Skip to main content Skip to search Skip to main navigation
Worldwide shipping • Carefully packed collector specimens
Shop with confidence with our 15 day money back guarantee
Subscribe to our newsletter and get 10% off

Privacy Policy

Last updated: September 12, 2026

1. Introduction

Tormik Gems operates this online store and website, including all related information, content, features, tools, products, services, and functionality made available through the website (collectively, the “Services”).

The Services use Shopware and related technical infrastructure to provide e-commerce functionality, including product management, customer accounts, shopping cart functionality, checkout, order processing, and other online-store features.

Tormik Gems independently determines how customer information is collected and processed for its business operations, including order fulfilment, customer service, payment processing, shipping, marketing, security, and legal compliance.

This Privacy Policy explains how Tormik Gems collects, uses, stores, and discloses personal information when you:

  • visit or browse our website;

  • create or use an account;

  • add products to a shopping cart or wishlist;

  • place an order;

  • communicate with us;

  • subscribe to communications;

  • submit reviews or other content; or

  • otherwise interact with our Services.

If there is a conflict between this Privacy Policy and our Terms of Service concerning the collection, processing, or disclosure of personal information, this Privacy Policy applies to those privacy-related matters.

Please read this Privacy Policy carefully.

By using or accessing the Services, you acknowledge that you have read and understood this Privacy Policy.


2. Personal Information We Collect

For purposes of this Privacy Policy, “personal information” or “personal data” means information that identifies you or can reasonably be associated with or linked to you.

Personal information does not include information that has been anonymized or irreversibly de-identified so that it can no longer reasonably identify you.

Depending on how you interact with our Services and where you reside, we may collect or process the following categories of personal information.

2.1 Contact Information

This may include:

  • full name;

  • billing address;

  • shipping address;

  • email address;

  • telephone number; and

  • other contact details you provide to us.

2.2 Account Information

If you create an account, we may collect:

  • username;

  • email address;

  • password or authentication information;

  • account preferences;

  • saved addresses;

  • account settings; and

  • other information necessary to maintain your customer account.

Passwords are intended to be stored using appropriate security mechanisms and should never be shared with other persons.

2.3 Order and Transaction Information

When you make a purchase, we may collect information relating to the transaction, including:

  • products purchased;

  • products viewed;

  • products added to your cart;

  • products added to your wishlist;

  • order numbers;

  • transaction dates;

  • order value;

  • shipping information;

  • billing information;

  • returns;

  • refunds;

  • exchanges;

  • cancellations; and

  • related transaction history.

2.4 Payment Information

Payment information may include:

  • payment method;

  • payment transaction details;

  • payment status;

  • payment confirmation;

  • transaction identifiers; and

  • other information required to process or verify a payment.

Where payments are processed through external payment providers, payment-card or financial information may be collected and processed directly by the relevant payment provider.

Tormik Gems does not necessarily receive or store complete payment-card details where the selected payment provider processes those details directly.

2.5 Communications

When you contact us, we may collect information contained in your communications, including:

  • customer-support requests;

  • emails;

  • WhatsApp or other business communications;

  • product questions;

  • complaints;

  • feedback;

  • reviews; and

  • other information you voluntarily provide.

2.6 Device and Technical Information

When you access our website, certain technical information may be collected automatically, including:

  • IP address;

  • browser type;

  • browser version;

  • operating system;

  • device type;

  • network information;

  • language preferences;

  • approximate location derived from technical information;

  • referring pages;

  • pages visited;

  • session information;

  • timestamps; and

  • other technical identifiers.

2.7 Usage Information

We may collect information about how you interact with our Services, including:

  • pages visited;

  • products viewed;

  • searches performed;

  • links clicked;

  • shopping-cart activity;

  • wishlist activity;

  • interactions with website features;

  • approximate session duration; and

  • other website usage information.


3. Sources of Personal Information

We may obtain personal information from the following sources.

3.1 Directly From You

We may collect information when you:

  • create an account;

  • place an order;

  • complete checkout;

  • contact us;

  • subscribe to communications;

  • submit a review;

  • participate in promotions;

  • request customer support; or

  • otherwise provide information to us.

3.2 Automatically Through the Services

We may automatically collect certain technical and usage information when you browse or interact with our website.

This may occur through:

  • cookies;

  • session technologies;

  • pixels;

  • logs;

  • analytics technologies; and

  • similar technologies.

3.3 From Service Providers

We may receive information from service providers that help us operate our business, such as:

  • payment providers;

  • hosting providers;

  • shipping providers;

  • analytics providers;

  • customer-support providers;

  • email providers;

  • security providers; and

  • other technology or business service providers.

3.4 From Partners and Other Third Parties

We may receive information from business partners, advertising providers, fraud-prevention services, social-media platforms, or other third parties where permitted by applicable law.


4. How We Use Personal Information

Depending on how you interact with us, we may use personal information for the following purposes.

4.1 Providing and Managing Our Services

We use personal information to:

  • process and fulfil orders;

  • process payments;

  • provide customer accounts;

  • manage shopping carts and wishlists;

  • arrange shipping;

  • process returns, refunds, exchanges, and cancellations;

  • provide customer support;

  • communicate about orders;

  • provide product recommendations;

  • maintain and improve our website;

  • personalize your shopping experience; and

  • provide other services requested by you.

4.2 Marketing and Advertising

Where permitted by applicable law and, where required, based on your consent, we may use personal information to:

  • send promotional emails;

  • send marketing communications;

  • inform you about products and offers;

  • provide personalized content;

  • measure marketing campaigns;

  • display advertisements; and

  • improve our marketing activities.

You may unsubscribe from promotional communications at any time using the unsubscribe mechanism provided in the communication or by contacting us.

Transactional communications, such as order confirmations, payment notifications, shipping notifications, security messages, and account-related communications, may continue even if you opt out of marketing communications.

4.3 Security and Fraud Prevention

We may process personal information to:

  • authenticate accounts;

  • detect suspicious activity;

  • prevent fraud;

  • investigate unauthorized transactions;

  • protect our website and infrastructure;

  • prevent abuse;

  • investigate security incidents;

  • protect customers and other users; and

  • maintain the security and integrity of our Services.

4.4 Communication and Customer Support

We use personal information to:

  • respond to inquiries;

  • provide customer support;

  • investigate complaints;

  • communicate about orders;

  • answer product questions;

  • provide requested information; and

  • maintain our business relationship with customers.

4.5 Legal and Regulatory Purposes

We may process personal information where necessary to:

  • comply with applicable laws;

  • comply with tax and accounting obligations;

  • respond to lawful requests from authorities;

  • establish, exercise, or defend legal claims;

  • investigate suspected unlawful activity;

  • enforce our Terms of Service or other policies; and

  • protect our legal rights and legitimate business interests.


5. Legal Bases for Processing

Where data-protection laws such as the GDPR apply, we process personal data based on one or more applicable legal bases.

These may include:

Contract

Processing may be necessary to:

  • process your order;

  • provide requested services;

  • manage your account;

  • arrange delivery; or

  • fulfil our contractual obligations.

Legal Obligation

Processing may be necessary to comply with legal obligations, including:

  • tax;

  • accounting;

  • financial;

  • consumer-protection;

  • fraud-prevention; and

  • regulatory requirements.

Legitimate Interests

We may process personal information where necessary for legitimate business interests, such as:

  • website security;

  • fraud prevention;

  • service improvement;

  • customer support;

  • business administration;

  • network and information security; and

  • protecting our legal rights.

Where we rely on legitimate interests, we consider your rights and interests before processing your information.

Consent

Where required, we may process personal information based on your consent.

You may withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing performed before consent was withdrawn.


6. Cookies and Similar Technologies

Our website may use cookies and similar technologies to provide, secure, analyze, and improve the Services.

Cookies may be used for purposes including:

  • essential website functionality;

  • shopping-cart functionality;

  • account authentication;

  • remembering preferences;

  • security;

  • analytics;

  • performance measurement;

  • personalization; and

  • marketing, where permitted.

Where legally required, non-essential cookies will only be used after obtaining the appropriate consent.

You may be able to manage cookies through your browser settings or through the cookie-consent mechanism provided on our website.

Disabling certain cookies may affect the functionality of the Services.


7. How We Disclose Personal Information

We may disclose personal information to third parties where necessary for legitimate business purposes, contractual performance, legal compliance, or other lawful purposes.

Such recipients may include:

7.1 Technology and Service Providers

We may share information with providers that support our business operations, including:

  • Shopware-related technical infrastructure;

  • website hosting providers;

  • cloud infrastructure providers;

  • payment processors;

  • shipping and logistics providers;

  • email providers;

  • customer-support platforms;

  • analytics providers;

  • security providers;

  • fraud-prevention services;

  • backup providers; and

  • other technical service providers.

These providers may process information on our behalf where they act as service providers or processors.

7.2 Payment Providers

When you select a payment method, relevant transaction and payment information may be transmitted to the payment provider necessary to process your payment.

The payment provider may process your information under its own privacy policy and applicable legal requirements.

7.3 Shipping and Fulfilment Providers

We may provide shipping-related information, including your name, delivery address, telephone number, email address, and order details, to shipping or logistics providers where necessary to deliver your purchase.

7.4 Marketing and Advertising Partners

Where permitted by law and, where required, with your consent, we may share limited information with marketing or advertising service providers to:

  • deliver marketing communications;

  • measure advertising performance;

  • personalize advertising; or

  • analyze customer interactions.

7.5 Legal and Regulatory Authorities

We may disclose information where reasonably necessary to:

  • comply with applicable law;

  • respond to lawful governmental requests;

  • comply with court orders;

  • respond to legal proceedings;

  • protect our rights; or

  • investigate fraud, security incidents, or unlawful activity.

7.6 Business Transactions

Personal information may be transferred as part of a business transaction such as:

  • merger;

  • acquisition;

  • restructuring;

  • financing;

  • sale of assets;

  • bankruptcy; or

  • transfer of substantially all or part of our business.


8. Shopware and Technical Infrastructure

Tormik Gems uses Shopware as an e-commerce software platform.

Shopware provides technical functionality that may support parts of our online store, including:

  • product catalogue functionality;

  • customer accounts;

  • shopping cart functionality;

  • checkout;

  • order management;

  • administration functionality;

  • store configuration; and

  • related e-commerce functionality.

Shopware itself does not determine the commercial purposes for which Tormik Gems processes customer information.

Depending on the technical architecture used to operate our store, certain data may be processed or stored by hosting providers, infrastructure providers, extensions, integrations, or other technical service providers.

The specific processing activities performed by these providers depend on the configuration and services used by Tormik Gems.

Where a third party acts as an independent controller, its own privacy policy may also apply.


9. Third-Party Services and Integrations

Our Services may integrate with external services, including payment providers, shipping providers, analytics tools, communication platforms, social-media services, security services, and other third-party technologies.

When you interact with a third-party service, information may be processed according to that provider's own privacy policy and terms.

We encourage you to review the privacy practices of third-party services before using them.


10. Third-Party Websites and Links

Our website may contain links to websites, applications, social-media platforms, or other services operated by third parties.

We do not control third-party websites and are not responsible for:

  • their content;

  • privacy practices;

  • security;

  • availability;

  • accuracy; or

  • handling of personal information.

When you leave our website, we recommend reviewing the privacy policy and terms of the destination website.


11. Children's Data

Our Services are not intended for children who are below the applicable age of digital consent or otherwise unable to lawfully provide personal information under applicable law.

We do not knowingly collect personal information from children where such collection is prohibited by law.

If you believe that a child has provided personal information to us unlawfully, please contact us using the information provided in the Contact section.

If we become aware that we have collected personal information from a child where collection was not legally permitted, we will take reasonable steps to delete that information where required by applicable law.


12. Security of Personal Information

We take reasonable technical and organizational measures designed to protect personal information against:

  • unauthorized access;

  • unauthorized disclosure;

  • alteration;

  • destruction;

  • accidental loss; and

  • other unlawful or unauthorized processing.

Security measures may include access controls, authentication mechanisms, encrypted connections, server security, monitoring, backups, and other appropriate technical measures.

However, no method of transmission or storage is completely secure.

Therefore, we cannot guarantee absolute or perfect security.

You should avoid sending sensitive information through unsecured communication channels.


13. Retention of Personal Information

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention periods may depend on:

  • the purpose for which information was collected;

  • whether you maintain an account;

  • whether an order or transaction remains active;

  • legal and tax requirements;

  • accounting obligations;

  • dispute resolution;

  • fraud prevention;

  • enforcement of agreements; and

  • other legitimate business requirements.

When personal information is no longer required, we may securely delete, anonymize, or otherwise dispose of it in accordance with applicable law.


14. Your Privacy Rights

Depending on where you live and subject to applicable legal conditions and exceptions, you may have certain rights regarding your personal information.

These may include:

14.1 Right of Access

You may have the right to request confirmation as to whether we process your personal information and to request access to that information.

14.2 Right to Correction

You may have the right to request correction of inaccurate or incomplete personal information.

14.3 Right to Deletion

In certain circumstances, you may have the right to request deletion of your personal information.

This right is subject to legal exceptions, including information that we are required to retain by law.

14.4 Right to Data Portability

Where applicable, you may have the right to receive certain personal information in a structured, commonly used, and machine-readable format and, where technically feasible, request its transfer to another provider.

14.5 Right to Restrict Processing

In certain circumstances, you may have the right to request that we restrict the processing of your personal information.

14.6 Right to Object

Where processing is based on legitimate interests or where applicable law otherwise provides, you may have the right to object to certain processing activities.

You may also object to direct marketing at any time.

14.7 Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal does not affect processing carried out before the withdrawal.


15. Marketing Communication Preferences

You may opt out of promotional communications at any time.

For email marketing, you can generally use the unsubscribe option provided in the relevant email.

If you opt out of marketing communications, we may still send necessary non-promotional communications, including:

  • order confirmations;

  • invoices;

  • payment notifications;

  • shipping notifications;

  • delivery updates;

  • account-security notifications; and

  • other transactional communications.


16. European Economic Area and UK Privacy Rights

If you reside in the European Economic Area (EEA) or the United Kingdom, additional rights may apply under applicable data-protection laws.

Subject to applicable exceptions and limitations, these may include:

  • access to your personal data;

  • correction of inaccurate data;

  • deletion of personal data;

  • restriction of processing;

  • objection to processing;

  • data portability; and

  • withdrawal of consent where consent is the legal basis.

You may also have the right to object to processing based on legitimate interests in circumstances provided by applicable law.

Where we process personal information for direct marketing purposes, you generally have the right to object at any time.


17. Data Protection Complaints

If you have concerns about how we process your personal information, we encourage you to contact us first so that we can investigate and attempt to resolve your concern.

You may also have the right to lodge a complaint with the relevant data-protection supervisory authority in your country or region.

For residents of the EEA or UK, the competent supervisory authority will generally depend on your country of residence or the circumstances of the processing.


18. International Data Transfers

Some of our service providers may process or store personal information outside the country in which you reside.

Where personal information is transferred internationally, we will take appropriate measures required by applicable data-protection laws.

For transfers from the EEA or UK to countries that do not provide an adequate level of protection, appropriate safeguards may include:

  • European Commission Standard Contractual Clauses;

  • UK-approved transfer mechanisms;

  • adequacy decisions; or

  • other legally recognized transfer mechanisms.


19. Automated Decision-Making and Profiling

Certain Services or third-party technologies may use automated processing, analytics, personalization, or recommendation technologies.

Where applicable law provides rights concerning automated decision-making or profiling, you may have rights to obtain information about such processing or to object to it.

Tormik Gems does not intend to make decisions producing legal or similarly significant effects solely through automated processing unless permitted by applicable law and appropriate safeguards are in place.


20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • changes to our business;

  • changes to our Services;

  • changes in technology;

  • changes to our data-processing practices;

  • legal or regulatory developments; or

  • other operational requirements.

When we update this Privacy Policy, we will update the “Last updated” date at the beginning of this document.

Where required by law, we will provide additional notice of material changes.

We encourage you to periodically review this Privacy Policy.


21. Contact Us

If you have questions regarding this Privacy Policy, want to exercise a privacy right, or have concerns about how your personal information is processed, please contact us.

Tormik Gems

Email: info@tormikgems.com

Telephone / WhatsApp: +92 348 5949959

Business Address:

Braysakor Post Office
Tormik 16100
Tehsil Roundu
District Skardu
Gilgit-Baltistan
Pakistan

For purposes of applicable data-protection laws, Tormik Gems is the data controller for personal information processed in connection with the Services, except where a third party independently determines the purposes and means of processing under applicable law.