Privacy policy

Last updated: September 20, 2025

This Privacy Policy explains how Ossu (“Ossu”, “we”, “us”, “our”) collects, uses, shares, and safeguards your information when you visit www.ossu-diamonds.com (the “Site”), use our customer portal, contact us, or make a purchase.

We aim to keep this simple, respectful, and transparent.

Personal Information We Collect

a) Device & Browsing Data (automatically collected)

Examples: IP address, browser type/version, time zone, cookie identifiers, pages you view, referring/exit pages, on-site interactions, and general location (derived from IP).

Why we collect it: To load the Site properly, keep it secure, measure and improve performance, and personalize content/ads.

How it’s collected: Cookies, pixels, SDKs, log files, tags, and similar technologies.

b) Order & Account Data (you provide)

Examples: Name, billing/shipping address, email, phone, order details, payment method details (handled by our payment processors), and customer portal credentials.

Why we collect it: To provide products/services; process payments; arrange shipping/returns; send invoices and order updates; screen for fraud; and—when you opt in—send product updates or offers.

c) Support, Survey & UGC Data (you provide)

Examples: Messages to support, survey responses, product reviews, testimonials, photos/videos (including of your pet), and any other content you choose to share.

Why we collect it: To answer questions, improve our services, feature reviews (with your consent), and resolve issues.

We do not intentionally collect special categories of personal data about you (e.g., race, religion, health data) nor information about criminal convictions. If you voluntarily share sensitive information in free-text fields, you consent to our processing of that information for the purpose you provided it.

 

Cookies, Pixels & Similar Technologies

We (and our partners) use cookies and similar tools to operate the Site, keep it secure, remember preferences, analyze traffic, and personalize ads.

Types we use:

  • Strictly necessary: checkout, authentication, fraud prevention.
  • Functional: remember preferences (e.g., language, region).
  • Analytics: measure usage and performance (e.g., Google Analytics).
  • Advertising: deliver and measure ads (e.g., Meta, Google, TikTok).
  • Controls: Most browsers let you block/clear cookies. Blocking some cookies may impact Site functionality. You can also manage preferences via our cookie banner (where available) and use industry tools like the DAA (http://optout.aboutads.info) and NAI (http://www.networkadvertising.org/choices).

 

Cookies

A cookie is a small amount of information that’s downloaded to your computer or device when you visit our Site. We use a number of different cookies, including functional, performance, advertising, and social media or content cookies. Cookies make your browsing experience better by allowing the website to remember your actions and preferences (such as login and region selection). This means you don’t have to re-enter this information each time you return to the site or browse from one page to another. Cookies also provide information on how people use the website, for instance whether it’s their first time visiting or if they are a frequent visitor.

 

Behavioural Advertising

As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For example:

  • We use Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your Personal Information here: https://policies.google.com/privacy?hl=en. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
  • We share information about your use of the Site, your purchases, and your interaction with our ads on other websites with our advertising partners. We collect and share some of this information directly with our advertising partners, and in some cases through the use of cookies or other similar technologies (which you may consent to, depending on your location).

For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt-out of targeted advertising by:

Additionally, you can opt-out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.

 

How We Use Your Information

  • Provide & improve the service: take and fulfill orders; operate our portal; provide customer care; improve features and usability.
  • Payments & fraud prevention: process payments; detect/prevent fraudulent or abusive activity.
  • Shipping & logistics: arrange delivery/returns and provide tracking updates.
  • Marketing (with consent/where permitted): send product updates, launches, offers, and helpful content; personalize ads and measure effectiveness. You can unsubscribe anytime via email footer links.
  • Legal & compliance: comply with tax, accounting, and other legal obligations; enforce our terms; protect our rights, users, and the public.

We do not sell your personal information. Where “share” is defined under certain laws (e.g., cross-context behavioral advertising under California law), we may “share” data for advertising; see Your Rights to opt out.

 

Our Service Providers & Partners

We share information with trusted third parties who help us run Ossu. These providers only access what’s needed to perform their services, and they must protect it.

Examples include:

  • Website & hosting: Domain providers and website hosting services.
  • Payments & financing: Affirm and similar Buy Now, Pay Later/credit decisions.
  • Email & CRM: Email marketing and automation tools, help desk tools.
  • Analytics & ads: Google Analytics, Google Ads, Meta (Facebook/Instagram) Pixel, TikTok Ads, and similar.
  • Shipping: Carriers/couriers such as Canada Post, UPS, DHL, FedEx (as applicable).
  • Fraud/security: Tools that help detect and mitigate suspicious activity.

We may also disclose information if required by law (e.g., subpoena, lawful request), to protect our rights or safety, or in connection with a business transaction (e.g., merger, acquisition).

 

Lawful Bases (GDPR/UK GDPR)

If you are in the EEA/UK, we process your personal data on these bases:

  • Contract: to provide the products/services you request.
  • Consent: for certain marketing, cookies, and international transfers (where required).
  • Legitimate interests: to secure and improve our Site, prevent fraud/abuse, personalize and measure marketing, and run our business (balanced against your rights).
  • Legal obligation: to comply with applicable laws (e.g., tax/accounting).

 

International Transfers

We are a Canada-based business, and many of our third party providers operate globally (including the U.S. and EU). When we transfer personal information internationally, we use appropriate safeguards (e.g., Standard Contractual Clauses where applicable) and take steps to ensure an adequate level of protection.

 

Retention

  • Orders & invoices: retained for at least 7 years (tax/compliance) unless a longer period is required by law.
  • Accounts & portal data: retained while your account is active; deleted or anonymized after inactivity consistent with our retention schedules.
  • Marketing data: retained until you unsubscribe or your data is no longer needed for the purpose collected.
  • Support tickets/UGC: retained as long as reasonably necessary for support, safety, and audit purposes.

We may anonymize data so it can no longer identify you and use it indefinitely for analytics and improvement.

 

Automated Decision-Making

We do not engage in fully automated decisions that produce legal or similarly significant effects about you on our Site. Our processors may use limited automated tools to prevent fraud (e.g., temporary deny-lists for IPs/cards) and Buy Now, Pay Later providers such as Affirm may use automated processing to make financing decisions—subject to its own disclosures and your rights with that provider.

 

Your Rights

Your rights depend on where you live. We will honor requests as required by law and, where reasonable, beyond that.

Canada (PIPEDA & similar provincial laws)

Access, correction, withdrawal of consent (where applicable), and information about our practices. Contact us to exercise.

EEA/UK (GDPR/UK GDPR)

Access, rectification, erasure, restriction, portability, and objection (including to profiling/marketing), plus the right to withdraw consent. You may lodge a complaint with your local supervisory authority.

California (CCPA/CPRA)

Right to know/access, correct, delete, and opt-out of “sharing” for cross-context behavioral advertising. We do not “sell” personal information for money. Use the methods below to exercise your rights, including opting out of targeted advertising cookies/pixels. You may use an authorized agent (we may need to verify your identity/authority).

Verification: For security, we may request information to verify your identity before fulfilling a request.

How to exercise your rights (all regions):
Email hello@ossudiamonds.com with your request and region. For cookie/ads preferences, use our cookie banner (where available) and industry tools listed above. For email marketing, click Unsubscribe in any email.

 

Minors

Our Site and services are not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us to delete it.

 

Security

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information we handle (e.g., encryption in transit, access controls, least-privilege). No system is perfectly secure; please use unique, strong passwords and keep them confidential.

 

Third-Party Links

Our Site may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.

 

Do Not Track

Please note that because there is no consistent industry understanding of how to respond to “Do Not Track” signals, we do not alter our data collection and usage practices when we detect such a signal from your browser.

 

Changes to This Policy

We may update this Policy to reflect operational, legal, or regulatory changes. If we make material changes, we’ll post an updated version and revise the “Last updated” date.

 

Contact Us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by email at hello@ossudiamonds.com.