1. Overview & Scope
Welcome to GemPin.net ("GemPin", "we", "us", or "our"), an online global directory, discovery platform, and interactive geospatial mapping ecosystem for gemstone dealers, miners, lapidaries, gemologists, jewelry businesses, and enthusiasts worldwide.
GemPin.net is owned, operated, and maintained by xBlackRock (Pvt) Ltd (Company Registration No: PV00371872), a private limited company incorporated under the Companies Act No. 7 of 2007 of the Democratic Socialist Republic of Sri Lanka, headquartered at 140/1/1, Colombo Road, Ratnapura. For the purposes of international data protection laws, xBlackRock (Pvt) Ltd serves as the legal entity and primary Data Controller.
This Privacy Policy applies to all users accessing or using https://www.gempin.net, our mobile interfaces, APIs, and affiliated services. By creating an account, submitting directory listings, or browsing our map, you acknowledge and agree to the data collection and usage practices outlined herein.
2. Information We Collect
We collect information necessary to provide a rich, verifiable, and secure directory experience:
A. Account Credentials
- Full Name and Email Address
- Cryptographically hashed passwords (never stored in plain text)
- Profile registration timestamps and verification statuses
B. Public Directory & Map Data
- Business/Trade name and gemstone specialization
- Geographic coordinates (latitude, longitude) for map pins
- Physical address, city, and country of operation
- Public contact telephone numbers and WhatsApp links
- Public website and social business links
C. Uploaded Media
- Storefront, workshop, or personal profile images
- Gemstone showcase media and laboratory certifications
- Sanitized file metadata to prevent exposure of sensitive EXIF data
D. Automated & Analytics Data
- Browser user-agent, device specifications, and OS
- IP address and approximate regional location
- Google Analytics (gtag.js) aggregated interaction metrics
3. How We Use Your Information
GemPin.net utilizes your collected information strictly for legitimate business and platform operations:
- Directory & Map Display: Displaying your verified gem trade listing and pin coordinates on the interactive global map for potential buyers, clients, and collaborators.
- Authentication & Security: Authenticating member sessions, preventing brute force logins, validating password resets, and detecting bot activity.
- Communication: Transmitting essential account alerts, email verifications, and customer support responses via WhatsApp or email.
- Service Enhancement: Analyzing aggregate traffic patterns to optimize performance, page load times, and mobile responsiveness.
4. Public Nature of Directory Listings
Please be aware that GemPin.net is by design a public directory and networking ecosystem. Information you explicitly choose to include in your member profile—such as your trade name, gemstone categories, business phone/WhatsApp, physical location, and map coordinates—is publicly visible to visitors across the globe.
* Private data such as your login password, internal verification documents, and administrative notes are strictly encrypted and never revealed publicly.
5. Cookies & Third-Party Service Providers
We do not sell, rent, or trade your personal information to third-party data brokers or marketing agencies. We engage trusted third-party technical providers solely to host, secure, and operate our platform:
- Cloudflare: Provides global Content Delivery Network (CDN), DDoS mitigation, SSL encryption, and firewall security.
- Google Analytics (gtag.js): Generates anonymous analytics to help us comprehend web traffic without storing sensitive personal profiles.
- Mapping Tile Providers (e.g., OpenStreetMap/Leaflet): Renders interactive geospatial map tiles when users navigate the directory.
- Transactional Email Relays: Delivers account activation and password reset emails securely.
6. Your Rights & Data Control (GDPR & Global Rights)
Regardless of your country of residence, we respect your rights regarding your personal data:
- Right to Access & Edit: You may edit your profile information, phone numbers, addresses, and images at any time by signing into your profile dashboard.
- Right to Erasure (Right to Be Forgotten): You have the right to request the complete deletion of your account and removal of your map pin.
- Right to Opt-Out: You may request removal from any promotional or informational mailing lists.
To submit a data deletion or inquiry request, contact our administrative compliance desk at [email protected].
7. Security Architecture
In accordance with our strict security guidelines, GemPin.net implements robust technical and administrative safeguards:
- HTTPS/TLS Encryption: All transit communication between your browser and our servers is strictly encrypted using Cloudflare Universal SSL.
- Secure Cookie Flags: Authentication sessions enforce HttpOnly, Secure, and SameSite attributes to protect against Cross-Site Scripting (XSS) and session hijacking.
- Database Hardening: Password hashing uses modern cryptographically secure algorithms, and database queries use strict parameterization to prevent injection vulnerabilities.
8. Contact Our Privacy & Compliance Office
For any questions, legal inquiries, or data rights requests concerning this Privacy Policy, please reach out to our corporate office:
140/1/1, Colombo Road,
Ratnapura, Sri Lanka