Privacy Policy

S.RONEN DIAMOND LTD ("we," "our," or "us") is committed to protecting the privacy and security of our clients' and visitors' personal information. This Privacy Policy details how we collect, utilize, and safeguard data in the course of our high-end B2B diamond trading operations.

We collect information necessary to facilitate secure transactions, verify identity for compliance with international diamond trading regulations (including the Kimberley Process), and provide tailored services. This may include:

• check_circleCorporate and individual identification documents required for KYC (Know Your Customer) protocols.
• check_circleFinancial details requisite for processing high-value transactions securely.
• check_circleCommunication records to maintain the integrity of negotiations and agreements.
• check_circleTechnical consent logs, including IP addresses and timestamps, recorded securely to prove active consent to communications and policies (as required by spam laws and GDPR).

The information we collect is processed with the utmost discretion and is utilized solely for legitimate business purposes within the scope of our operations. These purposes encompass:

We do not sell or rent personal information to third parties. Data sharing is strictly limited to trusted entities essential to the completion of our services, under rigorous confidentiality agreements.

Entities we may share necessary data with include secured logistics providers (e.g., Brinks, Malca-Amit), banking institutions for wire transfers, and regulatory bodies when mandated by law.

S.RONEN DIAMOND LTD employs robust, industry-leading technical and organizational security measures to protect your data against unauthorized access, alteration, disclosure, or destruction. Our digital infrastructure is designed with the same rigor as our physical security protocols.

This includes multi-layered server encryption, tokenized client profiles, and secure database records.

Where Your Data is Saved: To ensure global availability, high reliability, and industry-standard security, your personal and transaction-related data (including names, emails, phone numbers, company names, offer details, custom messages, IP addresses, and consent timestamps) is stored on secure cloud servers managed by Google Cloud Platform (Firebase). Additionally, basic inquiry records may temporarily be backed up in the client browser's local sandbox environment (LocalStorage) to prevent data loss due to connectivity disruptions.

Data Retention: We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, including executing transactions, maintaining client relations, complying with statutory anti-money laundering (AML) and tax reporting requirements, or resolving disputes. Once the retention period expires, data is securely anonymized or permanently deleted from our servers.

In accordance with global regulations, including the GDPR (Europe) and CCPA/CPRA (California), you possess the right to access, export (data portability), rectify, or request the erasure (Right to be Forgotten) of your personal data. Furthermore, S.RONEN DIAMOND LTD explicitly declares that we do not sell your personal information to any third parties.

We adhere to the principle of data minimization, collecting only the information strictly necessary for facilitating transactions and legal compliance.

When you submit an inquiry through our website, the following personal data is recorded and stored automatically in our secure database, in accordance with applicable privacy law:

Data Controller: S.RONEN DIAMOND LTD, Diamond Exchange Building, Shimshon Building Suite 1708, Ramat Gan, Israel. Contact for data requests: ronenseren65@gmail.com

S.RONEN DIAMOND LTD processes your personal data under the following legal bases, in compliance with both Israeli and international law:

Your personal data is stored on Google Cloud Platform (Firebase), operated by Google LLC, whose primary data centers are located in the United States of America. This constitutes a transfer of personal data outside the European Economic Area (EEA) and outside Israel.

These transfers are safeguarded by the following mechanisms:

• check_circleGoogle LLC participates in the EU–US Data Privacy Framework (DPF), providing an adequacy-equivalent level of protection recognised by the European Commission.
• check_circleGoogle's standard contractual clauses (SCCs) and Data Processing Addendum (DPA) are in place, binding Google as a data processor to GDPR-equivalent obligations.
• check_circleFirebase data is encrypted in transit (TLS 1.2+) and at rest (AES-256), and is subject to Google's ISO 27001-certified security programme.
• check_circleFor Israeli law purposes, transfers to the USA under the above framework are considered to provide adequate protection as required by the Israeli Privacy Protection Regulations (Data Security), 2017.

You may request a copy of the applicable transfer safeguards by contacting our compliance team at ronenseren65@gmail.com.

Under Article 17 of the GDPR and the Israeli Privacy Protection Law, you have the right to request the permanent deletion of all personal data we hold about you, without undue delay, when any of the following applies:

• arrow_rightThe personal data is no longer necessary for the purpose for which it was collected.
• arrow_rightYou withdraw consent and there is no other legal basis for processing.
• arrow_rightYou object to the processing and there are no overriding legitimate grounds.
• arrow_rightThe personal data has been unlawfully processed.

Note on data retention exceptions: We may be required to retain certain records beyond your erasure request where retention is mandated by law (e.g., AML/CFT regulations, tax authority requirements, or active legal proceedings). In such cases, we will inform you of the applicable retention obligation and the expected deletion date.