Privacy policy
LOYA B.V. ("LOYA", "we", "us" or "our") respects your privacy and processes personal data carefully, confidentially and in accordance with the General Data Protection Regulation (GDPR/AVG) and other applicable laws and regulations.
This Privacy Statement applies exclusively to personal data of living natural persons. Data relating exclusively to deceased persons in principle does not fall under the GDPR, unless it also contains personal data of living persons.
In this Privacy Statement, we explain which personal data we collect, why we process it, how we protect it and what rights you have.
Contents
- Who are we?
- Which personal data do we process?
- Data relating to deceased persons
- Why do we process your personal data?
- Legal basis
- With whom do we share your data?
- International transfers
- Security
- Retention periods
- Cookies
- Your rights
- Newsletter
- Minors
- Automated decision-making
- Complaints
- Changes
- Data breaches
- Contact
1. Who are we?
LOYA B.V.
Chamber of Commerce (KVK) number: 99780453
VAT: NL8691.29.806.B.01
Address:
Keizersgracht 520
1017 EK Amsterdam
The Netherlands
info@loya-bv.com
www.loyadiamonds.com
LOYA is the controller for the processing of personal data as described in this Privacy Statement.
2. Which personal data do we process?
Depending on your contact with LOYA, we may process the following personal data, among others.
Identification data
- Name
- Address
- City/town
- Country
- Telephone number
- Email address
- Company details
Order data
- Order number
- Products ordered
- Payment status
- Delivery address
- Billing details
Payment data
LOYA does not itself process full payment card details.
Payments are processed via certified payment providers.
Communication
When you contact us, we may process:
- Emails
- Chat messages
- WhatsApp messages
- Telephone conversations and, if announced in advance, recordings of telephone conversations. When a conversation is recorded, LOYA informs the data subject of its purpose before the recording begins.
- Customer service data
MYLOYA
If you use MYLOYA, depending on the functionalities you use, we may process:
- Photos
- Videos
- Memories
- Documents
- Texts
- Family members
- Account details
- Login information
MYLOYA may contain personal data of family members and other third parties. The user must be entitled to upload and share this data. MYLOYA may also contain information revealing health, religion, origin or other sensitive circumstances. LOYA uses this content solely to provide and secure MYLOYA and not for advertising profiling.
Website data
When you visit our website, we may process automatically collected technical data, including:
- IP address
- Browser type
- Device
- Pages visited
- Cookies
- Usage statistics
Data relating to memorial material and Chain of Custody
- name of the person or animal to whom the memorial material relates;
- type and quantity of material received;
- photos of packaging and receipt;
- unique identification code;
- dates and records of transfer and production;
- particulars and incident records.
3. Data relating to deceased persons
LOYA produces Memorial Diamonds from human or animal cremation ashes, hair or other memorial material.
Data relating exclusively to a deceased person in principle does not fall under the GDPR.
Where information also relates to living persons (such as bereaved relatives or family members), we process this data in accordance with this Privacy Statement.
LOYA only processes data that is necessary for the performance of the agreement.
4. Why do we process your personal data?
We process personal data exclusively for legitimate purposes.
These include:
- Fulfilling your order
- Manufacturing Memorial Diamonds
- Customer service
- Shipping
- Payments
- Warranty
- Repairs
- Communication
- Quality monitoring, training, evidence and proper handling of recorded telephone conversations;
- Registration, identification and traceability of memorial material;
- Administration
- Legal obligations
- Fraud prevention
- Security
- Improving our services
- Managing MYLOYA
- Securing your account
LOYA does not process more personal data than is necessary for the purpose concerned.
5. Legal basis
We process personal data only where there is a legal basis for doing so.
This may be:
- Performance of the agreement;
- Legal obligation;
- Legitimate interest;
- Your consent.
Where processing is based on consent, you can withdraw this consent at any time. Where LOYA processes personal data on the basis of a legitimate interest, this may relate to fraud prevention, security of orders and systems, quality monitoring, evidence, improving customer service, managing business relationships and establishing, exercising or defending legal claims. In doing so, LOYA always weighs its interest against the privacy interests of the data subject.
6. With whom do we share your data?
LOYA never sells your personal data.
Where necessary, we may share data with:
- Payment providers;
- Logistics service providers;
- Laboratories and international production partners;
- Jewellery manufacturers;
- IT service providers;
- Hosting providers;
- Cloud storage;
- Accountants;
- Insurers;
- Legal advisers;
- Government authorities where required by law.
Where required by law, LOYA concludes appropriate agreements with third parties.
LOYA only provides the personal data that the service provider concerned needs. Where a service provider acts as a processor, LOYA concludes a data processing agreement. Some recipients may be independent controllers for their own processing.
7. International transfers
Because LOYA operates internationally, personal data may be processed outside the European Economic Area.
If personal data is processed outside the EEA, LOYA ensures that appropriate safeguards are put in place in accordance with the GDPR, including:
- European Standard Contractual Clauses;
- Adequacy decisions of the European Commission;
- Other legally permitted safeguards.
Since LOYA works with international laboratories, personal data may be processed in countries outside the European Economic Area.
LOYA establishes in which countries its production, hosting and IT partners process personal data and assesses in advance which transfer safeguards are required for this.
Information about the transfer safeguard applied and how to obtain a copy of it can be requested via info@loya-bv.com.
8. Security
LOYA takes appropriate technical and organisational measures to protect personal data against:
- Loss;
- Unauthorised access;
- Misuse;
- Alteration;
- Disclosure.
LOYA may use, among other things:
- SSL encryption;
- Access controls;
- Two-factor authentication where possible;
- Encrypted storage;
- Periodic security updates.
No security measure can guarantee absolute security.
9. Retention periods
LOYA does not retain personal data for longer than necessary.
In general, the following retention periods apply:
Administration: 7 years (statutory tax retention obligation)
Warranty data: For as long as necessary for warranty, service or the handling of any disputes.
Customer service: a maximum of 5 years
Newsletter: until unsubscription
Recordings of telephone conversations: a maximum of six months, unless the recording is necessary for handling a complaint, dispute or legal proceedings.
Memorial material and Chain of Custody file: a maximum of two years after delivery of the order, unless longer retention is necessary due to a complaint, incident, dispute or legal obligation.
MYLOYA account: For as long as the account is active. After termination of the account, account data may be retained for a maximum of twelve (12) months for the purposes of account recovery, service provision or the handling of any questions or disputes, unless a longer retention period is required or permitted by law. The data will then be deleted or anonymised in accordance with the MYLOYA & Digital Legacy Policy.
Personal content will not be deleted after termination before the user has had a reasonable opportunity to request or export the content, insofar as required by law.
10. Cookies
LOYA uses cookies. Depending on the cookies actually activated on the Website, LOYA may use functional, analytical and, with consent, marketing cookies.
More information can be found in our Cookie Statement.
The current Cookie Statement prevails if it deviates from this Privacy Statement.
11. Your rights
You have the right to:
- Request access;
- Correct data;
- Have data deleted;
- Restrict processing;
- Object;
- Data portability;
- Withdraw consent.
Requests can be sent to:
info@loya-bv.com
LOYA may ask for additional identification before processing a request. Not every request must be granted by law.
We will respond within one month at the latest. LOYA may refuse or restrict a request where the GDPR or other applicable legislation allows this.
12. Newsletter
When you subscribe to our newsletter, we use your email address solely to inform you about:
- New collections;
- Offers;
- Product news;
- Events;
- Relevant updates.
You can unsubscribe free of charge at any time via the unsubscribe link in every newsletter.
13. Minors
Our website and services are not aimed at persons under the age of 18.
We do not knowingly collect personal data of minors without the consent of a parent or legal guardian. If LOYA discovers that personal data of minors has been processed without the required consent, LOYA will take appropriate measures.
14. Automated decision-making
LOYA does not make decisions based solely on automated processing that produce legal effects for the data subject or similarly significantly affect them, unless LOYA provides separate information about this in advance and this is permitted by law.
15. Complaints
If you have any questions or complaints about the processing of your personal data, you can contact LOYA.
You also have the right to lodge a complaint with:
Dutch Data Protection Authority (Autoriteit Persoonsgegevens)
www.autoriteitpersoonsgegevens.nl
16. Changes
LOYA may amend this Privacy Statement from time to time.
The most recent version is always available via our website.
17. Data breaches
If a data breach occurs, LOYA will act in accordance with the GDPR and, where required by law, notify the Dutch Data Protection Authority and/or the data subjects.
18. Contact
LOYA B.V.
Keizersgracht 520
1017 EK Amsterdam
The Netherlands
info@loya-bv.com
www.loyadiamonds.com
Privacy Statement — LOYA B.V. — Version 1.0, effective 1 September 2026.