PRIVACY STATEMENT

Last Modified: August 1, 2026

We take your privacy seriously. This Privacy Statement explains how DreamyGems.com (collectively, “DreamyGems,” “we,” “us,” or “our”) collects, uses, shares, and processes your information when you visit our website, use our products and services, or otherwise interact with us.

This Privacy Statement is designed to comply with applicable data protection laws and regulations, including but not limited to the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”), the Virginia Consumer Data Protection Act (“VCDPA”), the Colorado Privacy Act (“CPA”), the Connecticut Data Privacy Act (“CTDPA”), the Utah Consumer Privacy Act (“UCPA”), and other applicable U.S. federal and state privacy laws.

COLLECTION AND USE OF PERSONAL DATA

Personal data is information that can be used to directly or indirectly identify you. Personal data also includes pseudonymised (de-identified) data that can be linked to information used to directly or indirectly identify you. Personal data does not include data that has been irreversibly anonymized or aggregated so that it can no longer enable us, whether in combination with other information or otherwise, to identify you.

Promoting Safety and Security

We abide by the principles of legality, legitimacy, and transparency. We use and process the minimum data necessary within a limited scope of purpose and take technical and administrative measures to protect the security of the data. We use personal data to help verify accounts and user activity, as well as to promote safety and security, such as by monitoring fraud and investigating suspicious or potentially illegal activity or violations of our terms or policies. Such processing is based on our legitimate interest in helping ensure the safety of our products and services.

Here is a description of the types of personal data we may collect and how we may use it.

WHAT PERSONAL DATA WE COLLECT

Data You Provide

We collect the personal data you provide when you use our products and services or otherwise interact with us, such as when you create an account, contact us, participate in an online survey, use our online help or online chat tool, or sign up for our newsletter. If you make a purchase, we collect personal data in connection with the purchase. This data includes your payment data, such as your credit or debit card number and other card information, and other account and authentication information, as well as billing, shipping, and contact details. We may also collect information you provide when you enter a contest, promotion, or giveaway, or when you request customer support.

Data About Use of Our Services and Products

When you visit our websites, we may collect data about the type of device you use, your device’s unique identifier, the IP address of your device, your operating system, the type of Internet browser that you use, usage information, diagnostic information, and location information from or about the computers, phones, or other devices on which you install or access our products or services. Where available, our services may use GPS, your IP address, and other technologies to determine a device’s approximate location to allow us to improve our products and services.

Data from Third-Party Sources

We may obtain personal data about you from third-party sources, including social media platforms, payment processors, shipping carriers, fraud prevention service providers, marketing partners, and publicly available sources. This data may include your name, email address, shipping address, purchase history, and other information necessary to provide our products and services.

HOW WE USE YOUR PERSONAL DATA

Generally speaking, we use personal data to provide, improve, and develop our products and services, to communicate with you, to offer you targeted advertisements and services, and to protect us and our customers.

Providing, Improving, and Developing Our Products and Services

We use personal data to help us provide, improve, and develop our products, services, and advertising. This includes using personal data for purposes such as data analysis, research, and audits. Such processing is based on our legitimate interest in offering you products and services and for business continuity. If you enter a contest or other promotion, we may use the personal data you provide to administer those programs. Some of these activities have additional rules, which may contain further data about how we use personal data, so we encourage you to read those rules carefully before participating.

Communicating with You

Subject to your prior express consent, where required by law, we may use personal data to send you marketing communications in relation to DreamyGems’ own products and services, communicate with you about your account or transactions, and inform you about our policies and terms. If you no longer wish to receive email communications for marketing purposes, please Contact Us to opt-out or use the unsubscribe link provided in each marketing email. We also may use your data to process and respond to your requests when you Contact Us. Subject to your prior express consent, we may share your personal data with third-party partners who may send you marketing communications in relation to their products and services. Subject to your prior express consent, we may use personal data to personalize your experience with our products and services and on third-party websites and applications and to determine the effectiveness of our promotional campaigns.

NOTE: For any of the uses of your data described above that require your prior express consent, note that you may withdraw your consent at any time by contacting DreamyGems.com or by following the opt-out instructions provided in our communications.

Legal Obligations and Protection of Rights

We may use and disclose your personal data where necessary to comply with applicable laws, regulations, legal processes, or governmental requests; to enforce our Terms of Service and other agreements; to protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or others; and to allow us to pursue available remedies or limit the damages that we may sustain.

COOKIES AND SIMILAR TECHNOLOGIES

This Cookie Statement is part of this Privacy Statement and applies to all DreamyGems.com affiliates, brands, websites, products, and services (collectively, “DreamyGems,” “we,” “us,” or “our”) and explains how we use cookies on our websites and online services and the choices you have.

Definition of “Cookies”

Cookies are small pieces of text used to store information on web browsers. Cookies are widely used to store and receive identifiers and other information on computers, phones, and other devices. We also use other technologies, including data we store on your web browser or device, identifiers associated with your device, and other software, for similar purposes. In this Cookie Statement, we refer to all of these technologies as “cookies.”

Use of Cookies

We use cookies to provide, protect, and improve our products and services, such as by personalizing content, offering and measuring advertisements, understanding user behavior, and providing a safer experience. The categories of cookies we use include:

Essential Cookies: Required for the operation of our website and services.
Performance and Analytics Cookies: Help us understand how visitors interact with our website.
Functional Cookies: Enable enhanced functionality and personalization.
Advertising and Targeting Cookies: Used to deliver relevant advertisements and measure their effectiveness.
Social Media Cookies: Enable social media features and sharing.

Please note that the specific cookies we may use vary depending on the specific websites and services you use. You can manage your cookie preferences at any time through your browser settings or by using our Cookie Consent Manager. Please note that disabling certain cookies may affect the functionality of our website and services.

DISCLOSURE OF PERSONAL DATA

We make certain personal data available to strategic partners that work with us to provide our products and services or help us market to customers. Personal data will only be shared by us with these companies in order to provide or improve our products, services, and advertising; it will not be shared with third parties for their own marketing purposes without your prior express consent, where required by law.

The categories of third parties with whom we may share your personal data include:

Service providers (payment processors, shipping carriers, hosting providers, analytics providers, customer support providers)
Marketing and advertising partners
Social media platforms
Fraud prevention and security providers
Professional advisors (lawyers, accountants, auditors)
Affiliated companies within our corporate group
Business partners in connection with a merger, acquisition, or sale of assets

DATA DISCLOSURE, STORAGE, TRANSFER, AND PROCESSING

Fulfillment of Legal Obligations

Due to the mandatory laws of the European Economic Area or the country in which the user lives, certain legal acts exist or have occurred and certain legal obligations need to be fulfilled.

Treatment of Personal Data of EEA Residents

As described below, if you reside within the European Economic Area (EEA) or the United Kingdom, our processing of your personal data will be legitimized as follows: Whenever we require your consent for the processing of your personal data, such processing will be justified pursuant to Article 6(1)(a) of the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and/or the UK GDPR. Where processing is necessary for the performance of a contract, it is justified pursuant to Article 6(1)(b). Where processing is necessary for compliance with a legal obligation, it is justified pursuant to Article 6(1)(c). Where processing is necessary for the purposes of legitimate interests pursued by us or a third party, it is justified pursuant to Article 6(1)(f), provided that such interests are not overridden by your rights and freedoms.

For the Purpose of Reasonable Implementation or Application of This Statement

We may share personal data with all DreamyGems.com-affiliated companies. In the event of a merger, reorganization, acquisition, joint venture, assignment, spin-off, transfer, or sale or disposition of all or any portion of our business, including in connection with any bankruptcy or similar proceedings, we may transfer any and all personal data to the relevant third party. We may also disclose personal data if we determine in good faith that disclosure is reasonably necessary to protect our rights and pursue available remedies, enforce our terms and conditions, investigate fraud, or protect our operations or users.

Legal Compliance and Security or Protect Other Rights

It may be necessary — by law, legal process, litigation, and/or requests from public and governmental authorities within or outside your country of residence — for us to disclose personal data. We may also disclose personal data if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate.

INTERNATIONAL DATA TRANSFERS

We may transfer your personal data to countries other than the country in which you reside, including the United States, where our servers and service providers may be located. These countries may have data protection laws that are different from the laws of your country.

When we transfer personal data from the EEA, UK, or Switzerland to countries that have not received an adequacy decision from the European Commission, we rely on appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission, the UK International Data Transfer Addendum, and/or other legally valid transfer mechanisms. We also implement appropriate technical and organizational measures to ensure an adequate level of data protection.

You may request more information about our international data transfer mechanisms by contacting us using the details provided in the “Contact Us” section below.

SENSITIVE PERSONAL INFORMATION

In certain circumstances, we may collect sensitive personal information, which may include:

Precise geolocation data
Personal information revealing racial or ethnic origin, religious or philosophical beliefs, or trade union membership
Genetic data, biometric data used for uniquely identifying a natural person
Health data, data concerning a natural person’s sex life or sexual orientation
Citizenship or immigration status
Financial account numbers and access credentials (where collected)

We only collect and process sensitive personal information where necessary for the purposes described in this Privacy Statement or where you have provided your explicit consent. We do not use or disclose sensitive personal information for purposes other than those disclosed, except as permitted or required by applicable law. You have the right to limit the use of your sensitive personal information, as described in the “Your Rights” section below.

CHILDREN

Our products and services are intended for adults. Accordingly, we do not knowingly collect, use, or disclose personal data from children under 16. If we learn that we have collected the personal data of a child under 16, or the equivalent minimum age depending on the jurisdiction (e.g., under 13 in the United States under COPPA), we will take steps to delete the data as soon as possible. Please immediately Contact Us if you become aware that a child under 16 has provided us with personal data.

We do not knowingly sell or share the personal information of consumers under 16 years of age. Under the CCPA/CPRA, sale or sharing of personal information of consumers under 16 requires affirmative opt-in consent, and for children under 13, consent must be provided by a parent or legal guardian.

YOUR RIGHTS

We take reasonable steps to ensure that your personal data is accurate, complete, and up to date. Depending on your jurisdiction, you may have the following rights regarding your personal data:

Right of Access: You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data and related information.
Right to Rectification: You have the right to obtain the rectification of inaccurate personal data concerning you without undue delay.
Right to Erasure (Right to be Forgotten): You have the right to obtain the erasure of personal data concerning you without undue delay under certain circumstances.
Right to Restriction of Processing: You have the right to obtain restriction of processing under certain circumstances.
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller without hindrance.
Right to Object: You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on legitimate interests or direct marketing.
Right to Withdraw Consent: You have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your privacy rights.
Right to Appeal: You have the right to lodge a complaint with a competent data protection authority regarding the processing of your personal data.

To protect the privacy and the security of your personal data, we may request data from you to enable us to confirm your identity and right to access such data, as well as to search for and provide you with the personal data we maintain. There are instances where applicable laws or regulatory requirements allow or require us to refuse to provide or delete some or all of the personal data that we maintain.

You may Contact Us to exercise your rights. We will respond to your request in a reasonable timeframe, and in any event within the time period required by applicable law (generally within 30 days for GDPR requests and within 45 days for CCPA/CPRA requests, with possible extensions as permitted by law).

CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”). This section describes those rights and how to exercise them.

Categories of Personal Information We Collect and Disclose

In the preceding 12 months, we have collected the following categories of personal information from consumers:

Identifiers (name, email address, postal address, phone number, IP address, device identifiers, account credentials)
Personal information categories listed in the California Customer Records statute (name, contact information, financial information, purchase history)
Protected classification characteristics under California or federal law (where voluntarily provided)
Commercial information (products or services purchased, purchase history, consumer preferences)
Biometric information (we do not intentionally collect biometric information)
Internet or other similar network activity (browsing history, search history, information on interactions with our website)
Geolocation data (approximate location derived from IP address)
Sensory data (we do not intentionally collect sensory data)
Professional or employment-related information (we do not intentionally collect this information)
Non-public education information (we do not intentionally collect this information)
Inferences drawn from other personal information (consumer preferences, behavior patterns)

In the preceding 12 months, we have disclosed for business purposes the following categories of personal information: identifiers, personal information categories listed in the California Customer Records statute, commercial information, internet or other similar network activity, and geolocation data.

In the preceding 12 months, we have sold or shared for cross-context behavioral advertising the following categories of personal information: identifiers, internet or other similar network activity, and commercial information. We do not sell or share the personal information of consumers under 16 years of age.

Your CCPA/CPRA Rights

As a California resident, you have the right to:

Know: Request information about the personal information we collect, use, disclose, sell, or share about you.
Delete: Request deletion of your personal information, subject to certain exceptions.
Correct: Request correction of inaccurate personal information.
Opt-Out of Sale or Sharing: Opt out of the sale of your personal information or the sharing of your personal information for cross-context behavioral advertising.
Limit Use of Sensitive Personal Information: Limit the use of your sensitive personal information to that which is necessary for performing the services or providing the goods reasonably expected by an average consumer.
Non-Discrimination: Not be discriminated against for exercising your CCPA/CPRA rights.

To exercise your rights to know, delete, correct, or limit the use of sensitive personal information, please Contact Us using the details provided below. To opt out of the sale or sharing of your personal information, you may use the “Do Not Sell or Share My Personal Information” link on our website or Contact Us.

We will verify your identity before responding to your request. We may require you to provide certain information to verify your identity, such as your name, email address, and/or other information associated with your account.

OTHER U.S. STATE PRIVACY RIGHTS

If you are a resident of Virginia, Colorado, Connecticut, Utah, or another U.S. state with an applicable comprehensive privacy law, you may have additional rights regarding your personal data, including:

The right to confirm whether we are processing your personal data and to access such personal data
The right to correct inaccuracies in your personal data
The right to delete your personal data
The right to obtain a copy of your personal data in a portable and readily usable format
The right to opt out of the processing of your personal data for purposes of (i) targeted advertising, (ii) the sale of personal data, or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer
The right to appeal a decision we make in response to your privacy request, where applicable under your state’s law

To exercise these rights, please Contact Us using the details provided below. We will respond to your request within the timeframe required by applicable law.

DO NOT SELL OR SHARE MY PERSONAL INFORMATION

Under the CCPA/CPRA and other applicable U.S. state privacy laws, you have the right to opt out of the sale of your personal information and the sharing of your personal information for cross-context behavioral advertising.

We may “sell” or “share” (as those terms are defined under applicable law) your personal information with third parties, including advertising partners, social media platforms, and analytics providers, for purposes such as delivering targeted advertisements, measuring advertising effectiveness, and analyzing website traffic.

You may exercise your right to opt out of the sale or sharing of your personal information by:

Clicking on the “Do Not Sell or Share My Personal Information” link available on our website
Adjusting your cookie preferences through our Cookie Consent Manager
Contacting us using the details provided in the “Contact Us” section

Please note that opting out of sale or sharing does not mean you will no longer receive advertising. Instead, the advertising you receive may be less relevant to your interests. Additionally, we may still use your personal information for our own operational purposes, such as fulfilling orders, providing customer service, and detecting fraud, as permitted by applicable law.

If you use multiple browsers or devices, you will need to opt out on each browser or device. We are committed to honoring opt-out signals, including Global Privacy Control (GPC) signals, where required by applicable law.

TARGETED ADVERTISING

We and our third-party advertising partners may use cookies and similar technologies to collect information about your browsing activities across different websites and over time to deliver targeted advertisements that may be relevant to your interests. This is sometimes referred to as “interest-based advertising” or “online behavioral advertising.”

The third-party advertising partners we work with may include social media platforms (such as Facebook, Instagram, Pinterest, and TikTok), search engines (such as Google), and advertising networks (such as Google Ads, Meta Ads, and others). These partners may use cookies, web beacons, device identifiers, and other technologies to collect information about your use of our website and other websites, including your IP address, browser type, pages visited, time spent on pages, and links clicked.

You can opt out of targeted advertising by:

Using the “Do Not Sell or Share My Personal Information” link on our website
Adjusting your cookie preferences through our Cookie Consent Manager
Using the opt-out mechanisms provided by the Digital Advertising Alliance (DAA) WebChoices tool at https://optout.aboutads.info/, and accessing member-specific opt-out options from the Network Advertising Initiative (NAI) at https://thenai.org/how-to-opt-out/
Adjusting your device’s advertising settings (e.g., Limit Ad Tracking on iOS, Opt Out of Ads Personalization on Android)

Please note that opting out of targeted advertising does not mean you will no longer see advertisements; rather, the advertisements you see may be less relevant to your interests.

AUTOMATED DECISION-MAKING

We may use automated decision-making technologies, including algorithms and artificial intelligence, in connection with our products and services. These technologies may be used for purposes such as:

Personalizing your shopping experience and product recommendations
Detecting and preventing fraud and abuse
Optimizing our website and marketing campaigns
Processing and fulfilling orders
Providing customer support

Where automated decision-making produces legal or similarly significant effects concerning you, as defined by applicable law, you have the right to:

Obtain human intervention in the decision-making process
Express your point of view and contest the decision
Request an explanation of the decision reached after an assessment

If you wish to exercise any of these rights, please Contact Us using the details provided below.

THIRD-PARTY WEBSITES AND SERVICES

Our websites, products, and services may contain links to or the ability for you to access third-party websites, products, and services. We are not responsible for the privacy practices employed by those third parties, nor are we responsible for the information or content their products and services contain. This Privacy Statement applies solely to data collected by us through our products and services. We encourage you to read the privacy policies of any third party before proceeding to use their websites, products, or services.

DATA SECURITY, INTEGRITY, AND RETENTION

We use reasonable technical, administrative, and physical security measures designed to safeguard and help prevent unauthorized access to your data, and to correctly use the data we collect. These measures include encryption of data in transit (using TLS/SSL) and at rest where appropriate, access controls, regular security assessments, and employee training. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

We will retain your personal data for as long as it is necessary to fulfill the purposes outlined in this Privacy Statement, unless a longer retention period is required or permitted by law. Our data retention periods vary depending on the type of data and the purpose for which it is collected:

Account information: Retained for as long as your account is active, and for a reasonable period thereafter as required by law or for legitimate business purposes.
Purchase and transaction information: Retained for as long as necessary to fulfill the transaction, provide customer support, and comply with legal obligations (including tax and accounting requirements).
Marketing communications data: Retained until you opt out of receiving marketing communications, after which we retain a suppression list to ensure we do not contact you for marketing purposes.
Customer support records: Retained for as long as necessary to resolve your inquiry and for a reasonable period thereafter for quality assurance and legal purposes.
Website usage and analytics data: Retained for a period necessary to analyze website performance, improve our services, and ensure security, after which it is anonymized or deleted.

When personal data is no longer necessary for the purposes for which it was collected, we will securely delete, anonymize, or aggregate it in accordance with applicable law.

TEXT MESSAGING PROGRAM

Enrollment

If you enroll in our text messaging (SMS) program, you will be asked to consent expressly — evidenced by the provision of your mobile telephone number, specified prompted keyword(s), or SMS or other text message affirmative response, as your signature to agree to receive recurring automated marketing messages where we or our vendors may send such messages to the mobile number you provided at opt-in. Such consent is not a condition of using our Services and may be withdrawn at any time by using the opt-out link in the text message, replying STOP to any message, or by contacting us in any other manner.

Opting Out

You can opt-out from receiving SMS text messages by clicking the opt-out link in the text message you receive in our text messaging program or by replying STOP to any message.

Your Own Wireless Plan

As always, message and data rates may apply for any messages sent to and by you. If you have any questions about your text plan or data plan, it is best to contact your wireless provider.

Your Duties for Your Own Phone Number

You represent that you are the account holder or customary user for the mobile telephone number that you provide when enrolling in our text messaging program. If you change or deactivate that number, you are responsible for notifying us at Privacy Center immediately. Neither we, nor our vendors, and/or any mobile carrier is liable for delayed or undelivered messages. You agree to indemnify us in full for all claims, expenses, and damages related to or caused in whole or part by your failure to notify us if you change your telephone number.

Participation Subject to Termination or Change

We may suspend or terminate your receipt of automated marketing messages from us if we believe you are in breach of these Terms. Your receipt of these messages is also subject to termination in the event that your mobile telephone service terminates or lapses. We reserve the right to modify or discontinue, temporarily or permanently, all or any part of these messages, with or without notice to you.

CHANGES TO THIS PRIVACY STATEMENT

We may periodically change this Privacy Statement to keep pace with new technologies, industry practices, and regulatory requirements, among other reasons. When we make material changes to this Privacy Statement, we will notify you by posting the updated Privacy Statement on our website and updating the “Last Modified” and “Effective Date” at the top of this statement. We may also notify you via email or through a notice on our website prior to the change becoming effective. Your continued use of our products and services after the effective date of the revised Privacy Statement means that you accept the revised Privacy Statement. If you do not agree to the revised Privacy Statement, please refrain from using our products or services and Contact Us to close any account you may have created.

CONTACT US

If you have any questions regarding this Privacy Statement or its implementation, or if you wish to exercise your privacy rights, here is how you can reach us:

Email: