Legal notices

Security and privacy FAQ

Last updated September 2026

How we keep your payments, your downloads and your data safe, in plain language. For the full detail, see the cyber security notice and the Privacy Policy.

We never handle your card details

Payments are processed by Stripe. Your card details go straight to Stripe's servers, and we never see or store them. Stripe is certified to PCI DSS Level 1, the highest security standard in the payments industry.

Your connection is encrypted

Every page and every download is served over modern TLS encryption, versions 1.2 and 1.3, and older, weaker protocols are refused. HSTS makes sure browsers only ever reach us over a secure connection.

We run on Cloudflare

The site is served through Cloudflare's network, which gives us:

Our files are just files

What you download from us is geometry and data: 3D models, GemCad cutting files, CSV tables and diagrams. There are no installers, macros or scripts. If anything claiming to come from us asks you to run a program, do not: tell us.

What we collect

What we need to sell you a file and let you download it: your name, your email, your billing country and what you bought. We do not:

How to have your data deleted

Email [email protected] from the address you bought with, and we will delete your download records and correspondence within one month. Invoices are kept for seven years and VAT country evidence for ten, because Dutch and EU tax law require it.

Found a security issue?

We welcome responsible disclosure. Write to [email protected], or see our security.txt. We respond to every report, and we will not take legal action against anyone who acts in good faith.

Please report privately, do not access or change anyone else's data, and give us reasonable time to fix the problem before you disclose it. Thank you for helping keep our customers safe.

Compliance

Data protectionGDPR, the EU General Data Protection Regulation
Data controllerCompliance Condo B.V. (trading as Digital Gemology)
Registered inthe Netherlands, KvK 95458859
VAT numberNL867139341B01
NCSCVoluntarily registered with the Nationaal Cyber Security Centrum