Last updated: September 8, 2026
GemGra ("we", "us", "our") operates the website https://www.gemgra.com (the "Site"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. By accessing or using the Site, you consent to the practices described below.
1. Information We Collect
1.1 Information You Provide
- Account Information: When you register, we collect your name, email address, and password.
- Order Information: When you place an order, we collect the recipient's name, phone number, shipping address, country, and email.
- Cart Data: Products you add to your cart are linked to your session and, where applicable, your account.
- Communications: Any emails or messages you send to us.
1.2 Information Collected Automatically
- Usage Data: We automatically record pages you visit, the time of your visit, time spent on each page, the page that referred you to our Site, and your approximate geographic location based on IP address.
- Device and Browser Information: We log your IP address, browser type (User-Agent), and language preference.
- Cookies: We use cookies to recognize returning visitors, remember your shopping cart, preserve your language selection, and measure aggregate traffic. A first-party visitor identifier (a randomly generated UUID) is stored in your browser for up to one year to help us compute unique visitor counts.
1.3 Payment Information
We do not store your full credit or debit card details. Payment transactions are processed by our third-party payment processors, PayPal and Stripe, under their respective privacy policies. We only receive confirmation of payment, the transaction reference, and a description of the charge as it appears on your statement.
2. How We Use Your Information
We use the information we collect to:
- Process and fulfill your orders, including shipping and returns;
- Provide customer support and respond to your inquiries;
- Send order confirmations, shipping updates, and service notifications by email;
- Operate, secure, and improve the Site and our internal analytics;
- Detect and prevent fraud, abuse, and unauthorized activity;
- Comply with our legal and regulatory obligations.
We do not sell your personal information to third parties.
3. Legal Basis for Processing (EU/UK Users)
Where we process personal data of users in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases:
- Performance of a contract — to process and deliver your orders (Article 6(1)(b) GDPR);
- Legitimate interests — to operate analytics, prevent fraud, and secure the Site (Article 6(1)(f) GDPR);
- Consent — for cookies and direct marketing where applicable (Article 6(1)(a) GDPR);
- Legal obligation — where required by law (Article 6(1)(c) GDPR).
4. Cookies and Tracking Technologies
We use the following categories of cookies:
We do not use third-party advertising cookies. You can disable cookies in your browser settings, but some Site features (such as the shopping cart) may not function correctly.
5. Third-Party Services
We may share limited information with the following categories of recipients:
- Payment Processors — PayPal and Stripe receive your payment instrument and billing details to authorize transactions. Their privacy policies apply: paypal.com/privacy and stripe.com/privacy.
- Logistics Carriers — We share the recipient's name, phone number, and shipping address with the courier delivering your order.
- Email Infrastructure — Our internal SMTP service sends transactional emails (order confirmations, shipping notices). Email address is used solely for delivery.
- GeoIP Lookup — To approximate visitor country, your IP address may be queried against a geolocation database. The result is cached for up to 30 days.
6. Data Retention
- Order records: Retained for the duration required by applicable tax, accounting, and consumer-protection laws (typically 5–10 years).
- Account information: Retained for as long as your account is active. You may request deletion at any time, subject to legal retention obligations.
- Cart and browsing data: Anonymous or session-level data is retained for up to 12 months for analytics.
- Server access logs: Retained for up to 12 months for security and audit purposes.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you;
- Correct inaccurate or incomplete data;
- Delete your personal data (subject to legal retention requirements);
- Restrict or object to processing;
- Port your data to another controller;
- Withdraw consent at any time where processing is based on consent;
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, contact us at gemgra@163.com.
8. International Data Transfers
Because we operate a cross-border e-commerce business, your information may be processed and stored on servers located outside your country of residence. We take reasonable steps to ensure such transfers comply with applicable data protection law, including by relying on Standard Contractual Clauses where required.
9. Children's Privacy
The Site is not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us so we can delete it.
10. Security
We use industry-standard measures to protect your information, including encrypted password storage, access controls, and HTTPS for data in transit. However, no method of transmission or storage is fully secure. We cannot guarantee absolute security.
11. Do Not Track Signals
Some browsers transmit "Do Not Track" signals. We do not currently respond to such signals in a different way than to standard traffic. This Site does not use third-party advertising networks that would leverage DNT.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be communicated through a prominent notice on the Site.
13. Contact Us
If you have any questions about this Privacy Policy or your personal data, please contact us:
- Email: gemgra@163.com