Cookie policy

This policy explains how Ceylora Gem Exchange uses cookies and similar technologies (such as local storage) on our website. It should be read together with our Privacy policy. Under UK GDPR, EU GDPR, and ePrivacy rules, non-essential cookies require your consent before they are placed on your device.

GDPR-aligned draft for prototyping — obtain qualified legal review before production use.

What are cookies and similar technologies?

Cookies are small text files placed on your device when you visit a website. We also use similar technologies such as local storage in your browser (for example to remember items in your enquiry bag during this prototype).

First-party cookies are set by us. Third-party cookies are set by another domain (for example embedded imagery or analytics providers).

Legal basis

Strictly necessary cookies and storage are used based on our legitimate interests (or your request to use the service) because the site cannot function securely without them. Consent is not required for these under ePrivacy exemptions, but we still list them for transparency.
Functional cookies that remember preferences beyond what is strictly necessary may rely on consent where required.
Analytics and marketing cookies rely on consent before activation in the UK and EEA.

For broader processing of personal data, see our Privacy policy.

Cookies and storage we use

The table below describes technologies used or planned on the production platform. Names may change when we launch; this notice will be updated accordingly.

Name / type	Category	Purpose	Duration	Provider
Session / auth tokens	Strictly necessary	Keep you signed in securely to your trade account	Session or up to 30 days	Ceylora (first party)
Security / CSRF	Strictly necessary	Protect forms and prevent abuse	Session	Ceylora (first party)
enquiry-bag (local storage)	Functional	Remember gemstones added to your enquiry bag in the browser	Until you clear site data	Ceylora (first party)
cookie_consent	Strictly necessary	Record your cookie choices	12 months	Ceylora (first party)
Analytics (e.g. _ga)	Analytics	Understand aggregated traffic and improve the site	Up to 24 months	Third party — only after consent
Embedded media hosts	Third party	Display gemstone imagery from external CDNs	Varies by provider	Image host (e.g. Unsplash)

Prototype notice: A full consent banner and preference centre will be implemented before production launch in jurisdictions that require it. Until then, only strictly necessary and functional storage used for core browsing may be active on this demo site.

Third-party cookies

Third parties may set cookies when you interact with embedded content or when we enable optional analytics. Those providers process data under their own privacy policies. We minimise third-party scripts on trade and account pages.

How to manage your choices

You can control cookies in several ways:

Consent tool — when live, use the cookie banner or preference centre on the site to accept or reject non-essential categories.
Browser settings — block or delete cookies; see help for Chrome, Firefox, Safari, or Edge. Blocking all cookies may break sign-in and enquiry features.
Local storage — clear site data for this domain in your browser to reset enquiry bag contents.
Industry opt-outs — for some advertising cookies, visit Your Online Choices (EU) or the UK equivalent when applicable.

Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

Your rights

Personal data collected via cookies may be subject to the rights described in our Privacy policy, including access, erasure, and objection. Contact trade@ceylora.global.

Updates

We will update this policy when we add or remove technologies or change legal requirements. Check the last updated date at the top of this page.