec, or before entrusting a service provider outside Quebec with the collection, use, communication, storage, or handling of personal information on our behalf, Erishan Jewels Ltd. conducts a reasonable privacy impact assessment or similar privacy review.

This review may consider the sensitivity of the information, the purposes for which it is used, applicable safeguards, contractual protections, service-provider practices, and the legal framework of the jurisdiction where the information may be processed. Where required by applicable law, cross-border processing may be subject to written agreements, service-provider terms, data processing terms, confidentiality obligations, security requirements, or other measures intended to support adequate protection of personal information.

22. International Visitors

Although Erishan Jewels Ltd. is a Canadian business, website visitors and business inquiries may come from outside Canada. If you access our website, submit a form, request catalogue access, or communicate with us from outside Canada, you understand that your information may be collected, processed, stored, or handled in Canada or in other jurisdictions where our service providers operate.

If you are located outside Canada, additional privacy rights may apply under the laws of your jurisdiction. You may contact us using the contact information below if you have privacy-related questions. Erishan Jewels Ltd. does not represent that this Privacy Policy fully satisfies the laws of every country or region. If Erishan Jewels Ltd. actively targets or serves customers in another jurisdiction, additional privacy terms, consent tools, or legal notices may be required. If required, we may provide additional privacy notices, consent options, or rights-request processes for individuals in specific jurisdictions.

23. Quebec and Other Canadian Jurisdictions

If you are located in Quebec or another Canadian province with additional privacy requirements, you may have rights under applicable provincial privacy laws. Where required by applicable law, Erishan Jewels Ltd. will handle privacy requests, consent, access, correction, retention, service-provider processing, confidentiality incidents, and privacy complaints in accordance with applicable legal requirements.

Where Quebec privacy law applies, this Privacy Policy is intended to provide clear information about our personal information practices for website visitors and business contacts. Erishan Jewels Ltd. has appointed a designated Privacy Officer for privacy-related questions, requests, and complaints. Privacy-related requests may be directed to the Privacy Officer using the contact information listed at the bottom of this Privacy Policy.

If our business activities, website practices, cookie tools, CRM tools, marketing practices, service providers, or target markets change, we may update this Privacy Policy, consent tools, forms, privacy notices, or internal practices to reflect applicable legal requirements.

24. Data Retention, Destruction, and Anonymization

Erishan Jewels Ltd. keeps information only for as long as reasonably necessary for the purposes described in this Privacy Policy. Retention periods may depend on the type of information, the purpose for which it was collected, the nature of the business relationship, applicable legal requirements, accounting requirements, tax requirements, customs requirements, audit requirements, insurance requirements, fraud prevention needs, dispute prevention needs, and legitimate business purposes.

We may retain information for purposes including:

• Inquiry review and catalogue access review
• Business communication and customer relationship management
• Quote, order, and payment discussions
• Shipping or delivery discussions
• Customs or import/export records where applicable
• Accounting and tax records
• Legal compliance, fraud prevention, and security review
• Dispute prevention and business recordkeeping

If your inquiry does not move forward, we may still retain basic communication and form submission records for a reasonable period in order to manage business records, prevent duplicate inquiries, maintain compliance, and protect our business.

If you become a wholesale partner, submit an order inquiry, request custom work, request loose diamonds, begin payment discussions, or enter into order-related discussions, certain information may be kept longer where needed for business records, payment records, tax records, shipping records, customs records, accounting records, legal records, insurance records, or dispute prevention.

Once the applicable retention period expires, or when personal information is no longer legally, commercially, or operationally necessary for the purposes for which it was collected, Erishan Jewels Ltd. will take reasonable steps to securely destroy the information or permanently anonymize it in accordance with generally accepted best practices and applicable legal standards.

25. Accuracy of Information

Erishan Jewels Ltd. relies on you to provide accurate, complete, and current information when submitting a wholesale inquiry, catalogue request, business communication, quote discussion, order discussion, payment discussion, or shipping-related information.

If your business contact details, company information, product interests, order discussion details, or inquiry information changes, you may contact us to request correction or update of your information. We may take reasonable steps to keep information accurate, complete, and up to date where it is used for ongoing business communication, catalogue access review, wholesale relationship management, order discussion, legal compliance, or business record purposes.

26. Security Safeguards

Erishan Jewels Ltd. uses reasonable physical, administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, disclosure, copying, alteration, or destruction.

These safeguards may include:

• Limiting access to business records and managing access to CRM and business software
• Using service providers with security controls
• Protecting business accounts and reviewing how information is handled internally
• Maintaining appropriate business record practices
• Using reasonable password, access, and account controls
• Limiting access to information to people or service providers who need it for business purposes
• Using appropriate confidentiality, contractual, or service-provider safeguards where applicable

However, no website, form, email, CRM, cloud system, communication tool, storage system, or internet transmission method is completely secure. We cannot guarantee absolute security, but we work to handle information responsibly and limit access to those who need it for business, operational, legal, compliance, or service-related purposes. You should avoid sending sensitive or unnecessary personal information through website forms, email, or unsecured communication channels.

27. Confidentiality Incidents and Data Breaches

If Erishan Jewels Ltd. becomes aware of a confidentiality incident, privacy incident, or data breach involving personal information under our control, we will review the incident, assess potential risk, take reasonable steps to reduce harm, and respond according to applicable legal requirements.

A confidentiality incident may include unauthorized access to personal information, unauthorized use of personal information, unauthorized disclosure of personal information, loss of personal information, or another breach of the protection of personal information.

Where a breach of security safeguards creates a real risk of significant harm, or where a confidentiality incident presents a risk of serious injury, Erishan Jewels Ltd. will notify affected individuals and report the incident to the Office of the Privacy Commissioner of Canada, the Commission d’accès à l’information du Québec, or another applicable regulator, as required by law.

We may also notify service providers, business partners, insurers, professional advisors, law enforcement, or other relevant parties where necessary or appropriate to reduce harm, investigate the incident, comply with legal obligations, preserve evidence, improve safeguards, or protect legal and business interests.

Erishan Jewels Ltd. maintains records or a register of confidentiality incidents, privacy incidents, or breaches where required or appropriate for legal, security, compliance, insurance, audit, or business purposes. Where PIPEDA applies, breach records will be retained for at least 24 months or for any longer period required by applicable law. We may also take steps to investigate the incident, reduce the risk of harm, prevent similar incidents, preserve evidence, consult professional advisors, communicate with service providers, and improve safeguards where appropriate.

28. Unsubscribing From Marketing Communications

Where Erishan Jewels Ltd. sends marketing or promotional business communications by email or other electronic message, those communications may include an unsubscribe option where required by law. You may unsubscribe from marketing communications by using the unsubscribe mechanism provided in the message or by contacting us directly.

Even if you unsubscribe from marketing communications, we may still send transactional, inquiry-related, service-related, legal, security, order-related, payment-related, shipping-related, or business-record communications where necessary or permitted by law.

29. Complaints and Questions

If you have a concern about how Erishan Jewels Ltd. handles information, please contact our Privacy Officer first so we can review and respond to your concern. We may ask for information needed to understand your request, verify your identity or business relationship, investigate the concern, and respond appropriately.

We aim to respond to privacy complaints and privacy-related requests within the timelines prescribed by applicable privacy laws, generally within 30 days, subject to extensions or exceptions permitted by law. If you are not satisfied with our response, you may have the right to contact the applicable privacy regulator in your jurisdiction.

30. Privacy Regulators

If you are not satisfied with our response to a privacy concern, you may have the right to contact the privacy regulator in your jurisdiction. For Canadian federal private-sector privacy matters, this may include the Office of the Privacy Commissioner of Canada. For Quebec privacy matters, this may include the Commission d’accès à l’information du Québec. Depending on your province, location, or applicable law, another provincial, territorial, or international privacy authority may also be relevant.

31. Children’s Privacy

Erishan Jewels Ltd. operates a business-to-business wholesale website. Our website, forms, catalogue-access process, and services are not intended for children or minors.

We do not knowingly request or collect personal information from minors through our wholesale inquiry forms.

Where Quebec privacy law applies, personal information concerning a minor under 14 years of age will not be collected directly from the minor without the consent required by law, unless the collection is otherwise legally permitted.

If we become aware that a minor has submitted personal information through the website, we may delete or restrict that information unless retention or other handling is required or permitted by law.

32. Links to Other Websites

Our website may contain links to third-party websites, platforms, or services. We are not responsible for the privacy practices, content, policies, cookies, tracking tools, security, or data handling practices of third-party websites or services. We encourage visitors to review the privacy policies and terms of any third-party websites, platforms, or services they visit.

33. Social Media and External Platforms

If you interact with Erishan Jewels Ltd. through social media platforms, external websites, messaging tools, review platforms, business directories, or third-party platforms, your use of those platforms may be governed by their own privacy policies, terms, cookies, tracking tools, and data practices.

We are not responsible for how third-party platforms collect, use, disclose, store, process, transfer, or protect your information. Information you make public on social media or third-party platforms may be visible to others depending on your account settings and the platform’s rules.

34. Business Transfers

If Erishan Jewels Ltd. is involved in a business transaction such as a merger, acquisition, restructuring, financing, sale of assets, transfer of operations, partnership transaction, investment review, due diligence process, or similar business event, information may be reviewed, disclosed, transferred, or retained as part of that transaction where permitted by law and subject to appropriate confidentiality, contractual, or legal safeguards.

Any successor or related party may continue to use information in accordance with this Privacy Policy unless otherwise required by law or unless a new privacy policy is provided.

35. Changes to This Privacy Policy

Erishan Jewels Ltd. may update this Privacy Policy from time to time to reflect changes in our business, website, technology, service providers, legal requirements, privacy practices, cookie settings, CRM systems, marketing practices, or business operations.

The updated version will be posted on this page with a revised “Last updated” date. Your continued use of the website, submission of information, or continued communication with us after an updated Privacy Policy is posted means the updated version applies going forward, where permitted by applicable law. Where an update introduces a materially new purpose for collecting, using, or disclosing personal information, Erishan Jewels Ltd. will provide additional notice or obtain consent where required by applicable law.

36. Contact Our Privacy Officer

Erishan Jewels Ltd. has designated a Privacy Officer who is accountable for our privacy policies and practices. For privacy-related questions, access requests, correction requests, deletion requests, consent-withdrawal requests, unsubscribe requests, complaints, or other privacy concerns, contact: 

• Company: Erishan Jewels Ltd.
• Contact Name: Privacy Officer
• Title: Privacy Officer
• General Company Email: sales@erishanjewels.com
• Phone: +1 (365) 360-2982
• Business Mailing Address: 287 Buttonbush St, Waterloo, ON N2V 0B2, Canada
• Country: Canada

When contacting us, please provide enough information for us to understand your request and locate the relevant records. We may need to verify your identity, business relationship, or authority before responding. We aim to respond within the timelines required by applicable privacy laws, generally within 30 days, subject to legally permitted extensions or exceptions.