Privacy Policy

Version of October 27, 2026. It replaces the previous version.

This policy describes how jolicaillou SA processes the personal data of visitors and customers of the website www.diams.com and of the diamond search engine diamond.diams.com (hereinafter "the website"). It follows the Swiss Federal Act on Data Protection (FADP) and, for persons located in the European Union or the European Economic Area, the General Data Protection Regulation (GDPR).

1 Data Controller

jolicaillou SA, Case postale 461, 1001 Lausanne, Switzerland. Telephone: +41 21 625 63 34. For any data protection question: contact form.

2 Data Collected

• Browsing: IP address, date and time, pages requested, browser and operating system, referring page, recorded in the server log; cookies and tools described in section 6.
• Customer account: last name, first name, addresses, email, telephone, password (stored in irreversibly encrypted form), order history.
• Order, with or without an account: identity, billing and delivery addresses, email, telephone, items, amounts, payment method. Payment is processed by PayPal: we receive the payment confirmation, the transaction identifier and the email address of your PayPal account, never your card or bank account details.
• Diamond request from the search engine and contact form: name, email, telephone, message. These messages reach us by email and are not stored in the website database.
• Newsletter: email address, dates of subscription and confirmation.

We do not request any sensitive data within the meaning of the FADP.

3 Purposes of Processing

• performance of the contract: orders, payment, delivery, warranty, returns, after-sales service, replies to requests;
• legal obligations: accounting, taxation, retention of records;
• overriding interest of jolicaillou SA: website security, prevention of abuse and bots, improvement of the website;
• consent: newsletter, traffic measurement with Google Analytics (section 6.2).

Data are not used for any other purpose. jolicaillou SA carries out no high-risk profiling and no automated decision-making.

4 Recipients of the Data

Data are transmitted to the following service providers, only to the extent necessary:

• Infomaniak Network SA, Geneva: hosting of the website, databases, logs and email, in Switzerland;
• PayPal: payment processing, under its own responsibility and according to its own privacy statement;
• secure and insured transport company: name, delivery address and telephone, for the shipment of parcels;
• technical maintenance provider of the website, bound to confidentiality by contract;
• Google (Google Ireland Limited, Dublin): Google Analytics, reCAPTCHA and YouTube (section 6);
• Vimeo.com, Inc., New York: playback of Vimeo videos (section 6);
• authorities and courts, where the law requires it.

Personal data are neither sold nor transferred for commercial purposes.

5 Transfer of Data Abroad

The website and its data are hosted in Switzerland. The services of Google, Vimeo and PayPal may involve processing in the United States. This transfer relies on the provider's certification under the Swiss-U.S. Data Privacy Framework, recognized by the Swiss Federal Council since September 15, 2024, or, failing that, on the standard contractual clauses included in the provider's terms.

6 Cookies and Measurement Tools

6.1 Necessary cookies. The website uses cookies and local storage that are essential to its operation: session (PHPSESSID), form protection (form_key), language (store), cart and personalized content (private_content_version, section_data_ids, mage-cache-sessid, mage-cache-storage, X-Magento-Vary), messages (mage-messages), recently viewed products (recently_viewed_product, product_data_storage), storage of your choice about cookies (user_allowed_save_cookie, diams_cookie_choice). They are not used to track you and expire at the end of the session or after one year at the latest.

6.2 Google Analytics 4. With your consent, given through the "Accept all cookies" button of the banner shown on your first visit, the website measures its traffic with Google Analytics 4: pages viewed, source, device, approximate country and city, events such as adding to cart. Google assigns a pseudonymous identifier to your browser in the cookies _ga and _ga_YXN259LSKD (two years). Google signals are enabled: for persons signed in to a Google account who have allowed ads personalization, Google adds demographic data and interests and links visits made from several devices. Analytics data are retained for fourteen months at most, Google signals data for twenty-six months at most by Google. If you choose "Essential cookies only", Google Analytics is not loaded and none of its cookies are set; this choice is kept for six months, an acceptance for one year. You can change your mind by deleting the website's cookies in your browser, after which the banner is shown again. You can also block this measurement by installing the Google Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout) or by turning off ads personalization in your Google account. Google privacy policy: policies.google.com/privacy.

6.3 reCAPTCHA. The contact, account creation and forgotten password forms are protected by Google reCAPTCHA, which analyzes browsing behavior (movements, duration, IP address, browser) to distinguish people from bots and sets the _GRECAPTCHA cookie. This site is protected by reCAPTCHA; the Google privacy policy applies.

6.4 Videos. Product pages contain videos hosted on YouTube (Google) and on Vimeo. No data is transmitted to these services until you start playback. On playback, the service receives your IP address and the page viewed and may set its own cookies (YouTube: policies.google.com/privacy; Vimeo: vimeo.com/privacy).

6.5 Payment. During payment, PayPal sets its own cookies on its pages.

6.6 Browser settings. You can delete cookies at any time or set your browser to refuse them; the cart and the customer account then no longer work.

7 Newsletter

Subscription is made through the form on the website and becomes active only after confirmation through the link sent to your address. It is used to inform you about our products, our events and news of the website. You can unsubscribe through the link in each mailing or by writing to us; your address is then removed from the list. Mailings are sent from the website's email service, hosted by Infomaniak.

8 Data Security

jolicaillou SA applies appropriate technical and organizational measures: encryption of exchanges (TLS, https), passwords stored in hashed form, administration access limited to authorized persons, daily backups by the hosting provider, hosting in Switzerland.

9 Retention Periods

• orders, invoices and accounting records: ten years (art. 958f of the Swiss Code of Obligations);
• customer account: until its deletion at your request;
• diamond requests and contact messages: two years after the last exchange;
• newsletter: until unsubscription;
• server logs: about thirty days;
• Google Analytics: fourteen months at most; Google signals: twenty-six months at most by Google.

10 Your Rights

You may request access to your data, their rectification, their erasure, their delivery in a common format, object to a processing, request its restriction and withdraw a consent given. Requests are addressed to jolicaillou SA (section 1); proof of identity may be requested; a reply is given within thirty days as a rule. You may lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch, or, if you reside in the European Union, with the data protection authority of your country.

11 Enhanced Protection of Customer Data

jolicaillou SA pays particular attention to the confidentiality of information relating to its customers and their purchases.

Given the nature of the products offered, certain orders may involve high-value goods or sensitive transactions.

In this context, jolicaillou SA applies reinforced discretion measures regarding:

• the identity of customers
• order-related information
• delivery addresses
• payment data
• any information that could reveal the nature or value of a purchase.

These data are accessible only to employees or service providers strictly necessary for processing the order and are treated with a high level of confidentiality.

jolicaillou SA undertakes never to publicly disclose information relating to its customers or their purchases, except where required by law.

12 Changes

jolicaillou SA may modify this policy to adapt it to legal or technical developments. The applicable version is the one published on the website, with its date.

13 Contact

For any question regarding data protection:

jolicaillou SA
Case postale 461
1001 Lausanne
Switzerland
Telephone: +41 21 625 63 34
Contact form: www.diams.com/en/diamond-contact-us