Privacy Policy

1. Who we are

Donald Coins is a trade name of Jatual Diamonds DMCC, a company registered in the Dubai Multi Commodities Centre (DMCC) free zone, United Arab Emirates. In this policy, "we", "us", and "our" refer to Jatual Diamonds DMCC trading as Donald Coins. We are the data controller for personal data collected through donaldcoin.ae (the "Site").

Contact: info@donaldcoin.ae.

2. What this policy covers

This policy explains what personal data we collect about you, why we collect it, how we use and share it, and the rights you have in respect of it. It applies to the Site and to any purchase or enquiry made through it. It should be read together with our Cookies Policy and Terms & Conditions.

3. Personal data we collect

The Site offers guest checkout — we do not operate customer accounts. The data we collect is limited to what you give us when you place an order or send an enquiry, and a small amount of technical data collected automatically.

3.1 Data you give us

• Order details. When you check out, we collect your name, email address, billing address, shipping address, and phone number. Payment card details are entered on Stripe's hosted checkout and are not received or stored by us.
• Enquiry details. When you use the enquiry form, we collect your name, email, phone number (optional), and the content of your message.
• Identity verification data. For high-value orders, or where required by the UAE's anti-money- laundering (AML) and sanctions rules, we may ask for a copy of a government-issued ID and information about the source of funds. We retain these only for as long as the law requires.

3.2 Data collected automatically

• Technical data. IP address, browser type and version, operating system, device type, and general location inferred from the IP address.
• Usage data. Pages viewed, time spent on pages, click patterns, referring URL, and navigation paths.
• Cookies and local storage. See the Cookies Policy for the specific items we use and why.

4. How we use your data

• To process and deliver your order, including payment, shipping, and post-sale support.
• To reply to enquiries you submit through the enquiry form or by email.
• To send transactional emails such as order confirmations, shipping updates, and receipts.
• To detect and prevent fraud, chargebacks, and unauthorised activity.
• To meet our legal and regulatory obligations, including AML/KYC, tax, and record-keeping requirements.
• To maintain the security and integrity of the Site.
• To analyse Site performance and improve our products and services (using aggregated or anonymised data where practical).

We do not currently send marketing emails. If we introduce marketing communications in the future, we will rely on your opt-in consent and you will be able to unsubscribe at any time.

5. Legal bases

We process personal data on the following legal grounds under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (and, for visitors from the European Economic Area, the equivalent grounds under the EU General Data Protection Regulation):

• Performance of a contract. To take steps at your request to enter into a contract and to perform our obligations under it (for example, to deliver your order).
• Legal obligation. To comply with AML/KYC rules, tax law, court orders, and other legal duties.
• Legitimate interests. To run, secure, and improve our business, to prevent fraud, and to protect our rights, provided these interests do not override yours.
• Consent. Where we rely on your consent (for example, if we introduce marketing emails), you can withdraw it at any time without affecting processing carried out before the withdrawal.

6. Who we share data with

We do not sell or rent your personal data. We share it only with the categories of recipient listed below:

• Payment processors. Stripe processes card payments on our behalf under its own privacy policy. If we introduce cryptocurrency payments in the future, a third-party crypto payment provider will process those transactions under its own terms.
• Hosting and infrastructure. The Site is hosted on Vercel; the database is managed by MongoDB Atlas.
• Shipping and logistics. Couriers (for example, DHL Express or FedEx) receive your name, delivery address, and phone number to deliver your order.
• Professional advisors. Lawyers, accountants, and auditors, in connection with the operation of our business.
• Authorities. We disclose information to regulators, courts, and law-enforcement authorities where we are legally required to do so.
• Business transfers. If our business is sold or reorganised, personal data may be transferred to the acquirer on the condition that it is subject to equivalent privacy protections.

Each processor is required to handle your data only on our instructions and to keep it secure.

7. International transfers

Some of our service providers are based outside the UAE (for example, Stripe and Vercel). When personal data is transferred internationally, we ensure appropriate safeguards are in place — for example, transfers to jurisdictions recognised as providing adequate protection, or contractual safeguards equivalent to those required by UAE law and, where relevant, the EU Standard Contractual Clauses.

8. Data security

We take reasonable technical and organisational measures to protect your data, including:

• TLS/HTTPS encryption on all pages of the Site.
• PCI-DSS compliant payment processing via Stripe — we never hold full card numbers.
• Access controls that limit staff access to personal data on a need-to-know basis.
• Encrypted database storage for sensitive information.
• Regular review of our security practices and provider contracts.

No online service can be completely secure. We cannot guarantee absolute security and accept no liability for unauthorised access caused by matters beyond our reasonable control.

9. How long we keep data

• Order records. Retained for at least 5 years after the transaction, as required by UAE commercial and tax law.
• AML/KYC records. Retained for the period required by the relevant regulatory authority (typically 5 years from the end of the business relationship).
• Enquiry messages. Retained for up to 2 years after the last communication, then deleted or anonymised.
• Technical logs. Retained for up to 12 months for security and troubleshooting purposes.

10. Your rights

Subject to applicable law, you have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete data we no longer need to hold (subject to legal retention obligations such as AML).
• Restrict or object to certain types of processing.
• Portability — receive your data in a structured, machine-readable format.
• Withdraw consent where processing is based on it.
• Lodge a complaint with the UAE Data Office or your local supervisory authority if you believe we have handled your data unlawfully.

To exercise any of these rights, email info@donaldcoin.ae. We respond within 30 days and may ask for proof of identity before acting on a request.

11. Children's privacy

The Site is not directed to children, and we do not knowingly collect personal data from anyone under 18. If we learn that we have collected data from a person under 18 without appropriate consent, we will delete it promptly.

12. Third-party links

The Site may link to third-party websites, including payment providers, couriers, and social platforms. We are not responsible for the privacy practices or content of those sites, and we recommend you read their privacy policies before providing personal data.

13. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the latest revision. Material changes will be highlighted on the Site. Continued use of the Site after the effective date of an update constitutes acceptance of the revised policy.

14. Contact

For questions, requests, or complaints about this Privacy Policy, contact us:

Donald Coins (a brand of Jatual Diamonds DMCC)
Email: info@donaldcoin.ae
Phone: +971 50 123 4567