Privacy notice · POPIA-compliant

How we handle your information.

Prodiam Trading CC respects the trust placed in us when a client shares personal details. This notice explains, plainly, what we collect, why, and how we look after it. It complies with the Protection of Personal Information Act (Act 4 of 2013, “POPIA”).

1. Who we are

Prodiam Trading CC (Suite F1W6) and its sister entity D and D Diamonds CC trading as Procut DCW (Suite F1W6B), both at The Paragon, 1 Kramer Road, Bedfordview, Johannesburg, 2007. Information Officer: Darren Etkind · darren@prodiam.co.za.

2. What we collect

• Contact details you give us in enquiry forms, calls, WhatsApp, or email.
• Trade-account information (registration documents, BBBEE certificates) where you apply for wholesale supply.
• Reservation details: which Prodiam pieces you have placed in your basket (kept locally in your browser via localStorage).
• Standard server logs (IP address, user agent, request path) for security and abuse detection.
• Optional newsletter consent.

3. Why we collect it

• To respond to your enquiry, prepare quotations, and arrange viewings.
• To execute and audit a sale, with full Kimberley Process and SADPMR paperwork.
• To meet anti-money-laundering and FICA obligations on transactions where applicable.
• To send our quarterly client letter, only if you opt in.

4. Who we share it with

We do not sell or rent your information. We share it only where strictly necessary, and only with: South African banking partners (for EFT settlement), our licensed payment processors (Yoco, PayFast), the GIA and SADPMR for stone certification and licence audit, and our regulators where compelled by law. We never share enquiry details with marketing brokers. The one other case is ad measurement: the OpenAI measurement pixel, and our server for it, report WhatsApp clicks, calls and enquiries to OpenAI with your IP address and browser type, and the pixel may send one-way codes made from your email address, phone number and name, never the details themselves (see section 7).

5. How long we keep it

Enquiries that did not result in a sale: 24 months, then deleted. Sale records: 7 years (FICA / SARS retention). Trade-account documents: for the duration of the trade relationship plus 7 years. You may request deletion at any point that retention is not legally required.

6. Your rights under POPIA

• Access the personal information we hold on you.
• Correction of any inaccuracy.
• Deletion, where legally permitted.
• Withdrawal of consent for direct marketing at any time.
• Lodge a complaint with the Information Regulator at inforegulator.org.za.

7. Cookies and analytics

The basket on this site is held in your browser’s local storage; it never leaves your device unless you submit a checkout. We use the following measurement tools, all gated to production traffic only:

• Plausible Analytics, our day-to-day pageview metric. Privacy-first by design, no cookies set, no personal data collected. Aggregated traffic only. To see where visitors come from, your browser keeps a short label of how you first reached the site (for example “Google search” or “Gemini”) and the date, in local storage, for up to a year. It holds no identifier. The label is counted by Plausible and added to any enquiry form you send, so the desk knows how you found us. If your browser sends a Global Privacy Control signal, it is not kept.
• Google Analytics 4 (GA4) and the Google Ads measurement tag, where configured. These set first-party cookies under www.prodiam.co.za to measure page traffic, audience signals and ad performance. We use IP anonymisation and do not pass any personally identifiable information to Google. You can opt out via the Google Analytics opt-out browser add-on.
• OpenAI Ads measurement pixel, for our ads in ChatGPT. It sets two first-party cookies under www.prodiam.co.za: one keeps the reference of a ChatGPT ad you clicked, for 30 days; the other is a random browser reference, kept for a year. It tells OpenAI when a visit leads to a WhatsApp message, a phone call or an enquiry form, so we can see which ads work. When you send a form, it may also turn your email address, phone number and name into one-way codes (SHA-256 hashes) in your browser and send those, with your town if you typed one, so OpenAI can match the enquiry to an ad click. Your message, photos and stone details are never sent. Our server also passes the same three events to OpenAI, with those two references, your IP address and browser type, so a browser that blocks the pixel does not lose the count; it stores nothing. If your browser sends a Global Privacy Control signal, or you turn it off here, nothing is sent at all. Turn off OpenAI ad measurement in this browser
• Meta pixel, for our ads on Facebook and Instagram. It sets first-party cookies under www.prodiam.co.za: a random browser reference, and, if you arrived from one of our Meta ads, the reference of that click, each kept for 90 days. It tells Meta which pages you viewed here and when a visit leads to a WhatsApp message, a phone call or an enquiry form, so we can see which ads work and show our ads again to people who have visited. Nothing you type into a form is sent. If your browser sends a Global Privacy Control signal, or you turn it off here, nothing is sent at all. Turn off Meta ad measurement in this browser
• Embedded Google Map on contact pages, which Google may load with its own cookies under its policy.

We do not use any cross-site advertising trackers beyond the Google, OpenAI and Meta measurement tags above. We do not sell visitor data, and these tags are used only to measure our own pages and ads.

8. Contact about privacy

Email darren@prodiam.co.za, subject line POPIA request. We aim to respond within 30 days of receipt, as required.