Privacy Policy
Last updated: September 12, 2026
1. Introduction
Tormik Gems operates this online store and website, including all related information, content, features, tools, products, services, and functionality made available through the website (collectively, the “Services”).
The Services use Shopware and related technical infrastructure to provide e-commerce functionality, including product management, customer accounts, shopping cart functionality, checkout, order processing, and other online-store features.
Tormik Gems independently determines how customer information is collected and processed for its business operations, including order fulfilment, customer service, payment processing, shipping, marketing, security, and legal compliance.
This Privacy Policy explains how Tormik Gems collects, uses, stores, and discloses personal information when you:
visit or browse our website;
create or use an account;
add products to a shopping cart or wishlist;
place an order;
communicate with us;
subscribe to communications;
submit reviews or other content; or
otherwise interact with our Services.
If there is a conflict between this Privacy Policy and our Terms of Service concerning the collection, processing, or disclosure of personal information, this Privacy Policy applies to those privacy-related matters.
Please read this Privacy Policy carefully.
By using or accessing the Services, you acknowledge that you have read and understood this Privacy Policy.
2. Personal Information We Collect
For purposes of this Privacy Policy, “personal information” or “personal data” means information that identifies you or can reasonably be associated with or linked to you.
Personal information does not include information that has been anonymized or irreversibly de-identified so that it can no longer reasonably identify you.
Depending on how you interact with our Services and where you reside, we may collect or process the following categories of personal information.
2.1 Contact Information
This may include:
full name;
billing address;
shipping address;
email address;
telephone number; and
other contact details you provide to us.
2.2 Account Information
If you create an account, we may collect:
username;
email address;
password or authentication information;
account preferences;
saved addresses;
account settings; and
other information necessary to maintain your customer account.
Passwords are intended to be stored using appropriate security mechanisms and should never be shared with other persons.
2.3 Order and Transaction Information
When you make a purchase, we may collect information relating to the transaction, including:
products purchased;
products viewed;
products added to your cart;
products added to your wishlist;
order numbers;
transaction dates;
order value;
shipping information;
billing information;
returns;
refunds;
exchanges;
cancellations; and
related transaction history.
2.4 Payment Information
Payment information may include:
payment method;
payment transaction details;
payment status;
payment confirmation;
transaction identifiers; and
other information required to process or verify a payment.
Where payments are processed through external payment providers, payment-card or financial information may be collected and processed directly by the relevant payment provider.
Tormik Gems does not necessarily receive or store complete payment-card details where the selected payment provider processes those details directly.
2.5 Communications
When you contact us, we may collect information contained in your communications, including:
customer-support requests;
emails;
WhatsApp or other business communications;
product questions;
complaints;
feedback;
reviews; and
other information you voluntarily provide.
2.6 Device and Technical Information
When you access our website, certain technical information may be collected automatically, including:
IP address;
browser type;
browser version;
operating system;
device type;
network information;
language preferences;
approximate location derived from technical information;
referring pages;
pages visited;
session information;
timestamps; and
other technical identifiers.
2.7 Usage Information
We may collect information about how you interact with our Services, including:
pages visited;
products viewed;
searches performed;
links clicked;
shopping-cart activity;
wishlist activity;
interactions with website features;
approximate session duration; and
other website usage information.
3. Sources of Personal Information
We may obtain personal information from the following sources.
3.1 Directly From You
We may collect information when you:
create an account;
place an order;
complete checkout;
contact us;
subscribe to communications;
submit a review;
participate in promotions;
request customer support; or
otherwise provide information to us.
3.2 Automatically Through the Services
We may automatically collect certain technical and usage information when you browse or interact with our website.
This may occur through:
cookies;
session technologies;
pixels;
logs;
analytics technologies; and
similar technologies.
3.3 From Service Providers
We may receive information from service providers that help us operate our business, such as:
payment providers;
hosting providers;
shipping providers;
analytics providers;
customer-support providers;
email providers;
security providers; and
other technology or business service providers.
3.4 From Partners and Other Third Parties
We may receive information from business partners, advertising providers, fraud-prevention services, social-media platforms, or other third parties where permitted by applicable law.
4. How We Use Personal Information
Depending on how you interact with us, we may use personal information for the following purposes.
4.1 Providing and Managing Our Services
We use personal information to:
process and fulfil orders;
process payments;
provide customer accounts;
manage shopping carts and wishlists;
arrange shipping;
process returns, refunds, exchanges, and cancellations;
provide customer support;
communicate about orders;
provide product recommendations;
maintain and improve our website;
personalize your shopping experience; and
provide other services requested by you.
4.2 Marketing and Advertising
Where permitted by applicable law and, where required, based on your consent, we may use personal information to:
send promotional emails;
send marketing communications;
inform you about products and offers;
provide personalized content;
measure marketing campaigns;
display advertisements; and
improve our marketing activities.
You may unsubscribe from promotional communications at any time using the unsubscribe mechanism provided in the communication or by contacting us.
Transactional communications, such as order confirmations, payment notifications, shipping notifications, security messages, and account-related communications, may continue even if you opt out of marketing communications.
4.3 Security and Fraud Prevention
We may process personal information to:
authenticate accounts;
detect suspicious activity;
prevent fraud;
investigate unauthorized transactions;
protect our website and infrastructure;
prevent abuse;
investigate security incidents;
protect customers and other users; and
maintain the security and integrity of our Services.
4.4 Communication and Customer Support
We use personal information to:
respond to inquiries;
provide customer support;
investigate complaints;
communicate about orders;
answer product questions;
provide requested information; and
maintain our business relationship with customers.
4.5 Legal and Regulatory Purposes
We may process personal information where necessary to:
comply with applicable laws;
comply with tax and accounting obligations;
respond to lawful requests from authorities;
establish, exercise, or defend legal claims;
investigate suspected unlawful activity;
enforce our Terms of Service or other policies; and
protect our legal rights and legitimate business interests.
5. Legal Bases for Processing
Where data-protection laws such as the GDPR apply, we process personal data based on one or more applicable legal bases.
These may include:
Contract
Processing may be necessary to:
process your order;
provide requested services;
manage your account;
arrange delivery; or
fulfil our contractual obligations.
Legal Obligation
Processing may be necessary to comply with legal obligations, including:
tax;
accounting;
financial;
consumer-protection;
fraud-prevention; and
regulatory requirements.
Legitimate Interests
We may process personal information where necessary for legitimate business interests, such as:
website security;
fraud prevention;
service improvement;
customer support;
business administration;
network and information security; and
protecting our legal rights.
Where we rely on legitimate interests, we consider your rights and interests before processing your information.
Consent
Where required, we may process personal information based on your consent.
You may withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing performed before consent was withdrawn.
6. Cookies and Similar Technologies
Our website may use cookies and similar technologies to provide, secure, analyze, and improve the Services.
Cookies may be used for purposes including:
essential website functionality;
shopping-cart functionality;
account authentication;
remembering preferences;
security;
analytics;
performance measurement;
personalization; and
marketing, where permitted.
Where legally required, non-essential cookies will only be used after obtaining the appropriate consent.
You may be able to manage cookies through your browser settings or through the cookie-consent mechanism provided on our website.
Disabling certain cookies may affect the functionality of the Services.
7. How We Disclose Personal Information
We may disclose personal information to third parties where necessary for legitimate business purposes, contractual performance, legal compliance, or other lawful purposes.
Such recipients may include:
7.1 Technology and Service Providers
We may share information with providers that support our business operations, including:
Shopware-related technical infrastructure;
website hosting providers;
cloud infrastructure providers;
payment processors;
shipping and logistics providers;
email providers;
customer-support platforms;
analytics providers;
security providers;
fraud-prevention services;
backup providers; and
other technical service providers.
These providers may process information on our behalf where they act as service providers or processors.
7.2 Payment Providers
When you select a payment method, relevant transaction and payment information may be transmitted to the payment provider necessary to process your payment.
The payment provider may process your information under its own privacy policy and applicable legal requirements.
7.3 Shipping and Fulfilment Providers
We may provide shipping-related information, including your name, delivery address, telephone number, email address, and order details, to shipping or logistics providers where necessary to deliver your purchase.
7.4 Marketing and Advertising Partners
Where permitted by law and, where required, with your consent, we may share limited information with marketing or advertising service providers to:
deliver marketing communications;
measure advertising performance;
personalize advertising; or
analyze customer interactions.
7.5 Legal and Regulatory Authorities
We may disclose information where reasonably necessary to:
comply with applicable law;
respond to lawful governmental requests;
comply with court orders;
respond to legal proceedings;
protect our rights; or
investigate fraud, security incidents, or unlawful activity.
7.6 Business Transactions
Personal information may be transferred as part of a business transaction such as:
merger;
acquisition;
restructuring;
financing;
sale of assets;
bankruptcy; or
transfer of substantially all or part of our business.
8. Shopware and Technical Infrastructure
Tormik Gems uses Shopware as an e-commerce software platform.
Shopware provides technical functionality that may support parts of our online store, including:
product catalogue functionality;
customer accounts;
shopping cart functionality;
checkout;
order management;
administration functionality;
store configuration; and
related e-commerce functionality.
Shopware itself does not determine the commercial purposes for which Tormik Gems processes customer information.
Depending on the technical architecture used to operate our store, certain data may be processed or stored by hosting providers, infrastructure providers, extensions, integrations, or other technical service providers.
The specific processing activities performed by these providers depend on the configuration and services used by Tormik Gems.
Where a third party acts as an independent controller, its own privacy policy may also apply.
9. Third-Party Services and Integrations
Our Services may integrate with external services, including payment providers, shipping providers, analytics tools, communication platforms, social-media services, security services, and other third-party technologies.
When you interact with a third-party service, information may be processed according to that provider's own privacy policy and terms.
We encourage you to review the privacy practices of third-party services before using them.
10. Third-Party Websites and Links
Our website may contain links to websites, applications, social-media platforms, or other services operated by third parties.
We do not control third-party websites and are not responsible for:
their content;
privacy practices;
security;
availability;
accuracy; or
handling of personal information.
When you leave our website, we recommend reviewing the privacy policy and terms of the destination website.
11. Children's Data
Our Services are not intended for children who are below the applicable age of digital consent or otherwise unable to lawfully provide personal information under applicable law.
We do not knowingly collect personal information from children where such collection is prohibited by law.
If you believe that a child has provided personal information to us unlawfully, please contact us using the information provided in the Contact section.
If we become aware that we have collected personal information from a child where collection was not legally permitted, we will take reasonable steps to delete that information where required by applicable law.
12. Security of Personal Information
We take reasonable technical and organizational measures designed to protect personal information against:
unauthorized access;
unauthorized disclosure;
alteration;
destruction;
accidental loss; and
other unlawful or unauthorized processing.
Security measures may include access controls, authentication mechanisms, encrypted connections, server security, monitoring, backups, and other appropriate technical measures.
However, no method of transmission or storage is completely secure.
Therefore, we cannot guarantee absolute or perfect security.
You should avoid sending sensitive information through unsecured communication channels.
13. Retention of Personal Information
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
Retention periods may depend on:
the purpose for which information was collected;
whether you maintain an account;
whether an order or transaction remains active;
legal and tax requirements;
accounting obligations;
dispute resolution;
fraud prevention;
enforcement of agreements; and
other legitimate business requirements.
When personal information is no longer required, we may securely delete, anonymize, or otherwise dispose of it in accordance with applicable law.
14. Your Privacy Rights
Depending on where you live and subject to applicable legal conditions and exceptions, you may have certain rights regarding your personal information.
These may include:
14.1 Right of Access
You may have the right to request confirmation as to whether we process your personal information and to request access to that information.
14.2 Right to Correction
You may have the right to request correction of inaccurate or incomplete personal information.
14.3 Right to Deletion
In certain circumstances, you may have the right to request deletion of your personal information.
This right is subject to legal exceptions, including information that we are required to retain by law.
14.4 Right to Data Portability
Where applicable, you may have the right to receive certain personal information in a structured, commonly used, and machine-readable format and, where technically feasible, request its transfer to another provider.
14.5 Right to Restrict Processing
In certain circumstances, you may have the right to request that we restrict the processing of your personal information.
14.6 Right to Object
Where processing is based on legitimate interests or where applicable law otherwise provides, you may have the right to object to certain processing activities.
You may also object to direct marketing at any time.
14.7 Right to Withdraw Consent
Where processing is based on consent, you may withdraw your consent at any time.
Withdrawal does not affect processing carried out before the withdrawal.
15. Marketing Communication Preferences
You may opt out of promotional communications at any time.
For email marketing, you can generally use the unsubscribe option provided in the relevant email.
If you opt out of marketing communications, we may still send necessary non-promotional communications, including:
order confirmations;
invoices;
payment notifications;
shipping notifications;
delivery updates;
account-security notifications; and
other transactional communications.
16. European Economic Area and UK Privacy Rights
If you reside in the European Economic Area (EEA) or the United Kingdom, additional rights may apply under applicable data-protection laws.
Subject to applicable exceptions and limitations, these may include:
access to your personal data;
correction of inaccurate data;
deletion of personal data;
restriction of processing;
objection to processing;
data portability; and
withdrawal of consent where consent is the legal basis.
You may also have the right to object to processing based on legitimate interests in circumstances provided by applicable law.
Where we process personal information for direct marketing purposes, you generally have the right to object at any time.
17. Data Protection Complaints
If you have concerns about how we process your personal information, we encourage you to contact us first so that we can investigate and attempt to resolve your concern.
You may also have the right to lodge a complaint with the relevant data-protection supervisory authority in your country or region.
For residents of the EEA or UK, the competent supervisory authority will generally depend on your country of residence or the circumstances of the processing.
18. International Data Transfers
Some of our service providers may process or store personal information outside the country in which you reside.
Where personal information is transferred internationally, we will take appropriate measures required by applicable data-protection laws.
For transfers from the EEA or UK to countries that do not provide an adequate level of protection, appropriate safeguards may include:
European Commission Standard Contractual Clauses;
UK-approved transfer mechanisms;
adequacy decisions; or
other legally recognized transfer mechanisms.
19. Automated Decision-Making and Profiling
Certain Services or third-party technologies may use automated processing, analytics, personalization, or recommendation technologies.
Where applicable law provides rights concerning automated decision-making or profiling, you may have rights to obtain information about such processing or to object to it.
Tormik Gems does not intend to make decisions producing legal or similarly significant effects solely through automated processing unless permitted by applicable law and appropriate safeguards are in place.
20. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
changes to our business;
changes to our Services;
changes in technology;
changes to our data-processing practices;
legal or regulatory developments; or
other operational requirements.
When we update this Privacy Policy, we will update the “Last updated” date at the beginning of this document.
Where required by law, we will provide additional notice of material changes.
We encourage you to periodically review this Privacy Policy.
21. Contact Us
If you have questions regarding this Privacy Policy, want to exercise a privacy right, or have concerns about how your personal information is processed, please contact us.
Tormik Gems
Email: info@tormikgems.com
Telephone / WhatsApp: +92 348 5949959
Business Address:
Braysakor Post Office
Tormik 16100
Tehsil Roundu
District Skardu
Gilgit-Baltistan
Pakistan
For purposes of applicable data-protection laws, Tormik Gems is the data controller for personal information processed in connection with the Services, except where a third party independently determines the purposes and means of processing under applicable law.