Canora Diamonds Inc.
Effective Date: 1 June 2026
Last Updated: 1 June 2026
1. Introduction
Canora Diamonds Inc. ("Canora Diamonds", "we", "us", or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you visit our website, create an account, purchase products, contact us, or otherwise interact with us.
This policy applies to customers and website visitors in Canada, the United States, and France (and the European Economic Area where applicable).
Data Controller
- Legal Name: Canora Diamonds Inc.
- Corporation Number: 1785487-1
- Registered Office: 33 Pindar Crescent, Toronto, Ontario M2J 3L3, Canada
- Policy Contact: policy@canoradiamonds.com
2. Information We Collect
2.1 Information You Provide
- Identity and contact data: Name, email address, phone number, billing and shipping addresses.
- Account data: Login credentials, order history, wishlist items, preferences.
- Transaction data: Products purchased, payment method (we do not store full card numbers), order value, delivery details.
- Communication data: Messages sent via contact forms, live chat, email, or customer service.
- Identity verification data: Government-issued ID or proof of address where required for high-value orders or security purposes.
- Custom order data: Ring sizes, engraving text, design preferences, diamond specifications.
2.2 Information Collected Automatically
- Technical data: IP address, browser type, device type, operating system, time zone.
- Usage data: Pages visited, products viewed, click paths, referral sources, session duration.
- Cookie and tracking data: As described in our Cookie Policy.
2.3 Information from Third Parties
- Payment processors (transaction confirmation, fraud screening results).
- Shipping carriers (delivery status, tracking information).
- Marketing and analytics partners (aggregated campaign performance).
- Social media platforms (if you interact with our social accounts or use social login).
3. How We Use Your Information
We use personal information to:
| Purpose | Legal Basis (GDPR — France/EU) |
|---|---|
| Process and fulfil orders | Contract performance |
| Provide customer support | Contract performance / Legitimate interests |
| Send order confirmations and delivery updates | Contract performance |
| Process payments and prevent fraud | Contract performance / Legitimate interests / Legal obligation |
| Verify identity for high-value transactions | Legitimate interests / Legal obligation |
| Send marketing communications (with consent) | Consent |
| Improve our website and customer experience | Legitimate interests |
| Comply with legal and regulatory obligations | Legal obligation |
| Enforce our Terms and Conditions | Legitimate interests / Legal obligation |
We do not sell your personal information to third parties.
4. Marketing Communications
With your consent (or as permitted by applicable law), we may send you emails about new collections, promotions, and jewellery care tips. You may unsubscribe at any time using the link in any marketing email or by contacting policy@canoradiamonds.com.
French and EU customers: marketing emails require prior opt-in consent in accordance with GDPR and French data protection law.
5. How We Share Your Information
We share personal information only as necessary with:
- Payment processors (e.g., Shopify Payments, Stripe, PayPal) to process transactions.
- Shipping and logistics partners to deliver your orders.
- IT and hosting providers (including Shopify Inc.) who process data on our behalf under data processing agreements.
- Professional advisers (lawyers, accountants, insurers) under confidentiality obligations.
- Law enforcement or regulators when required by law or to protect our legal rights.
- Business transferees in connection with a merger, acquisition, or sale of assets (with notice to you where required).
We require all service providers to protect your information and use it only for the purposes we specify.
6. International Data Transfers
Canora Diamonds Inc. is based in Canada. Your information may be transferred to and processed in Canada, the United States, and other countries where our service providers operate.
France / EU: Where personal data is transferred outside the European Economic Area, we implement appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, or rely on adequacy decisions where applicable.
Canada: Canada is recognised by the European Commission as providing an adequate level of data protection for transfers from the EEA.
7. Data Retention
We retain personal information only as long as necessary for the purposes described in this policy:
| Data Type | Retention Period |
|---|---|
| Order and transaction records | 7 years (tax and accounting requirements) |
| Account data | Duration of account + 2 years after closure |
| Marketing consent records | Duration of consent + 3 years |
| Customer service communications | 3 years |
| Website analytics | 26 months (or as configured) |
| Identity verification documents | 2 years after order completion |
We may retain information longer where required by law or to resolve disputes.
8. Your Rights
8.1 All Customers
You may request access to, correction of, or deletion of your personal information by contacting policy@canoradiamonds.com. We will respond within the timeframes required by applicable law.
8.2 Canadian Residents (PIPEDA)
Under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, you have the right to:
- Access your personal information held by us;
- Challenge the accuracy and completeness of your information;
- Withdraw consent (subject to legal or contractual restrictions);
- File a complaint with the Office of the Privacy Commissioner of Canada at https://www.priv.gc.ca.
8.3 United States Residents
California (CCPA/CPRA): California residents have the right to know what personal information we collect, request deletion, opt out of the sale or sharing of personal information (we do not sell personal information), and not be discriminated against for exercising these rights. Submit requests to policy@canoradiamonds.com.
Residents of other US states with applicable privacy laws (Virginia, Colorado, Connecticut, Utah, and others) may have similar rights. Contact us to exercise them.
8.4 French and EU Residents (GDPR)
Under the General Data Protection Regulation, you have the right to:
- Access your personal data;
- Rectification of inaccurate data;
- Erasure ("right to be forgotten") in certain circumstances;
- Restriction of processing;
- Data portability in a structured, machine-readable format;
- Object to processing based on legitimate interests or for direct marketing;
- Withdraw consent at any time (without affecting prior lawful processing);
- Lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés) at https://www.cnil.fr.
To exercise your rights, email policy@canoradiamonds.com. We will respond within one month (extendable by two months for complex requests).
9. Security
We implement appropriate technical and organisational measures to protect your personal information, including:
- SSL/TLS encryption for data transmitted through our website;
- Secure payment processing through PCI-DSS compliant providers;
- Access controls limiting employee access to personal data;
- Regular review of our security practices.
No method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your information.
10. Children's Privacy
Our website and services are not directed at children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact policy@canoradiamonds.com immediately.
11. Third-Party Links
Our website may contain links to third-party websites (e.g., social media, payment providers). We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies.
12. Automated Decision-Making
We do not use automated decision-making or profiling that produces legal or similarly significant effects on you, except for fraud prevention screening which may result in order review or cancellation.
13. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last Updated" date will reflect the most recent revision. Material changes will be posted on our website and, where required by law, we will seek your renewed consent.
14. Contact Us
For privacy-related questions, requests, or complaints:
Policy Contact
Canora Diamonds Inc.
33 Pindar Crescent
Toronto, Ontario M2J 3L3
Canada
Email: policy@canoradiamonds.com
For general enquiries: contact@canoradiamonds.com
For order and product support: support@canoradiamonds.com
This Privacy Policy should be reviewed by qualified legal counsel in Canada, the United States, and France before publication.