Legal notices

Security and privacy FAQ

Last updated October 2026

How we keep checkout, your downloads and your data safe, in plain language. For the full detail, see the cyber security notice and the Privacy Policy.

We never handle your card details

Checkout runs on Lemon Squeezy, a Stripe company, which sells our files as merchant of record. Your card or PayPal details go straight to its payment processors, which are certified to PCI DSS Level 1, the highest security standard in the payments industry. We never see or store them.

Your connection is encrypted

Every page is served over modern TLS encryption, versions 1.2 and 1.3, and older, weaker protocols are refused. Checkout and downloads run on Lemon Squeezy, also over HTTPS. HSTS makes sure browsers only ever reach us over a secure connection.

We run on Cloudflare

The site is served through Cloudflare's network, which gives us:

Our files are just files

What you download from us is geometry and data: 3D models, GemCad cutting files, CSV tables and diagrams. There are no installers, macros or scripts. If anything claiming to come from us asks you to run a program, do not: tell us.

What we collect

What we need to sell you a file and let you download it: your name, your email, your billing country, what you bought and its license key, which Lemon Squeezy passes to us after checkout. We do not:

How to have your data deleted

Email support@digitalgemology.com from the address you bought with, and we will delete your correspondence and the order details we do not have to keep within one month. Sales records are kept for seven years, because Dutch tax law requires it. Your receipt and tax records at Lemon Squeezy are Lemon Squeezy's to delete; we will pass your request on if you ask.

Found a security issue?

We welcome responsible disclosure. Write to support@digitalgemology.com, or see our security.txt. We respond to every report, and we will not take legal action against anyone who acts in good faith.

Please report privately, do not access or change anyone else's data, and give us reasonable time to fix the problem before you disclose it. Thank you for helping keep our customers safe.

Compliance

Data protectionGDPR, the EU General Data Protection Regulation
Data controllerCompliance Condo B.V. (trading as Digital Gemology)
Registered inthe Netherlands, KvK 95458859
VAT numberNL867139341B01
NCSCVoluntarily registered with the Nationaal Cyber Security Centrum