PRIVACY POLICY

1. General Overview and Data Controller
We take the protection of your personal data seriously. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our online storefront, request gemstone sourcing services, or make a purchase. Under the Thailand Personal Data Protection Act (PDPA), the operator of this website (mooncity.gems / Watcharee Mayer) acts as the Data Controller.

2. Information We Collect
To process your gemstone purchases, international shipments, and sourcing requests, we collect the following personal data provided directly by you during the inquiry, checkout, or billing process:
Identity Data: Full name, passport/ID number (only if strictly required by international customs or carriers for high-value export and clearance documentation).
Contact Data: Physical shipping address, billing address, email address, and telephone number.
Transaction Data: Details about the specific natural gemstones purchased, carat weights, certificate numbers, and payment history.
Note on Payment Data: We do not store, view, or process your credit card, bank account, or payment details on our servers. All digital payments are handled securely through certified, third-party payment gateways and financial institutions.

3. How We Use Your Data
We use your personal data strictly for the following purposes:
Contract Fulfillment: To process your order, issue formal Proforma and Commercial Invoices, and securely ship your gemstones via insured international couriers.
Sourcing Services: To communicate directly with you regarding your custom gemstone procurement and sourcing requests.
Legal Compliance: To fulfill Thai export regulations, international customs declarations, and local accounting/tax requirements.

4. Data Sharing and International Transfers
Your data is strictly private and will never be sold or traded. However, to complete international transactions, we must share relevant data with trusted third parties:
Shipping Providers: International couriers (e.g., DHL Express, FedEx, Thailand Post EMS) receive your name, physical address, and phone number to ensure successful DAP (Delivered At Place) delivery.
Payment Processors: Authorized secure financial institutions and payment networks to process, verify, and complete your transaction.
Customs Authorities: Government customs agencies receive standard commercial invoice documentation for legal import/export clearance.

5. Data Retention and Your Rights
Retention: We retain transaction and financial records for as long as required to comply with Thai commercial, legal, and tax retention laws.
Your Rights: Under the Thai PDPA and international data standards, you have the right to access the personal data we hold about you, request corrections, or ask for its deletion, provided it does not conflict with our legal and tax record-keeping duties.

6. Updates and Contact
We may update this Privacy Policy from time to time to reflect changes in our services or legal obligations. For any questions regarding your data or to exercise your rights, please contact us directly via the official contact information provided on our website.