Privacy notice

Last updated: 19 October 2026

Who I am

Diamantic is the trading name of Christopher Learey, a sole trader (empresário em nome individual) in Lisbon, Portugal. NIF 312529570, Rua Dona Filipa de Vilhena 6, 3.º D, 1000-135 Lisboa, Portugal. I am the “controller” of the personal data described here, which means I decide why and how it is used. Write to me at chris@diamantic.ai about anything below.

What I collect, why, and on what legal basis

• Your work email and website address, and the three answers after them (your website’s platform, whether you have a diamond supplier account, the plan you are interested in), when you send the founding-place form.

  Why

  To reply about your place, check you are a jeweller, arrange a call and, if you go ahead, set Diamantic up for you.

  Legal basis

  Legitimate interests: answering a business enquiry you sent me (GDPR Art. 6(1)(f)). If you are a sole trader, also steps you ask for before a contract (Art. 6(1)(b)).

• The address of the page you were on, and technical details the form service records, such as your IP address and browser.

  Why

  To deliver your message and block spam.

  Legal basis

  Legitimate interests (Art. 6(1)(f)).

• What you send me by email or WhatsApp, including your phone number if you use WhatsApp.

  Why

  To answer you.

  Legal basis

  As for the form above.

• Page-view counts and server logs (which include your IP address) when you open this site.

  Why

  To see which parts of the page work, and to keep the site running and secure.

  Legal basis

  Legitimate interests (Art. 6(1)(f)).

• Invoices and payment records, once you are a customer.

  Why

  Tax and accounting law.

  Legal basis

  Legal obligation (Art. 6(1)(c)).

I use your email only to reply about your place and the founding offer. If I ever want to send you anything else, such as a newsletter, I will ask first. I do not sell your data and I make no automated decisions about you.

If I emailed you first

If you heard from me before you had contacted me, this is where your details came from and what I do with them.

• Where I got them: your business’s own public website.
• What I hold: your work email address, your name and your business’s name and website where the website gives them, and anything we write to each other.
• Why: to offer Diamantic to your business.
• Legal basis: legitimate interests (GDPR Art. 6(1)(f)): telling a jeweller’s business about a service made for it.
• How long: deleted 12 months after our last contact, unless you become a customer. If you ask me to stop, I keep only your email address, on a do-not-contact list, so that you are never emailed again.
• Your right to object: at any time. Reply “remove me” and I will stop.

Your other rights, and how to complain, are the same as for anyone else; they are set out below.

Who handles it for me, and where it goes

Formspree and Vercel are US companies, so your data leaves the EU and the UK; Google and WhatsApp may also move data to the US. For each I rely on the safeguard shown.

• Formspree, Inc. runs the founding-place form. It receives what you type, emails it to me and stores it. Formspree says it relies on the EU Standard Contractual Clauses.
• Vercel Inc. hosts this site and counts page views, without cookies. Vercel says it complies with the EU-US Data Privacy Framework and its UK and Swiss extensions, and its contract terms include the Standard Contractual Clauses.
• Google (Google Workspace) runs my email, so it holds what you email me and what I send you. Google acts on my instructions under its data processing terms, which use Standard Contractual Clauses or an equivalent transfer arrangement.
• WhatsApp (Meta). If you message me on WhatsApp, WhatsApp handles that message under its own privacy policy. I see only what you send.

No other service receives your data from this site. You can ask me for a copy of the safeguards, using the email address above.

How long I keep it

Founding-place and enquiry details: 24 months after our last contact, then deleted. Details from an email I sent first: 12 months after our last contact (see “If I emailed you first”). Customer records: while you are a customer, then for as long as Portuguese tax law requires me to keep invoices and accounts. Page-view data is not tied to you, and the visit identifier is discarded after 24 hours. If you ask me to delete your details sooner, I will, unless the law requires me to keep them.

Your rights

You can ask me to show you the data I hold about you, correct it, delete it, limit how I use it, give you a copy to move elsewhere, or stop using it where I rely on legitimate interests. Email chris@diamantic.ai. I will reply within one month. These rights come from the EU GDPR (Articles 15 to 21) and are the same under the UK GDPR.

Complaints

You can complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD) (how to complain), or to the authority in your own country. In the UK that is the Information Commissioner’s Office (ICO). I would be glad to put it right first.

Cookies

This site sets no cookies and stores nothing on your device, so there is no cookie banner. If that changes I will update this notice first and ask for your consent where the law requires it.

Do you have to give me this?

I can’t reply about a place without your email address and website. The three questions after them are optional: close the form instead of pressing Finish, and they are never sent.

If you are in the UK

The UK GDPR and the Data Protection Act 2018 also apply to how I handle your data. Your rights are the same.

Changes

When this notice changes I will change the date at the top.