Privacy Policy
Last Updated: August 26, 2026
Balzan Gem Laboratories ("Company," "We," "Us," or "Our") operates the Balzan Gem Lab website, accessible at balzangemlab.com (the "Website" or "Service").
This Privacy Policy explains how We collect, use, disclose, retain, protect, and otherwise process Personal Data and Personal Information when You access or use the Service. It also explains certain privacy rights available to You under applicable law, including the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), the California Online Privacy Protection Act ("CalOPPA"), and, where applicable, the European Union General Data Protection Regulation ("GDPR").
We process Personal Data only for legitimate and disclosed purposes and, where required by applicable law, only when We have a valid legal basis for processing, including consent where consent is required.
This Privacy Policy applies to information collected through the Website and through communications or services that link to this Privacy Policy. It does not necessarily apply to information collected through third-party websites or services that We do not control.
1. Company Information
For purposes of this Privacy Policy:
Company: Balzan Gem Laboratories
Address: 210 Post St, San Francisco, CA 94108, United States
Website: balzangemlab.com
Contact: balzangemlab.com/contact
For purposes of applicable data protection laws, Balzan Gem Laboratories may act as the controller or business responsible for Personal Data that We collect directly from You.
If You are located in the European Economic Area ("EEA"), the United Kingdom, or Switzerland, the identity and contact details of any separately appointed Data Protection Officer or EU/UK representative, if applicable, will be provided here.
2. Interpretation and Definitions
Account
"Account" means a unique account created for You to access Our Service or portions of Our Service.
Affiliate
"Affiliate" means an entity that controls, is controlled by, or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest, or other securities entitled to vote for election of directors or other managing authority.
Cookies
"Cookies" are small files placed on Your computer, mobile device, or other device by a website and may contain information about Your browsing activity.
Personal Data / Personal Information
"Personal Data" and "Personal Information" mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with an identified or identifiable individual, to the extent defined as such under applicable law.
We use "Personal Data" and "Personal Information" interchangeably unless a particular law requires a specific term.
Processing
"Processing" means any operation performed on Personal Data or Personal Information, including collection, recording, organization, storage, use, disclosure, analysis, alteration, retrieval, or deletion.
Service
"Service" refers to the Website and related services operated by the Company.
Service Provider
"Service Provider" means a natural or legal person that processes Personal Information on behalf of the Company for a disclosed business purpose and under applicable contractual and legal requirements.
Usage Data
"Usage Data" means information collected automatically through use of the Service or generated by the Service infrastructure, such as IP address, browser information, pages visited, access times, and diagnostic information.
User/You
"You" means the individual accessing or using the Service or the company or other legal entity on whose behalf the individual is accessing or using the Service, where applicable.
3. Personal Information We Collect
Depending on how You interact with Us, We may collect the following categories of Personal Information.
Identifiers
This may include:
First and last name
Email address
Telephone number
Postal address
Account credentials or identifiers
IP address and online identifiers
Device identifiers
Commercial Information
Where applicable, this may include information about products or services You purchase, request, consider, or inquire about, transaction information, and customer-service history.
Internet or Other Electronic Network Activity
This may include:
IP address
Browser type and version
Device type
Operating system
Pages viewed
Links or buttons clicked
Referring and exit pages
Date and time of access
Approximate location derived from IP address
Usage patterns
Cookies and similar technologies
Diagnostic and security information
Geolocation Information
Where collected, We may process approximate geolocation information, such as general location derived from an IP address or location information that You voluntarily provide.
Customer Service and Communications Information
This may include information contained in emails, telephone communications, contact forms, chat communications, support requests, and other communications between You and Us.
Inferences
We may create or receive inferences based on information described above, such as preferences or interests, to the extent permitted by applicable law.
Sensitive Personal Information
Depending on the services You use and information You voluntarily provide, We may collect information that qualifies as "Sensitive Personal Information" or another legally protected category under applicable law.
We do not intentionally collect sensitive information unless it is reasonably necessary for a disclosed purpose, provided directly by You, or otherwise permitted or required by law.
If We process Sensitive Personal Information for purposes other than those permitted by applicable law, We will provide any required notice and rights to limit its use or disclosure.
4. Sources of Personal Information
We may collect Personal Information from the following categories of sources:
Directly from You, including when You create an account, submit a contact form, make an inquiry, purchase a product or service, or communicate with Us.
Automatically from Your device or browser when You use the Service.
From service providers that provide hosting, analytics, communications, payment, security, customer support, or other services.
From third parties where permitted by law and where such information is relevant to providing or improving the Service.
From publicly available sources where permitted by law.
​
5. How We Use Personal Information
We may use Personal Information for the following purposes:
To provide, operate, maintain, and improve the Service.
To create and manage Your Account.
To process transactions, orders, requests, and payments.
To communicate with You about Your account, transactions, inquiries, or requests.
To provide customer service and support.
To send transactional, operational, security, and service-related communications.
To send marketing communications where permitted by applicable law and subject to applicable consent and opt-out requirements.
To administer promotions, offers, or other programs.
To monitor and analyze usage of the Service.
To maintain security and prevent fraud, abuse, unauthorized access, and other harmful activity.
To debug and repair errors.
To comply with applicable laws, regulations, legal process, and governmental requests.
To establish, exercise, or defend legal claims.
To evaluate or complete a merger, acquisition, financing, restructuring, sale, bankruptcy, or other business transaction.
To perform internal business operations.
To develop and improve products, services, Website functionality, and user experience.
For other purposes disclosed to You at or before the time of collection or otherwise permitted by applicable law.
We will not use Personal Information for materially different purposes without providing any notice required by applicable law.
6. Legal Bases for Processing Under the GDPR
If the GDPR applies to Our processing of Your Personal Data, We rely on one or more of the following legal bases:
Performance of a Contract
We may process Personal Data when necessary to enter into or perform a contract with You, including providing requested products or services, processing transactions, managing Your Account, and providing customer support.
Consent
We may process Personal Data based on Your consent where applicable law requires consent, including for certain non-essential cookies, marketing communications, or other optional processing.
You may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing performed before withdrawal.
Legitimate Interests
We may process Personal Data where necessary for Our legitimate interests or those of a third party, provided those interests are not overridden by Your fundamental rights and freedoms.
These interests may include operating and improving the Service, preventing fraud, protecting network and information security, communicating with customers, and defending legal claims.
Legal Obligation
We may process Personal Data where necessary to comply with a legal or regulatory obligation.
Vital Interests
Where applicable, We may process Personal Data where necessary to protect someone's vital interests.
Where We rely on legitimate interests, You may have a right to object to the processing in accordance with applicable law.
7. Cookies and Tracking Technologies
We use cookies, pixels, web beacons, local storage, and similar technologies to operate and improve the Service.
These technologies may be used for:
Essential website functionality
Authentication and security
Remembering preferences
Analytics and performance measurement
Understanding how visitors use the Service
Marketing or advertising, where applicable
Essential Cookies
Essential cookies are necessary for the Website to function and cannot generally be disabled through Our cookie-management system.
Preference / Functionality Cookies
These cookies remember choices such as language, preferences, or account settings.
Analytics Cookies
Where used, analytics cookies help Us understand Website traffic, usage, performance, and trends.
Advertising / Marketing Cookies
Where used, advertising or marketing technologies may allow Us or third parties to measure advertising performance, deliver relevant advertising, or recognize a browser across websites.
We will obtain consent for non-essential cookies where required by applicable law.
You may withdraw or change Your consent using Our cookie-preference mechanism, if available, or through Your browser settings.
8. California Privacy Rights — CCPA/CPRA
This section applies to California residents to the extent the California Consumer Privacy Act, as amended, applies to the Company and to the relevant processing.
California law provides California residents with certain rights regarding Personal Information. These rights include, subject to statutory exceptions and verification requirements:
Right to Know
You may request information about:
The categories of Personal Information We collect.
The categories of sources from which Personal Information is collected.
The business or commercial purposes for collecting, using, selling, or sharing Personal Information.
The categories of third parties, service providers, contractors, or other recipients to whom Personal Information is disclosed.
The specific pieces of Personal Information We have collected about You, subject to applicable exceptions.
​
Right to Delete
You may request deletion of Personal Information We have collected from You, subject to exceptions permitted or required by law.
Right to Correct
You may request correction of inaccurate Personal Information maintained by Us, subject to applicable legal requirements.
Right to Opt Out of Sale or Sharing
You may have the right to opt out of the "sale" or "sharing" of Personal Information as those terms are defined by California law.
If We engage in a sale or sharing of Personal Information that is subject to an opt-out right, We will provide the required notice and mechanism for exercising that right, including a "Do Not Sell or Share My Personal Information" mechanism where required.
Global Privacy Control
Where required by California law, We will honor a valid Global Privacy Control ("GPC") or other legally recognized opt-out preference signal as a request to opt out of sale or sharing.
You do not need to create an account to exercise an applicable opt-out right.
Right to Limit Use and Disclosure of Sensitive Personal Information
To the extent We use or disclose Sensitive Personal Information for purposes subject to California's right-to-limit requirements, You may request that We limit such use or disclosure as provided by applicable law.
Right to Non-Discrimination
We will not discriminate against You for exercising rights granted by applicable California privacy law, except as permitted by law.
We will not deny goods or services, charge different prices or rates, provide a different level or quality of goods or services, or otherwise discriminate against You for exercising Your privacy rights, except where a difference is reasonably related to the value of Personal Information or otherwise permitted by law.
Right to Opt Out of Certain Automated Decision-Making
If applicable California law provides a right to opt out of qualifying automated decision-making technology used by the Company, we will provide the disclosures and opt-out mechanism required by applicable law.
Authorized Agents
You may use an authorized agent to submit a California privacy request on Your behalf where permitted by law.
We may require appropriate documentation establishing the agent's authority and may verify Your identity as required by applicable law.
9. California Categories, Purposes, and Disclosure
For purposes of California privacy disclosures, the categories of Personal Information We may collect correspond generally to the categories described in Section 3 of this Privacy Policy.
We may collect these categories for the business and commercial purposes described in Section 5.
We may disclose Personal Information to categories of recipients including:
Service providers and contractors
Payment processors
Hosting and infrastructure providers
Analytics providers
Customer-support providers
Communications and SMS providers
Security and fraud-prevention providers
Professional advisers
Affiliates
Government authorities and law-enforcement agencies where legally required
Parties involved in a business transaction
Other parties with Your direction or consent
We do not use the term "sale" merely to mean an ordinary disclosure to a service provider. Whether a particular disclosure constitutes a "sale," "sharing," or other regulated disclosure under California law depends on the nature of the disclosure and the applicable statutory definitions.
10. California Privacy Request Procedure
California residents may submit requests to know, delete, or correct their Personal Information through the privacy contact mechanism provided at:
balzangemlab.com/contact
If the Company provides an email address or additional online privacy-request form, that information should also be listed here.
We may need to verify Your identity before completing a request. Verification measures will be reasonably appropriate to the sensitivity of the Personal Information involved and the type of request.
We will respond to verifiable consumer requests within the time periods required by applicable law.
If We deny a request, We will explain the reason for the denial to the extent required by law and will provide any applicable appeal mechanism.
You may not be required to create an account solely to submit a privacy request.
11. California Notice at Collection
At or before the time We collect Personal Information from California residents, We may provide a separate Notice at Collection or other legally required notice identifying:
The categories of Personal Information collected.
The purposes for which the categories are collected or used.
Whether the Personal Information is sold or shared.
The retention period or criteria used to determine the retention period.
Any additional disclosures required by California law.
Where required, the Notice at Collection will be presented at or before collection and will be reasonably accessible.
12. CalOPPA Disclosures
California's Online Privacy Protection Act requires operators of commercial websites that collect personally identifiable information from California consumers to post certain privacy information.
This Privacy Policy identifies the categories of Personal Information collected, the purposes for collection and use, categories of third parties with whom information may be shared, methods for requesting access or correction, and the effective date of this Privacy Policy.
Do Not Track
Some browsers offer a "Do Not Track" ("DNT") setting.
Because there is not a universally accepted technological standard for responding to DNT signals, the Website may not respond to DNT browser signals unless otherwise required by applicable law.
Where applicable law recognizes a browser-based opt-out preference signal, including Global Privacy Control, We will process that signal as required by applicable law.
Third-Party Tracking
Third-party service providers may collect information about visitors' activities on the Website through cookies, pixels, analytics technologies, or similar mechanisms where such technologies are enabled.
The types of third parties that may collect information are described in this Privacy Policy and may include analytics, advertising, communications, security, hosting, and other technology providers.
13. Text Messages / SMS Privacy Notice
You may have the option to receive text messages from Us.
If You opt in to SMS communications, We may collect and retain information associated with the SMS program, including Your telephone number, consent records, opt-in method, date and time of consent, message delivery information, and other information necessary to administer the SMS program.
Consent to receive marketing text messages is not a condition of purchasing goods or services.
Depending on Your selections and the communications You request, SMS messages may include:
Customer support communications
Account notifications
Transactional notifications
Delivery or order updates
Authentication messages
Security alerts
Marketing and promotional communications
You may opt out of SMS messages by replying STOP. You may request assistance by replying HELP.
Message and data rates may apply. Message frequency may vary. Carriers are not responsible for delayed or undelivered messages.
We do not sell or share SMS consent information for third-party marketing purposes.
Important: The Company should confirm that this statement accurately describes its SMS vendor contracts and practices before publication.
14. Service Providers and Third Parties
We may use third-party companies and individuals to facilitate, operate, analyze, secure, or improve the Service.
These providers may include:
Website hosting providers
Cloud infrastructure providers
Analytics providers
Payment processors
Customer-support providers
Communications providers
SMS providers
Security and fraud-prevention providers
Professional advisers
Other vendors necessary to operate the Service
Service providers may access Personal Information only as reasonably necessary to perform services for Us or as otherwise permitted by applicable law.
Third parties may process Personal Information according to their own privacy policies where they act independently rather than as Our service provider or processor.
15. Google Places
The Service may use Google Places or other Google services to provide location and place-related functionality.
Google may collect information from Your browser or device when You interact with these services. Google's processing of information may be governed by Google's privacy practices.
You should review Google's applicable privacy information for additional details regarding Google's processing of Personal Information.
16. Business Transfers
If the Company is involved in a merger, acquisition, financing, reorganization, bankruptcy, dissolution, sale of assets, or similar transaction, Personal Information may be transferred as part of that transaction.
Where required by law, We will provide notice concerning material changes in how Your Personal Information is handled.
17. Legal Disclosures
We may disclose Personal Information when reasonably necessary to:
Comply with applicable laws, regulations, court orders, subpoenas, or other legal processes.
Respond to lawful requests from governmental authorities.
Protect and defend Our rights or property.
Detect, prevent, or investigate fraud, security incidents, or wrongdoing.
Protect the safety of Our users, employees, customers, or the public.
Establish, exercise, or defend legal claims.
Protect against legal liability.
​
18. Retention of Personal Information
We retain Personal Information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.
Retention periods depend on factors including:
The purpose for which the information was collected.
The nature and sensitivity of the information.
Whether an Account or customer relationship remains active.
Legal, tax, accounting, regulatory, or reporting obligations.
Security and fraud-prevention requirements.
The need to establish, exercise, or defend legal claims.
Backup and disaster-recovery requirements.
Unless otherwise required by law, We may retain:
Account Information: For the duration of the Account relationship and for a reasonable period afterward to address disputes, legal obligations, security matters, and other legitimate business needs.
Customer Support Records: Generally for up to 12 months after closure, unless a longer period is reasonably necessary.
Chat Transcripts: Generally for up to 12 months where retained for customer support, quality assurance, training, security, or dispute-resolution purposes.
Analytics and Usage Data: Generally for up to 24 months, subject to the configuration and retention practices of the relevant analytics provider.
Server and Security Logs: Generally for up to 24 months, or longer where reasonably necessary for security, fraud prevention, or legal compliance.
These periods are maximum or general periods rather than guarantees. We may delete, aggregate, anonymize, or otherwise de-identify information sooner when it is no longer necessary.
Residual copies may remain in encrypted backups until those backups are overwritten or deleted under Our backup-retention procedures.
19. International Data Transfers
Personal Information may be processed in the United States and other countries where We or Our service providers operate.
If You are located in the EEA, United Kingdom, or another jurisdiction that restricts international transfers of Personal Data, We will use legally recognized transfer mechanisms where required, such as an adequacy decision, Standard Contractual Clauses, or another lawful transfer mechanism.
Where required, We will consider appropriate supplementary measures and applicable transfer-risk requirements.
20. GDPR Rights
If the GDPR applies to You, You may have the following rights, subject to applicable legal limitations:
Right to be informed about processing of Your Personal Data.
Right of access to Your Personal Data.
Right to rectification of inaccurate or incomplete Personal Data.
Right to erasure ("right to be forgotten") in applicable circumstances.
Right to restriction of processing in applicable circumstances.
Right to data portability where applicable.
Right to object to processing based on legitimate interests.
Right to object to direct marketing.
Right to withdraw consent where processing is based on consent.
Rights concerning certain automated decision-making and profiling.
Right to lodge a complaint with a competent data protection supervisory authority.
To exercise these rights, contact Us through: balzangemlab.com/contact
We may need to verify Your identity before responding to certain requests.
We will respond within the time required by applicable law. Where permitted by law, We may extend the response period when a request is complex or numerous and will provide any required explanation for the extension.
21. GDPR Supervisory Authority
If You are located in the EEA, You have the right to lodge a complaint with the data protection supervisory authority in the country where You live, work, or believe an infringement occurred.
A list of EEA supervisory authorities is maintained by the European Data Protection Board.
22. Automated Decision-Making and Profiling
We do not intend to make decisions producing legal or similarly significant effects concerning You solely through automated processing unless otherwise disclosed to You and permitted by applicable law.
If We implement automated decision-making or profiling that is subject to specific legal disclosure or opt-out requirements, We will provide the disclosures and rights required by applicable law.
23. Children's Privacy
The Service is not directed to children under 16, and We do not knowingly collect Personal Information from children under 16.
If We learn that We have collected Personal Information from a child under 16 in circumstances where collection is prohibited, We will take reasonable steps to delete the information.
Where applicable law establishes a different age threshold or requires parental consent, We will comply with the applicable legal requirements.
24. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect Personal Information against unauthorized access, acquisition, alteration, disclosure, destruction, or loss.
However, no method of Internet transmission or electronic storage is completely secure. We cannot guarantee absolute security.
25. Links to Third-Party Websites
The Service may contain links to websites, applications, or services operated by third parties.
We are not responsible for the privacy practices, content, security, or policies of third-party services. We encourage You to review the privacy policy of every third-party service You visit.
26. Your Account Information
If You maintain an Account, You may be able to access, update, correct, or delete certain information through Your account settings.
You may also contact Us to request access to, correction of, or deletion of Personal Information, subject to applicable law.
27. Changes to This Privacy Policy
We may update this Privacy Policy periodically.
When We make changes, We will update the "Last Updated" date at the top of this Privacy Policy.
Where required by applicable law, We will provide additional notice, including prominent notice or direct communication, before material changes become effective.
We encourage You to review this Privacy Policy periodically.
28. Contact Us
If You have questions about this Privacy Policy, wish to exercise a privacy right, or wish to submit a privacy request, contact Us through:
Balzan Gem Laboratories
210 Post St
San Francisco, CA 94108
United States
Privacy/contact page: balzangemlab.com/contact
If We provide a dedicated privacy email address, telephone number, or online privacy-request form, those contact methods should be added to this section and used for applicable privacy requests.