Privacy Policy
How enquiries, appointment requests, the chat assistant and optional measurement handle information.
Provisional draft, October 7, 2026 · Operator approval required before public launch
AI design concepts and public gallery
When you choose Bring it to life, your design study and any uploaded artwork are sent through Vercel AI Gateway to the image model. Do not upload information you do not have permission to share. Original uploads are not stored on the server. Private generated concepts are encrypted and available for 30 days. Public gallery images remain available until removed. Publishing is optional and requires your permission, including any visible artwork or engraving. Contact details, budget and private notes are never published. Gallery popularity uses day-specific address hashes to count at most one view per design per day, without cookies or cross-day tracking. Hash records expire after two days; aggregate counts are retained. Contact us to remove a public concept.
About this policy
This policy describes the intended handling of information through this Diamond Bros website. For questions about your information, contact info@diamondbros.co or call 647-860-2767. Purchases made on the separate online shop, and any external booking service, have their own notices.
Information you choose to provide
A contact-form enquiry may include your name, email, optional phone number, what you are looking for, when you need it, where you are based, how you would prefer a reply and a short message. The questions at /start also ask about the ring or piece you have in mind, such as the shape, setting, metal, a budget range, a date and a link to inspiration, so your appointment can start where you are. We use these details to respond, to decide who is best placed to reply and how soon, and to prepare for your appointment. Please do not include card numbers, banking information or passwords.
How enquiries are kept
Enquiries, answers to the /start questions and our notes are stored in our own database. Contact details, answers and messages are encrypted before they are stored, and only signed-in staff can read them. To see which parts of the website bring in enquiries, and later orders, we also keep a reporting record that links an enquiry to how the visitor found the site; that record holds your name, email and phone number so that a repeat enquiry is recognised as the same person. We also record how an enquiry was sent, such as the type of device, the browser, the page and the site that referred you, but not your IP address or full browser details. With advertising measurement allowed, the ad-click identifier from your visit is kept with your enquiry so a resulting order can be reported back to the advertising platform as a conversion; with analytics allowed, the analytics client identifier is kept for the same purpose. Your answers produce a triage summary of how quickly to follow up. It is a prompt for us, not an automated decision: a person reviews every enquiry, and no one is refused service by the summary.
Follow-up emails
After you send an enquiry we may email you about it: a confirmation, a reminder if an appointment has not been arranged, and messages from us. These relate to your enquiry and stop when it is resolved or you ask. Replies you send to our emails are stored with your enquiry.
Service providers and delivery
A configured website host processes technical request information. Enquiries and our records are stored in a PostgreSQL database with a hosting provider we select. The implementation supports Resend for sending and receiving email, Upstash Redis for abuse prevention and duplicate-request handling, and Cloudflare Turnstile for form-security checks. The deployed providers and their processing locations must be confirmed before this website is made public. External services may process information outside your province or Canada, according to their contracts and policies. Contact us for the applicable provider information.
Security and temporary records
Forms validate requests and use abuse-prevention controls. A network address, when available, is converted into a keyed hash for temporary rate-limit counters; the application does not intentionally log enquiry contents, contact information or captcha tokens. Duplicate-request records hold a hashed request fingerprint rather than the enquiry text. Links that open your enquiry contain a random token that is stored only as a hash. No website or email channel can guarantee absolute security.
Website chat assistant
The optional chat sends the messages you type, and the address of the page you are viewing, to an AI model through the Vercel AI Gateway so the assistant can reply. The gateway and model providers process them under their own terms, possibly outside your province or Canada. The assistant gives general information only. This application does not intentionally log chat messages. If you send your details or request a call back from the chat, the conversation is included with your enquiry so you do not need to repeat it. If conversation summaries are turned on, a chat that ends without contact details may also be emailed to us. Do not share card numbers, banking information or passwords in the chat.
Custom pendant images
The design studio lets you choose a reference image from your device. The original stays on your device; generating a pendant sends a resized image with its location metadata removed, your design preferences and your design direction to an image model through Vercel AI Gateway. The gateway and model provider may process this information outside Canada under their own terms. Generation requires your agreement and permission to use the image. Generated concepts and their settings are encrypted in our database, available for 30 days, and removed by daily maintenance after expiry. They can be opened by you using your private saved design or by signed-in Diamond Bros staff. A chosen concept is included when you send your design enquiry. Uploaded artwork and private concept access are excluded from ordinary share links. Save design stores your preferences and artwork on this device; Start again clears that device draft. Generated pictures are illustrative concepts for consultation, not manufacturing specifications or quotes.
Cookies
One cookie is needed for the site to work and is set when you use the feature: it lets you return to your /start answers and appointment booking for 30 days after sending them. Another keeps staff signed in. Everything else is optional and off until you opt in through cookie preferences. With analytics allowed, the site stores how you first found it (for up to 90 days), a 30-minute visit identifier and a device identifier (up to 400 days), and reports page views to our own reporting; contact fields and message contents are never part of it. With advertising measurement allowed, it also keeps an ad-click identifier for up to 90 days so a resulting enquiry can be credited to the ad. Optional configuration also supports Google Analytics, Google Ads measurement and Microsoft Clarity, which load only after you allow site analytics and never on the /start questions or the staff pages. Advertising personalization and enhanced conversions are not enabled by this implementation. You can reopen Cookie preferences in the footer and change your choices at any time; your choice is remembered for up to 180 days.
Retention, access and questions
Enquiry information is kept as long as needed to respond, administer a resulting order, meet applicable legal obligations and address legitimate business needs. Diamond Bros must approve its deployed retention and deletion schedule before launch; this policy does not invent a retention period. Contact info@diamondbros.co to ask about access, corrections, deletion or privacy concerns. Requests are subject to identity verification and applicable requirements.
External links and updates
Booking services, the online shop, Google Maps directions, social media and other linked websites have their own terms and privacy practices. This policy may be updated when the site’s operation changes. Review the version shown here and contact us for clarification.