3.1.1 Niobim Diamonds DMCC (“Company,” “we,” “our,” or “us”) is committed to protecting the privacy of its customers (“Users,” “you”) and maintaining the highest standards of confidentiality and security regarding personal data collected through www.niobim.com (the “Website”).

3.1.2 This Privacy Policy outlines how we collect, use, disclose, and protect User information in accordance with:
Federal Decree-Law No. 45 of 2021 (UAE Personal Data Protection Law – PDPL)
Federal Decree-Law No. 20 of 2018 on Anti-Money Laundering (AML) and Counter-Terrorism Financing (CTF)
Dubai Multi Commodities Centre (DMCC) Regulations on precious stones and jewellery trade
Applicable international privacy and data security best practices.

3.1.3 Acceptance of this Policy
By accessing and using the Website, you consent to the practices described in this Privacy Policy. If you do not agree to these terms, you must discontinue using the Website immediately.

3.1.4 Policy Updates
The Company reserves the right to modify or update this Privacy Policy at any time to reflect changes in legal requirements or business practices. The latest version will always be available on the Website, and continued use after any modifications constitutes acceptance of the revised terms.

3.2.1 Personal Data Provided by Users
When you interact with the Website, we may collect the following personal data:
Identity Information: Full name, nationality, date of birth (KYC purposes)
Contact Information: Email address, phone number, billing and shipping addresses
Payment Information: Credit/debit card details (processed securely via third-party payment gateways)
Account Information: Login credentials, order history, communication preferences.

3.2.2 Automatically Collected Data
When you browse the Website, we may collect:
Device Information: IP address, browser type, operating system
Usage Data: Pages visited, time spent on the Website, referral sources
Cookies & Tracking Technologies: To improve User experience, security, and Website performance.

3.2.3 Regulatory Compliance Data (For High-Value Transactions)
In compliance with UAE AML & CTF regulations and DMCC Free Zone rules, we may collect:
Government-issued identification (passport, Emirates ID)
Proof of Address (utility bill, bank statement)
Business details (for corporate purchases)
This information is required for regulatory verification before processing high-value transactions.

3.3.1 We process personal data strictly for legitimate business purposes, including:
Fulfilling and managing orders (processing payments, shipping, customer service)
Identity verification and fraud prevention
Regulatory compliance with AML laws governing high-value jewellery transactions
Enhancing customer experience by personalizing content and recommendations
Marketing communications (only if explicit consent is provided)

3.3.2 No Unauthorized Data Usage
We do not sell, rent, or share your personal data with third parties for direct marketing purposes.
Your data will not be disclosed except as required for fulfilling transactions or regulatory compliance (see Section 3.4).

3.4.1 Who We Share Data With
To facilitate seamless transactions and maintain the highest security standards, we may share data with:
Payment Processors & Banks (e.g., ADIB, Visa, Mastercard) → for secure transaction processing
Shipping & Logistics Partners → for order delivery and tracking
Regulatory Authorities (DMCC, UAE Central Bank, Financial Intelligence Unit) → when required by law.

3.4.2 Legal & Fraud Prevention Disclosures
If fraud, financial crimes, or regulatory violations are suspected, we reserve the right to report data to law enforcement agencies.
We comply with AML and KYC (Know Your Customer) obligations as required under UAE precious stones and jewellery trading laws.

3.4.3 International Data Transfers
If your data needs to be transferred outside the UAE, we ensure compliance with applicable international privacy standards (e.g., GDPR, PDPL equivalency requirements).
Cross-border data transfers will only occur where adequate data protection mechanisms exist.

3.5.1 How We Protect Your Data
We implement stringent security measures to prevent unauthorized access, alteration, or disclosure:
SSL Encryption → Secure transmission of sensitive information
PCI-DSS Compliance → Industry-standard security for payment card processing
Secure Data Storage → Servers with restricted access and advanced firewalls
Regular Security Audits → To uphold compliance with UAE cybersecurity laws

3.5.2 Data Retention Policy
Personal data is retained only as long as necessary for legitimate business and legal purposes.
Transactional data may be stored for up to 5 years to comply with UAE AML & tax regulations.
Users may request data deletion, subject to legal retention requirements.

3.6.1 Users have the right to:
Access their personal data and request a copy
Correct inaccuracies in their personal information
Request deletion (“Right to Be Forgotten”), subject to legal limitations
Restrict processing for certain activities (e.g., marketing opt-out)
Withdraw consent for non-essential data processing

3.6.2 To exercise these rights, Users may contact:
Email: info@niobim.com

3.7.1 The Website uses cookies for:
Enhancing User experience through personalized content
Ensuring secure transactions and fraud prevention
Analyzing Website performance and improving services

3.7.2 Users may disable cookies via browser settings, but certain Website features may become unavailable.

3.8.1 The Company reserves the right to update this Privacy Policy in response to:
Changes in UAE privacy laws and financial regulations
Amendments in jewellery trade compliance standards
Revisions to ADIB and Payment Gateway Provider requirements

3.8.2 Users will be notified of updates via:
Email (for registered Users)
Website notifications

3.8.3 Continued use of the Website after changes are published constitutes acceptance of the updated Policy.

3.9.1 For any privacy concerns, data requests, or security inquiries, please contact:
Niobim Diamonds DMCC
Email: info@niobim.com
Address: Almas Tower, Jumeirah Lakes Towers, Dubai, UAE

This Privacy Policy is governed by UAE Federal Data Protection Laws, DMCC Free Zone Regulations, and applicable international privacy standards.
Any disputes arising from this Policy shall be resolved under the jurisdiction of the Dubai Courts and UAE legal framework.