Client Privacy & Discretion Protocol

01. Principle of Strict Discretion

At Only Browns by Aman Gem, we understand the sensitive nature of high-jewelry acquisitions, bespoke solitaire commissions, and confidential diamond parcel memo arrangements. We are committed to maintaining the highest standards of data security and confidentiality for our global diamantaire network, ateliers, and private collectors.

02. Data Collected & Purpose

In order to fulfill regulatory requirements (including the Kimberley Process Certification Scheme and AML compliance standards), we collect:

• Identity & Company Verification: Legal entity name, GST/VAT number, registered address, and official diamantaire credentials.
• Transaction & Memo Records: Stone certificates (GIA, IGI), memo agreements, insured shipping manifests, and export declarations.
• Digital Vault Credentials: Secure encrypted authentication identifiers for inventory access.

03. Armored Transit & Consignment Protocol

Stone delivery details are shared strictly with accredited armored carriers (Brink’s, Malca-Amit) solely for the execution of insured transit under customs seal. We never sell, lease, or monetize client records to third-party commercial marketing entities.

04. Compliance Desk & Inquiries

For questions regarding your data privacy, vault access credentials, or OECD supply chain verification, please direct correspondence to:

05. Account & Data Deletion Request (Aman Gem App)

In accordance with Google Play Developer Policies and global data privacy standards, registered users of the Aman Gem mobile application (com.dnk.amangem) have the right to request the permanent deletion of their user account and associated personal data at any time.

How to Request Account & Data Deletion:

1. Send an email to our compliance desk at sales@onlybrowns.in with the subject line: "Account Deletion Request - Aman Gem".
2. Include your registered Full Name, Email Address, and Phone Number / Company Name associated with your Aman Gem account.
3. Our verification team will confirm your identity and process the deletion within 14 business days. You will receive a confirmation notice once completed.

Types of Data Deleted vs. Retained:

• Data Permanently Deleted: User profile information, encrypted login credentials, device tokens, and digital catalog preferences are erased completely from active databases.
• Data Retained for Regulatory Compliance: Transaction histories, issued diamond memo agreements, and invoices are retained strictly for the statutory period mandated by Indian tax laws, the Kimberley Process Certification Scheme, and anti-money laundering (AML) diamond trade regulations.