Legal

Privacy Policy

Last updated January 2026

This policy explains what personal data CaratBid collects, why we collect it, who we share it with and the rights you have over it.

Template notice: this document is a drafting starting point prepared for CaratBid and must be reviewed and finalised by a qualified lawyer before launch. Company registration details, the data controller entity and supervisory authority still need to be inserted.

1. Who we are

CaratBid operates a marketplace where natural diamond sellers receive competing offers from verified diamond buyers. The data controller is the CaratBid legal entity identified in the company details to be inserted here.

2. Data we collect

Identity and contact data: name, email address, telephone number, country and city.
Diamond data: characteristics, certificate details, photographs and uploaded documents.
Buyer data: business name, registration number, address, trading references and verification documents.
Account and usage data: sign-in events, notifications, offers made or received, and activity records.
Technical data: IP address, device and browser information, and cookie identifiers.

3. Why we use it and our legal basis

To operate the marketplace and match diamonds to verified buyers — performance of a contract.
To notify you about offers and account activity — performance of a contract.
To verify buyers and prevent fraud or unlawful trading — legitimate interests and legal obligations.
To send marketing updates — your consent, which you can withdraw at any time.
To measure and improve the service — legitimate interests, with analytics cookies subject to consent.

4. Who we share data with

Diamond details and photographs are shared with matched verified buyers. Seller names, email addresses and telephone numbers are not disclosed to buyers by CaratBid. When you accept an offer, we introduce you and the buyer so the transaction can be completed. We also use service providers for hosting, email delivery, SMS delivery and analytics, who process data on our instructions.

5. International transfers

Some providers may process data outside the European Economic Area. Where that happens we rely on adequacy decisions or standard contractual clauses.

6. Retention

We keep submission, offer and verification records for as long as your account is active and afterwards for the period required to meet legal, accounting and dispute-resolution obligations.

7. Your rights

You have the right to access, correct, erase, restrict or object to processing of your personal data, to data portability, and to withdraw consent. Contact hello@caratbid.com to exercise any of these rights. You may also complain to your national data protection supervisory authority.

8. Security

Uploaded certificates and photographs are stored privately and are accessible only through authorised, time-limited links. Access to personal data within CaratBid is restricted to staff who need it.

9. Contact

Questions about this policy: hello@caratbid.com.