Privacy policy

Last updated: August 6, 2026

This Privacy Policy explains how Ossu Diamonds Inc. ("Ossu", "we", "us", "our") collects, uses, shares, and safeguards your information when you visit www.ossu-diamonds.com (the "Site"), use our customer portal, contact us, subscribe to our text messaging program, or make a purchase.

We aim to keep this simple, respectful, and transparent.

1. Personal Information We Collect

a) Device and Browsing Data (automatically collected)

Examples: IP address, browser type/version, time zone, cookie identifiers, pages you view, referring/exit pages, on-site interactions, and general location (derived from IP).

Why we collect it: To load the Site properly, keep it secure, measure and improve performance, and personalize content and ads.

How it's collected: Cookies, pixels, SDKs, log files, tags, and similar technologies.

b) Order and Account Data (you provide)

Examples: Name, billing/shipping address, email, phone, order details, payment method details (handled by our payment processors), and customer portal credentials.

Why we collect it: To provide products and services; process payments; arrange shipping and returns; send invoices and order updates; screen for fraud; and, when you opt in, send product updates or offers.

c) Support, Survey and UGC Data (you provide)

Examples: Messages to support, survey responses, product reviews, testimonials, photos and videos (including of your pet), and any other content you choose to share.

Why we collect it: To answer questions, improve our services, feature reviews (with your consent), and resolve issues.

d) SMS Program Data (you provide)

Examples: Your mobile phone number, the date and time you gave consent, the web page or form on which consent was given, your message history with our team, and your opt-in and opt-out status.

Why we collect it: To send you the text messages you have consented to receive, to respond to your replies, and to maintain a record demonstrating that consent was properly obtained and honoured.

We do not intentionally collect special categories of personal data about you (e.g., race, religion, health data) nor information about criminal convictions. If you voluntarily share sensitive information in free-text fields, you consent to our processing of that information for the purpose you provided it.

2. Cookies, Pixels and Similar Technologies

A cookie is a small amount of information downloaded to your computer or device when you visit our Site. Cookies make your browsing experience better by allowing the website to remember your actions and preferences (such as login and region selection), so you don't have to re-enter this information each time you return or move between pages. Cookies also tell us how people use the website, for instance whether it's a first visit or a return visit.

We and our partners use cookies and similar tools to operate the Site, keep it secure, remember preferences, analyze traffic, and personalize ads.

Types we use:

• Strictly necessary: checkout, authentication, fraud prevention. These cannot be disabled.

• Functional: remember preferences such as language and region.

• Analytics: measure usage and performance, for example Google Analytics.

• Advertising: deliver and measure ads, for example Meta, Google, and TikTok.

Controls: Most browsers let you block or clear cookies. Blocking some cookies may impact Site functionality. You can also manage preferences via our cookie banner (where available) and use industry tools like the DAA (http://optout.aboutads.info) and NAI (http://www.networkadvertising.org/choices).

Cookies and advertising technologies never have access to your mobile phone number or SMS consent data. See Section 7.

3. Behavioural Advertising

We use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For example:

• We use Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your Personal Information here: https://policies.google.com/privacy?hl=en. You can opt out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

• We share information about your use of the Site, your purchases, and your interaction with our ads on other websites with our advertising partners. We collect and share some of this information directly with our advertising partners, and in some cases through the use of cookies or similar technologies (which you may consent to, depending on your location).

This advertising sharing excludes mobile phone numbers and SMS opt-in data, which are never shared with advertising partners or any other third party for marketing purposes. See Section 7.

For more information about how targeted advertising works, visit the Network Advertising Initiative's educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising by:

• Facebook: https://www.facebook.com/settings/?tab=ads

• Google: https://www.google.com/settings/ads/anonymous

• Digital Advertising Alliance: http://optout.aboutads.info/

4. SMS and Text Messaging Program

If you provide your mobile phone number and check the SMS consent box on one of our forms, at checkout, or on a landing page, you give Ossu Diamonds Inc. your express written consent to send you text messages at that number, including messages sent using an automatic telephone dialing system.

Types of messages you may receive: order and production updates, confirmation that we have received your Welcome Kit and sample, shipping and delivery notifications, customer care replies, appointment and consultation reminders, account and transactional notices, and, where you have separately consented, promotional offers and product news.

Consent is optional. Consent to receive text messages is never a condition of purchasing any product or service from us.

Message frequency. Message frequency varies based on your order status and your interactions with us.

Message and data rates. Message and data rates may apply. These are charged by your wireless carrier, not by us. Contact your carrier for details of your plan.

How to opt out. Reply STOP to any message to stop receiving text messages from us. You will receive a single confirmation message, after which no further messages will be sent. Reply HELP for help, or email hello@ossudiamonds.com. Opting out of text messages does not opt you out of transactional email about an order you have placed.

Age requirement. You must be at least 18 to subscribe to our text messaging program.

Carrier liability. Mobile carriers are not liable for delayed or undelivered messages.

What we record. We record your mobile number, the exact date and time of consent, the URL of the form on which consent was collected, and your subsequent opt-in and opt-out events, in order to demonstrate compliance.

No sharing. No mobile information, phone numbers, or SMS consent will be shared with or sold to third parties or affiliates for marketing or promotional purposes. See Section 7 for full detail.

5. How We Use Your Information

• Provide and improve the service: take and fulfill orders; operate our portal; provide customer care; improve features and usability.

• Payments and fraud prevention: process payments; detect and prevent fraudulent or abusive activity.

• Shipping and logistics: arrange delivery and returns and provide tracking updates.

• Text messaging: send the messages described in Section 4 to individuals who have consented, and respond to replies.

• Marketing (with consent, where permitted): send product updates, launches, offers, and helpful content; personalize ads and measure effectiveness. You can unsubscribe anytime via email footer links or by replying STOP to text messages.

• Legal and compliance: comply with tax, accounting, and other legal obligations; enforce our terms; protect our rights, users, and the public.

We do not sell your personal information. Where "share" is defined under certain laws (for example, cross-context behavioral advertising under California law), we may "share" browsing and purchase data for advertising, and you can opt out as described in Section 12. Mobile phone numbers and SMS consent data are excluded from all such sharing without exception.

6. Our Service Providers and Partners

We share information with trusted third parties who help us run Ossu. These providers only access what is needed to perform their services, are bound by contract to protect it, and are prohibited from using it for their own purposes.

Examples include:

• Website and hosting: domain providers and website hosting services.

• Payments and financing: Affirm and similar Buy Now, Pay Later and credit decision providers.

• Email, SMS and CRM: email marketing and automation tools, our text messaging platform, and help desk tools.

• Analytics and ads: Google Analytics, Google Ads, Meta (Facebook/Instagram) Pixel, TikTok Ads, and similar.

• Shipping: carriers and couriers such as Canada Post, UPS, DHL, and FedEx, as applicable.

• Fraud and security: tools that help detect and mitigate suspicious activity.

Your mobile phone number is disclosed only to the messaging platform that delivers text messages on our behalf, strictly for the purpose of delivering those messages, and to no one else. It is not disclosed to analytics providers, advertising partners, or affiliates.

We may also disclose information if required by law (for example, a subpoena or lawful request), to protect our rights or safety, or in connection with a business transaction such as a merger or acquisition.

7. What We Never Share

No mobile information, phone numbers, or SMS consent will be shared with or sold to third parties or affiliates for marketing or promotional purposes.

Text messaging originator opt-in data and consent are not shared with any third party except the service provider that delivers messages on our behalf, and that provider is contractually prohibited from using the information for any other purpose. This exclusion applies to every other category of sharing described in this Policy, including advertising and analytics.

We do not sell your personal information. We do not share it with third parties for their own marketing, advertising, or profiling purposes. We do not disclose the personal details you entrust to us about you or your loved one to anyone outside our company, except as strictly necessary to fulfill your order or as required by law.

We understand that the information you share with us is deeply personal. We treat it as confidential.

8. Lawful Bases (GDPR / UK GDPR)

If you are in the EEA or UK, we process your personal data on these bases:

• Contract: to provide the products and services you request.

• Consent: for certain marketing, text messaging, cookies, and international transfers where required.

• Legitimate interests: to secure and improve our Site, prevent fraud and abuse, personalize and measure marketing, and run our business, balanced against your rights.

• Legal obligation: to comply with applicable laws such as tax and accounting requirements.

9. International Transfers

We are a Canada-based business, and many of our third party providers operate globally, including in the U.S. and EU. When we transfer personal information internationally, we use appropriate safeguards such as Standard Contractual Clauses where applicable and take steps to ensure an adequate level of protection.

10. Retention

• Orders and invoices: retained for at least 7 years for tax and compliance purposes unless a longer period is required by law.

• Accounts and portal data: retained while your account is active; deleted or anonymized after inactivity consistent with our retention schedules.

• Marketing data: retained until you unsubscribe or your data is no longer needed for the purpose collected.

• SMS consent records: retained for at least 4 years following opt-out, in order to demonstrate that consent was validly obtained and honoured.

• Support tickets and UGC: retained as long as reasonably necessary for support, safety, and audit purposes.

We may anonymize data so it can no longer identify you and use it indefinitely for analytics and improvement.

11. Automated Decision-Making

We do not engage in fully automated decisions that produce legal or similarly significant effects about you on our Site. Our processors may use limited automated tools to prevent fraud, such as temporary deny-lists for IPs or cards, and Buy Now, Pay Later providers such as Affirm may use automated processing to make financing decisions, subject to their own disclosures and your rights with that provider.

12. Your Rights

Your rights depend on where you live. We will honor requests as required by law and, where reasonable, beyond that.

All users, at any time:

• Stop text messages: reply STOP to any message from us, or email hello@ossudiamonds.com.

• Unsubscribe from marketing email: click Unsubscribe in any email footer.

• Update your information: email us to correct your contact details or order information.

Canada (PIPEDA and similar provincial laws): access, correction, withdrawal of consent where applicable, and information about our practices.

EEA / UK (GDPR / UK GDPR): access, rectification, erasure, restriction, portability, and objection including to profiling and marketing, plus the right to withdraw consent. You may lodge a complaint with your local supervisory authority.

California (CCPA / CPRA): the right to know and access, correct, delete, and opt out of "sharing" for cross-context behavioral advertising. We do not "sell" personal information for money. You may use an authorized agent, and we may need to verify your identity or their authority.

Verification: For security, we may request information to verify your identity before fulfilling a request.

How to exercise your rights (all regions): Email hello@ossudiamonds.com with your request and region. For cookie and ads preferences, use our cookie banner where available and the industry tools listed above. We will respond within 30 days.

13. Age Requirements

Our Site and services are intended for adults. You must be at least 18 years of age to place an order, use our customer portal, or subscribe to our text messaging program. We do not knowingly collect personal information from anyone under 18, and we do not knowingly send text messages to anyone under 18. If you believe a minor has provided us information, please contact us and we will delete it.

14. Security

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information we handle. These include:

• Encryption of data in transit using TLS across our Site, forms, portal, and checkout.

• Encryption of data at rest by our hosting, e-commerce, and payment providers.

• Access controls on a least-privilege basis, so staff can reach personal information only where their role requires it, protected by unique credentials and multi-factor authentication.

• Payment card data handled exclusively by PCI DSS compliant payment processors. We do not store full card numbers on our systems.

• Review of vendor security practices and contractual data protection obligations before onboarding.

• Secure deletion or anonymization of personal information once the retention periods in Section 10 have elapsed.

No system is perfectly secure. Please use unique, strong passwords and keep them confidential. If we become aware of a breach creating a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by law.

15. Third-Party Links

Our Site may include links to third-party websites, plug-ins, and applications. Clicking those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.

16. Do Not Track and Global Privacy Control

Because there is no consistent industry understanding of how to respond to "Do Not Track" signals, we do not alter our data collection and usage practices when we detect such a signal from your browser.

Where required by applicable law, we do honour Global Privacy Control (GPC) signals as a valid request to opt out of the sharing of personal information for cross-context behavioral advertising.

17. Changes to This Policy

We may update this Policy to reflect operational, legal, or regulatory changes. If we make material changes, we will post an updated version and revise the "Last updated" date.