Legal
Privacy Policy
Meluhaa Diamonds · Effective August 25, 2026
This policy describes how Meluhaa Diamonds (“we,” “us”) handles information collected through meluhaadiamonds.com and the Meluhaa Diamonds trade platform (the “Service”). The Service is a business-to-business tool for the jewelry trade — we do not sell to consumers, and accounts are issued only to verified trade businesses.
Information we collect
Account and company information you provide at signup and afterward — your name, company name, business address, phone number, email, and login credentials.
Order and memo history created in the ordinary course of business — orders, invoices, consignment memos, payments, and related documents tied to your account.
Technical information collected automatically — log data, device and browser type, and cookies. Cookies are limited to keeping you signed in and the site working; we do not use advertising or tracking cookies.
How we use information
We use information to manage your trade account, process and fulfill orders and consignments, generate commercial documents, provide customer support, secure the Service, and meet legal and recordkeeping obligations applicable to the wholesale diamond trade. Order confirmations, memo and invoice notices, and account emails are sent through our transactional email provider, Resend.
Sign-in and authentication
Accounts and sign-in are handled by Supabase, our authentication and database provider. You can sign in with an email address and password, or with “Sign in with Google.” Either way, an account still has to be approved by us before it can be used — signing in with Google does not by itself create a trade account.
Google user data
This section describes exactly how the Meluhaa Diamonds Service accesses, uses, stores, and shares Google user data. It applies to Meluhaa Diamonds and to no one else.
What we access. When you choose “Sign in with Google,” we request the basic Google profile and email address scopes only — your name, email address, profile picture, and Google account identifier. That is the entire list. The Service does not request and does not receive Gmail, Google Drive, Google Calendar, Contacts, or any other sensitive or restricted Google data, and it never reads, sends, or modifies anything in your Google account.
How we use it. We use that data for one purpose: to create your sign-in identity, verify who you are when you return, and match you to your approved trade account so we can show you your own pricing, orders, and memos. We do not use Google user data for advertising, ad targeting, ad personalization, profiling, or any form of marketing, and we do not use it to train machine-learning or AI models.
How we store it. Your name, email address, profile picture URL, and Google account identifier are stored in our Supabase-hosted database and authentication system in the United States, protected by encryption in transit and role-based access limited to the few Meluhaa Diamonds staff who administer accounts. We keep it for as long as your account is open, and delete or de-identify it after closure except where a record must be kept for tax, accounting, or other legal reasons.
How we share it. We do not sell or transfer Google user data to anyone, and we do not share it with third parties for their own purposes. The only party that handles it is Supabase, which hosts our authentication and database infrastructure on our behalf and may process it solely to provide that service to us. We would disclose it otherwise only if compelled by law.
How to revoke access. You can disconnect the Service from your Google account at any time: open your Google Account, go to Security › Your connections to third-party apps & services (also reachable at myaccount.google.com/connections), find the entry for HV Diamonds — both of our storefronts sign in through the same registered application, so that is the name Google lists it under — and remove its access. Revoking access stops any further sharing of Google data with us. To also have the copy we already hold deleted, email us at the address below and we will handle it as described under Closing an account.
Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
Sharing
We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not give it to third parties for their own marketing. Beyond that, we disclose information only in three situations: to the service providers that run our business systems, to a financing provider when an account asks to buy on third-party net terms, and where the law requires it.
The providers we use today are Supabase (authentication and database hosting), Resend (transactional email delivery), shipping carriers for deliveries, and QuickBooks Online (Intuit Inc.), where our accounting records are kept. If your account applies for or uses third-party net-terms financing, the information needed to underwrite and service that arrangement goes to the financing provider, who then handles it under their own privacy policy. Each service provider processes information only to provide its service to us. This list can change as our systems change; the categories above are the commitment.
Where information is stored, and how it is protected
Account data and trade records are held in our Supabase-hosted database in the United States. Accounting records live in QuickBooks Online. Data is encrypted in transit, access is role-based and limited to staff who need it to do their job, and customer records are separated so that one trade account cannot see another’s pricing, orders, or memos. No system is perfectly secure, and we do not claim otherwise — if we learn of a breach affecting your information we will notify you as required by California law.
Commercial records — invoices, memos, payments — are retained as long as required for legal, tax, and accounting purposes. Other information is kept only as long as needed to operate the Service.
Your choices
You may request access to, correction of, or deletion of your business contact information by writing to us at the email below. We will honor requests except where retention is required by law or for legitimate business records.
Closing an account
To close a trade account, email us from the address on file at meluhaadiamonds@yahoo.com or call the office and ask us to close it. We will disable the login, end any Google sign-in connection on our side, and delete the profile information associated with the account — including anything received from Google. Completed commercial records — invoices, consignment memos, payments, and shipping documents — are kept in our accounting system as required by law for tax and recordkeeping purposes, and cannot be erased on request.
California privacy rights
Meluhaa Diamonds operates from California, and this section applies to California residents under the California Consumer Privacy Act as amended by the California Privacy Rights Act.
Categories of personal information we collect. Identifiers (name, business email address, phone number, business address, account identifier, and IP address); commercial information (orders, invoices, consignment memos, payment and shipping records); internet or network activity (log data, device and browser type, and cookies limited to keeping you signed in); and, if you sign in with Google, the basic profile and email data described above. We do not collect government identifiers, precise geolocation, biometric information, or sensitive personal information as that term is defined by California law.
Where it comes from. Directly from you, when you apply for a trade account, sign in, place an order, or contact us. From your Google account, if you choose to sign in with Google. From your own activity on the Service, such as the orders, memos, and payments recorded against your account. And, where an application needs checking, from business records and references you point us to in order to confirm you are a legitimate trade business.
Business purposes. We collect this information to open and administer trade accounts, verify that an applicant is a legitimate trade business, process and fulfill orders and consignments, generate invoices and memos, keep our accounting records, provide customer support, secure the Service and prevent fraud, and comply with legal and recordkeeping obligations.
We do not sell or share personal information. We have not sold personal information, and we do not share personal information for cross-context behavioral advertising, as those terms are defined by the CCPA/CPRA — not in the last twelve months and not at all. We run no advertising or tracking cookies, and we do not disclose Google user data to anyone for their own purposes.
Your rights. You have the right to know what personal information we have collected about you and how we use and disclose it, the right to request deletion, the right to correct inaccurate information, and the right to opt out of sale or sharing — which in our case is already the default, because we do neither. You will not be discriminated or retaliated against for exercising any of these rights: no denial of service, different prices, or reduced service quality.
One honest limit on deletion, which the law also recognizes: a completed purchase, invoice, memo, or payment is a business and tax record, and we cannot erase it on request. What we delete is the account and contact information described under “Closing an account” above. The transaction records stay for as long as tax and accounting law requires, and are not used for anything else.
How to make a request. Email meluhaadiamonds@yahoo.com with “California privacy request” in the subject line, or call the office number below. We will verify the request against the account on file — usually by confirming it comes from the email address we already have — and respond within 45 days, extending once if necessary and telling you if we do. An authorized agent may submit a request on your behalf with written permission that we can verify.
Children
The Service is a business-to-business trade tool and is not directed to children. Accounts are issued only to verified trade businesses, and we do not knowingly collect personal information from anyone under 18 (or under 16 for purposes of California law). If we learn we have collected such information, we will delete it.
Changes
We may update this policy from time to time; the effective date above reflects the latest revision.
Contact
Meluhaa Diamonds · 608 S Hill St, Suite 1107, Los Angeles, CA 90014 · Office (800) 501-4873 · meluhaadiamonds@yahoo.com