Privacy Policy

Last updated: 14 September 2026

This Privacy Policy explains how Bossy Inc Ltd, trading as Mond Diamonds, collects, uses, stores and protects personal information.

We take privacy and data protection seriously and aim to process personal information fairly, lawfully and transparently.

1. Who We Are

The data controller is:

Bossy Inc Ltd
128 City Road
London
United Kingdom
EC1V 2NX

Trading as:

Mond Diamonds

For privacy enquiries:

data@mond.diamonds

2. Data Protection Law

We process personal information in accordance with applicable data protection law, including the UK General Data Protection Regulation and the Data Protection Act 2018 where applicable.

Where customers are located outside the UK, additional data protection laws may apply depending on the circumstances.

3. Information We May Collect

Depending on how you interact with Mond Diamonds, we may collect:

• Name
• Billing address
• Delivery address
• Email address
• Telephone number
• Order information
• Product preferences
• Account information
• Payment-related information
• Transaction information
• Communications with us
• Returns and customer-service information
• IP address
• Device information
• Browser information
• Website usage information
• Marketing preferences
• Fraud-prevention information

We do not need to receive or store your full payment-card details where these are processed directly by a third-party payment provider.

4. How We Collect Information

We may collect information when you:

• Visit our website
• Create an account
• Place an order
• Contact us
• Subscribe to marketing
• Request information
• Request a return
• Submit a form
• Interact with our website
• Use cookies or similar technologies where permitted

5. Why We Use Personal Information

We may use personal information to:

• Process orders
• Take payment
• Deliver products
• Provide customer service
• Manage returns
• Communicate about orders
• Prevent fraud
• Verify transactions
• Maintain website security
• Improve our website
• Maintain business records
• Meet legal and regulatory obligations
• Send marketing where legally permitted
• Respond to enquiries
• Resolve complaints
• Protect our business and customers

6. Lawful Bases

Depending on the purpose, we may rely on:

• Performance of a contract
• Steps taken at your request before entering into a contract
• Legal obligation
• Legitimate interests
• Consent
• Other lawful bases permitted by applicable law

Where consent is required, we will seek it appropriately.

7. Legitimate Interests

Where we rely on legitimate interests, these may include:

• Preventing fraud
• Protecting our website
• Protecting customers
• Maintaining business systems
• Improving services
• Managing customer relationships
• Direct marketing where legally permitted
• Defending or establishing legal claims

We will consider the relevant interests, necessity and impact before relying on this basis.

8. Payment Providers

Payments may be processed by third-party payment providers.

These providers may process information necessary to authorise transactions, prevent fraud and comply with applicable financial and regulatory requirements.

Customers should also review the privacy information of the payment provider used for their transaction.

9. Shopify and Technology Providers

Our website may use Shopify and other technology/service providers to operate the online store, process orders, maintain systems, analyse website activity and provide related services.

These providers may process personal information on our behalf or independently where they have their own legal responsibilities.

10. Suppliers and Fulfilment Partners

Depending on the product and order, relevant information may need to be shared with suppliers, manufacturers, fulfilment providers or other service providers so that your order can be processed and delivered.

We only share information reasonably necessary for the relevant purpose.

11. Delivery Providers

We may share relevant information with courier and logistics providers, including your name, delivery address, contact details and order information necessary to deliver your purchase.

12. Fraud Prevention

For high-value orders, we may use fraud-prevention and risk-assessment services.

This may involve analysing transaction, device, address and order information.

Where automated decision-making with legal or similarly significant effects is used, we will provide the information and rights required by applicable law.

13. Marketing

Where legally permitted, we may send information about Mond Diamonds products, services and offers.

You can unsubscribe from marketing communications at any time.

Transactional communications, such as order confirmations and delivery notifications, may still be sent where necessary.

14. Cookies

Our website uses cookies and similar technologies.

Some cookies are necessary for the website to operate.

Other cookies may be used for analytics, functionality, advertising or similar purposes where permitted.

Where consent is required, we will request consent before placing the relevant non-essential cookies.

For further information, please see our Cookie Policy.

15. International Data Transfers

Some of our service providers may process information outside the UK.

Where UK data protection law requires safeguards for an international transfer, we will use an appropriate lawful transfer mechanism and safeguards as required.

These may include adequacy regulations or appropriate contractual safeguards where applicable.

16. How Long We Keep Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax, fraud-prevention and dispute-resolution requirements.

Retention periods vary depending on the type of information.

17. Security

We take reasonable technical and organisational measures to protect personal information against:

• Unauthorised access
• Loss
• Misuse
• Alteration
• Disclosure
• Destruction

No internet transmission or electronic storage system can be guaranteed to be completely secure.

18. Your Data Protection Rights

Depending on the circumstances and applicable law, you may have rights including:

• Right of access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to object
• Rights relating to automated decision-making
• Right to withdraw consent where processing relies on consent

Some rights are subject to legal conditions and exemptions.

19. Direct Marketing

You can object to direct marketing at any time.

You can usually unsubscribe using the link contained in marketing emails or by contacting us.

20. Children's Information

Our website is intended for adults purchasing diamonds and jewellery.

We do not knowingly seek to collect personal information from children for marketing purposes.

21. Data Breaches

Where a personal data breach occurs, we will assess it and take the steps required by applicable data protection law.

Where notification to the ICO or affected individuals is legally required, we will make the appropriate notification.

22. Complaints

If you have concerns about how we process your personal information, please contact:

data@mond.diamonds

You also have the right to complain to the UK's Information Commissioner's Office where applicable.

23. Changes to This Policy

We may update this Privacy Policy from time to time.

The latest version will be published on this page.

24. Contact Us

Bossy Inc Ltd trading as Mond Diamonds

128 City Road
London
United Kingdom
EC1V 2NX

Privacy: data@mond.diamonds
Customer service: sales@mond.diamonds