Privacy Policy
Effective date: June 10, 2026
Last updated: June 10, 2026
This Privacy Policy explains how we collect, use, and protect your personal information when you visit www.caram.de or engage with us about gemstones, jewelry, consultations, or valuations.
1. Who we are
This website is owned and operated by Aura International Ltd, a company registered in Hong Kong.
-
Aura International Ltd (Hong Kong company registration no. 1925163) — 99 Wellington Street, Suite 1702, Central, Hong Kong. Phone: +852 3565 4988. Email: sales@caram.de
"Caram" is a gemstone and jewelry brand used by Aura International Ltd under license from Caram e.K. (Idar-Oberstein, Germany), the family house that originated the brand. Caram e.K. licenses the Caram name and heritage for marketing; the operation of this website, and the handling of the personal data you submit through it, is the responsibility of Aura International Ltd.
For all privacy matters, Aura International Ltd is the data controller, and you can reach us at sales@caram.de.
If you are contacting us from the European Union or United Kingdom, we apply the data-protection standards described in this policy (including GDPR rights) to your information, regardless of where our office is located.
2. What information we collect
We collect personal information in three ways.
Information you provide directly. When you contact us through a form, book a consultation, request a valuation, reserve a piece, or subscribe to the Caram Letter, we collect your name, email address, phone number (if you provide one), country of residence, and any details you share about the gemstone or jewelry you are interested in.
Information collected automatically. When you visit www.caram.de, we automatically collect your IP address, browser type and version, device type, operating system, the pages you visit and time spent, your navigation path, the referring source that led you to us, and your approximate location derived from your IP address. This is collected through cookies and similar technologies (see Section 5).
Information from third-party platforms. If you interact with us through Instagram, Facebook, LinkedIn, or WhatsApp, we may receive limited profile information consistent with that platform's settings and your own privacy choices on it.
3. Why we use your information
We use your information to:
-
respond to your inquiries, and arrange consultations, valuations, and private viewings;
-
prepare and fulfill sales of gemstones, jewelry, and valuation services;
-
send the Caram Letter and occasional updates about new pieces or events, where you have asked to receive them;
-
understand how visitors use the website so we can improve it;
-
meet our legal, tax, and record-keeping obligations, including identity checks on high-value transactions where the law requires them.
For visitors in the EU/UK, the legal bases we rely on under the GDPR are: performance of a contract or pre-contractual steps (responding to inquiries, arranging viewings, fulfilling sales); your consent (newsletter, and analytics or marketing cookies, which you can withdraw at any time); our legitimate interest in understanding and improving the website; and compliance with a legal obligation (tax records and anti-money-laundering checks on high-value purchases).
4. Who we share information with
We share your data only with the service providers and parties we need to, and only as necessary to run our business:
-
Wix.com Ltd — our website platform, which hosts the site and processes data on our behalf;
-
Google (Google Analytics 4) — website analytics, used only with your consent;
-
CookieYes — cookie consent management;
-
TidyCal — appointment scheduling for consultations and valuations;
-
MailerLite — delivery of the Caram Letter;
-
Payment, banking, and specialist shipping providers — when you purchase or receive a gemstone, jewel, or valuation report;
-
Independent gemological laboratories (such as SSEF, Gübelin, GRS, AGL, or GIA) — only when you ask us to arrange certification of a stone;
-
Tax authorities, regulators, and professional advisors — only where we are legally required to disclose, or need to establish or defend legal rights.
We do not sell your personal information, and we do not share it with advertising networks beyond what you specifically allow through the cookie banner.
Some of these providers are located outside your country, including in the United States. Where we transfer data internationally, we rely on recognized safeguards such as the EU–US Data Privacy Framework and the European Commission's Standard Contractual Clauses, or on your consent.
5. Cookies and tracking technologies
We use cookies to make the website work, to understand how it is used, and — with your consent — to measure marketing performance.
Cookies fall into four categories:
-
Strictly necessary — required for the site to function and to remember your cookie choices. These cannot be switched off.
-
Functional — improve usability, such as remembering preferences. Used with consent.
-
Analytics — Google Analytics 4, which measures aggregate visitor behavior. Used with consent.
-
Marketing — conversion tracking such as Google Ads and the Meta Pixel (currently paused). Used with consent.
You can review and change your choices at any time through the cookie banner's "Manage cookies" option, which also lists each cookie, its provider, and how long it lasts.
6. How long we keep your information
-
Inquiries that don't lead to a purchase — 24 months
-
Valuation records — 10 years
-
Sales records and invoices — 10 years (tax and accounting requirements)
-
Newsletter subscribers — until you unsubscribe
-
Cookie consent records — 12 months
-
Website analytics — 14 months
-
When the relevant period ends, we delete or anonymize the data.
7. Your rights
We respect the following rights over your personal information. If you are in the EU or UK, these rights are guaranteed to you under the GDPR; we extend the same handling to all our clients as a matter of practice:
-
Access — ask what personal data we hold about you;
-
Correction — have inaccurate or incomplete data fixed;
-
Deletion — ask us to erase your data, subject to records we must keep by law;
-
Restriction — ask us to limit how we use your data in certain situations;
-
Portability — receive your data in a machine-readable format;
-
Objection — object to processing based on our legitimate interest;
-
Withdraw consent — at any time, without affecting anything done beforehand.
To exercise any of these, email sales@caram.de. We will respond within 30 days.
If you are in the EU or UK and believe we have not handled your data properly, you also have the right to complain to your local data protection authority. We would, however, appreciate the chance to resolve your concern directly first.
8. Security
We use industry-standard measures to protect your information, including HTTPS encryption for data in transit, access controls on our internal systems, and data-protection agreements with our service providers. No system is ever completely secure, so we cannot guarantee absolute protection — but if a data breach ever creates a real risk to you, we will notify you and the relevant authorities as required by law.
9. Children
Caram is intended for adults — collectors of fine gemstones and clients commissioning bespoke jewelry. We do not knowingly collect data from anyone under 16. If you believe a minor has given us personal information, please email sales@caram.de and we will delete it
promptly.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. For significant changes, we will give notice on the website, and by email to Caram Letter subscribers, before the change takes effect.
11. Contact
For any privacy question, request, or concern:
Aura International Ltd (Hong Kong company registration no. 1925163)
99 Wellington Street, Suite 1702, Central, Hong Kong
Email: sales@caram.de
