Privacy Policy

Effective Date: 10 December 2025

Heart In Diamond (“Company,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information we receive from customers, website visitors, leads, and other individuals who interact with our business. This Privacy Policy explains what information we collect, how we use it, with whom we may share it, and what rights or choices you may have in relation to your information.

By accessing our website, submitting personal information, or purchasing a product, you confirm that you have read and understood this Privacy Policy.

1. Information We Collect

In the course of operating our business and providing our services, we collect various categories of information. This includes information you voluntarily provide to us, such as your name, address, email address, telephone number, shipping and billing information, order details, communications with our team, uploaded content, and any other details you submit when contacting us, completing forms, or placing an order.

We also collect certain information automatically when you interact with our website. This may include IP address, device identifiers, browser type, operating system, referrer, pages viewed, timestamps, usage events, advertising and campaign parameters, and similar technical data.

If you submit a biological sample such as hair or ashes, those materials may naturally contain biological or environmental elements. We use such materials and the information derived from them solely for purposes connected to carbon extraction and the diamond-creation process, and not for independent medical, genetic, or diagnostic purposes.

Cookies and Tracking Technologies: We use cookies, pixel tags, and similar tracking technologies to improve website functionality, personalize content, analyze traffic, measure campaign performance, and optimize the user experience. Some cookies are essential for technical operation, while others help us understand how visitors interact with our content. You may adjust your cookie settings in your browser at any time, although disabling certain cookies may affect the functionality of the website.

Unsolicited Information: We assume no responsibility for unsolicited personal or sensitive information voluntarily submitted by customers, including personal notes, keepsakes, or biological materials provided outside our documented sample-submission procedures. Such items may be discarded or returned at our discretion.

2. How We Use Personal Information

We use the information we collect for legitimate business purposes necessary to provide, support, and improve our services. This includes processing orders, communicating about order status, verifying identity, processing payment, arranging shipping and delivery, responding to customer service inquiries, administering warranties or claims, and complying with legal, regulatory, and accounting requirements.

If you elect to receive SMS updates, email notifications, newsletters, or promotional content, we use your contact information to deliver the requested communications. You may unsubscribe from marketing-related communications at any time in accordance with the instructions provided in the relevant message.

We also use technical and usage data to improve the performance, stability, and security of our website. This may include analyzing aggregated or anonymized data, troubleshooting, abuse prevention, fraud detection, and improving navigation, content, and marketing effectiveness.

Information related to biological samples is used solely to carry out carbon extraction and the diamond-creation process. Samples are handled, transported, processed, and stored according to our internal procedures and, where necessary, with the involvement of selected service providers.

3. How We Share Information

We do not sell, rent, or lease your personal information and do not disclose it to third parties for purposes unrelated to creating your diamond or providing our services.

We may disclose personal information to carefully selected service providers that perform essential business functions on our behalf. These may include payment processors, shipping and courier providers, hosting and IT vendors, analytics providers, communications vendors, laboratory partners, jewelers, certification entities, insurers, and other suppliers reasonably required to fulfill your order or operate our business.

We may also disclose personal information when required to comply with a court order, subpoena, governmental investigation, regulatory request, or other legal obligation, or when we believe in good faith that disclosure is necessary to protect our rights, property, safety, or the safety of our customers or others.

Technical information such as IP addresses, device identifiers, or usage metrics may be shared with technology partners or analytics providers that support the operation, maintenance, and improvement of our website.

SMS opt-in information, messaging consent status, and mobile phone numbers are not shared with third parties for independent marketing or unrelated purposes.

4. Text Messaging and Communications

If you voluntarily opt in to receive SMS updates, notices, or marketing communications, you consent to our contacting you at the mobile number you provide for the purposes you authorize. Your mobile number, messaging preferences, and opt-in or opt-out status may be shared only with service providers that help us deliver messages, including messaging platforms and telecommunications providers.

You may withdraw consent to receive SMS messages at any time by replying “STOP” to a message or using any other applicable opt-out mechanism. Transactional or service-related communications may still be necessary to fulfill our contractual obligations.

5. Protection and Security

We are committed to safeguarding the personal information and biological samples entrusted to us. To that end, we implement a combination of administrative, technical, and physical safeguards designed to protect against unauthorized access, misuse, loss, disclosure, or alteration. These safeguards include internal access controls, employee confidentiality requirements, secure servers, encrypted transmission practices when appropriate, and monitored storage environments. Our security measures are regularly reviewed and updated to reflect industry standards and evolving technological and regulatory expectations.

Although we strive to use commercially reasonable means to secure your information, no system for transmitting or storing data can be guaranteed to be completely secure. By engaging our services, you acknowledge that there are inherent risks associated with the transmission and storage of information and biological samples, and you agree that the Company is not responsible for security incidents that occur despite the implementation of reasonable safeguards.

Biological samples provided to us are accessioned upon receipt, logged into our internal chain-of-custody system, and stored under controlled laboratory conditions. These samples are handled only by authorized personnel trained in our internal protocols and procedures. Samples may be transported between secure facilities when required for carbon extraction or diamond formation. Once the carbon extraction and creation process begins, samples may be fully consumed or rendered non-recoverable as part of the manufacturing process. Unless your order expressly provides otherwise, samples are not returned to the Purchaser after processing. At all times, we endeavor to handle each sample with respect, discretion, and care.

6. Retention of Information and Samples

We retain personal information for as long as reasonably necessary to fulfill the purposes outlined in this Privacy Policy, including the administration of your order, the creation and delivery of your Product, the maintenance of business records, the resolution of disputes, and compliance with applicable accounting, tax, regulatory, or legal obligations. When personal information is no longer required, we will securely dispose of or de-identify it in accordance with our internal data destruction policies.

Biological samples are retained only for the period required to perform the carbon extraction process and to complete the creation of the Product. This retention period varies depending on laboratory load, production timelines, and the specific technical steps required for your order. Once the extraction process is complete, any remaining sample material is typically consumed as part of the growth procedure or respectfully disposed of under controlled laboratory protocols. Samples are not stored indefinitely and are never used for testing, analysis, research, or any purpose unrelated to fulfilling your order. They are also not provided to any third party except laboratory partners directly involved in the diamond-creation process, and such partners are bound by confidentiality and security obligations that mirror or exceed our own.

The Purchaser understands that biological samples, once processed, may be fully consumed, destroyed, or rendered unusable as part of normal scientific and manufacturing operations. Because of this, the Company generally cannot return unused material even upon request, unless explicitly agreed to in writing before the start of processing.

7. Third-Party Websites

Our website may provide links or references to external websites, services, platforms, or resources that are not owned, operated, or controlled by Heart In Diamond. These links are provided for convenience only and do not constitute an endorsement of the content, policies, practices, or operators of those third-party sites. Because we have no control over the privacy practices or data security standards employed by external websites, we cannot and do not assume responsibility for the manner in which those third parties collect, use, store, share, or protect your information. Any information you choose to provide to such external sites is provided directly to the third party and is subject to that party’s privacy policy and terms, not ours.

We strongly encourage you to review the applicable privacy policies, data-handling practices, and terms of service of any third-party website you access through links on our site before submitting personal information or engaging with their services. Your interactions with third-party websites are solely at your own risk, and Heart In Diamond disclaims all liability arising from such interactions or from any content, advertising, products, services, or materials available on or through third-party sites.

8. Children’s Privacy

Heart In Diamond does not knowingly collect, solicit, or process personal information from children under the age of thirteen. Our products, services, and website are intended for use by adults and by individuals who have reached the age of majority in their respective jurisdictions. We do not market to or knowingly engage in the collection of information from minors, and no part of our website is structured to attract or engage children.

If we become aware that personal information has been submitted to us by a child under the age of thirteen without verified parental consent, we will take reasonable steps to delete the information from our records as promptly as possible unless we are legally required to retain it. If you believe that we may have collected information from or about a child under the age of thirteen, please contact us immediately using the information provided in the Contact Us section of this Privacy Policy. We will investigate the matter and take appropriate action to protect the privacy and safety of the child.

9. International Users

Heart In Diamond operates primarily within the United States. If you choose to access our website, communicate with us, or submit personal information from a location outside the United States, you acknowledge that your information may be transferred to, processed in, and stored in the United States or in other jurisdictions whose privacy and data protection laws may differ from those in your home country. These jurisdictions may not provide the same level of data protection as those where you reside. By providing personal information or using our services, you expressly consent to the international transfer, storage, and processing of your information as described in this Privacy Policy.

We take steps to ensure that any transfer of personal information complies with applicable data protection laws. For individuals located in the European Union, the United Kingdom, or other jurisdictions with comprehensive data protection frameworks, we rely on appropriate safeguards such as contractual clauses, service provider agreements, or other lawful mechanisms that permit the transfer of personal data to the United States.

If you are located in the European Economic Area or the United Kingdom, you may have certain rights under GDPR or UK-GDPR, including the rights of access, rectification, erasure, restriction, objection, portability, and the right to withdraw consent. These rights are addressed in the section below. If you wish, we can also provide a supplemental GDPR notice that elaborates on these rights and describes the legal bases on which we process your personal data.

Residents of California may also have specific rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act. These include the right to know what categories of personal information we collect, the right to request deletion of personal information, the right to correct inaccurate information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising privacy rights. Heart In Diamond does not sell or share your personal information for cross-context behavioral advertising.

We will comply with the privacy laws applicable to the jurisdictions in which our customers reside to the extent required by law. If you have any questions about how your information is processed in your jurisdiction, you may contact us using the information provided in the Contact Us section.

10. Your Privacy Choices

You have the right to make certain decisions regarding your personal information, and we will honor these requests in accordance with applicable laws. You may update or correct your contact information, change your communication preferences, revoke your consent to marketing emails, withdraw your SMS opt-in status, or request clarification regarding the personal data we maintain about you by contacting us at the email address provided below. We may take steps to verify your identity before fulfilling your request in order to protect the security of your information.

If you are a resident of the European Union, the United Kingdom, or any jurisdiction that provides statutory privacy rights, you may have additional rights relating to access, correction, deletion, restriction of processing, objection to processing, and data portability. You may also have the right to withdraw consent where consent is the basis for processing. We will evaluate and respond to each request in accordance with the laws that apply to your situation.

If you are a resident of California, you have the right to request that we disclose the categories of personal information collected about you, the categories of sources from which such information was collected, the business or commercial purpose for collecting the information, and the categories of third parties with whom we share the information. You may also request that we delete your personal information or correct inaccurate information we maintain about you. Since Heart In Diamond does not sell or share your personal information, there is no need to submit a request to opt out of such activity; however, we will still honor any Do Not Sell or Do Not Share request submitted by a California resident as required by law.

Please note that certain information may need to be retained for legitimate business purposes, such as fulfilling an open order, complying with tax or accounting obligations, preventing fraud, enforcing our agreements, or resolving disputes. Where allowed by law, we may decline a deletion request if retaining certain information is necessary to complete a transaction you initiated, detect security incidents, comply with applicable law, or perform internal operations that align with reasonable consumer expectations.

If you wish to exercise your rights or update your preferences, please contact us using the details provided in the Contact Us section of this Privacy Policy. We will provide instructions relevant to your jurisdiction and address your request within the timeframe required by law.

11. Changes to This Privacy Policy

We may update or revise this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any updates will be posted on our website with a new effective date. Your continued use of the website or our services after changes become effective constitutes your acceptance of the updated Policy.

Do Not Track Signals: Some web browsers offer a “Do Not Track” (DNT) setting. At this time, our website does not respond to DNT signals because no uniform industry standard for DNT response has been established.

12. Contact Us

If you have questions about this Privacy Policy, our data practices, or your personal information, please contact us using the contact details provided on the Site.