Privacy & Cookie Policy

SUNSHINE Minerals Limited ("SUNSHINE Minerals", "we", "us") is a mineral sourcing and trading company established in 1987, supplying rare gemstones, precious metals and ferroalloys to jewellery houses, refiners, mills and industrial buyers worldwide.

We are the data controller for personal data processed through this website and our commercial correspondence. Our offices are:

• United Kingdom — 562 Commercial Rd, Greater London, E14 7JD
• United States — 901 Ingleside Avenue, Harrison West, Columbus, Ohio, 43016
• Canada — MB-215, Lac Du Bonnet, MB R0E 1A0, Manitoba

For any privacy question, email support@sunshineminerals.online with "Privacy" in the subject line.

• Enquiry and correspondence data — your name, company, job title, email address, telephone number, country and the content of your enquiry.
• Commercial counterparty data — where we trade with you, the contact, banking, tax and compliance information required to complete a transaction.
• Compliance and due-diligence data — identity documents, ownership information and sanctions screening results collected as part of know-your-customer checks.
• Technical and usage data — IP address, device and browser type, referring page, pages viewed and time on page, collected through cookies where you have consented.

We do not knowingly collect special category data, and we ask you not to send it through our enquiry channels.

• To answer enquiries, prepare quotations and negotiate supply agreements.
• To fulfil orders, arrange assay, inspection, insurance, freight and customs.
• To meet legal duties including anti-money-laundering, sanctions, Kimberley Process and responsible-sourcing obligations.
• To maintain accounting, tax and audit records.
• To send commercial updates about products and availability, where you have asked for them or where we have a legitimate interest in contacting you in a business capacity. Every such message carries an unsubscribe link.
• To improve this website, measure the performance of our content and keep the site secure.

• Contract — to negotiate and perform a supply agreement with you or your company.
• Legal obligation — compliance, tax, customs and record-keeping duties.
• Legitimate interests — responding to business enquiries, protecting our business against fraud, and business-to-business communication that you would reasonably expect.
• Consent — non-essential cookies and optional marketing messages. You may withdraw consent at any time.

Cookies are small files stored by your browser. On your first visit we show a banner asking you to accept all cookies, reject everything that is not essential, or set your preferences by category. Nothing beyond strictly necessary cookies is set before you choose, and your choice is remembered so the banner does not reappear. You can change your mind at any time using the Cookie settings link in the footer, or by clearing site data in your browser.

• Strictly necessary (always on) — page routing, security and storing your cookie choice. Cookies: sml-cookie-consent, sml-session.
• Analytics — anonymous, aggregated statistics about which pages and products are viewed. Cookies: _ga, _ga_*, _gid. Retention up to 24 months.
• Functional — remembers preferences such as region, product view and enquiry form drafts. Cookies: sml-region, sml-enquiry-draft.
• Marketing — measures the performance of our trade-press and search campaigns. Cookies: _gcl_au, _fbp, li_sugr.

Rejecting non-essential cookies does not reduce your access to any part of this site. We do not sell personal information and we do not use cookies to build advertising profiles about individuals.

We share personal data only where necessary, with:

• Assayers, inspection agencies, laboratories and gemmological certifiers.
• Freight forwarders, carriers, vault operators, insurers and customs brokers.
• Banks, payment providers and trade-finance institutions.
• Professional advisers, auditors and IT and hosting providers acting for us.
• Regulators and law enforcement where we are legally required to do so.

Service providers act on our written instructions as processors and may not use your data for their own purposes. We never sell your personal data.

We operate from the United Kingdom, the United States and Canada, and trade in Africa, Asia, the Middle East and Europe, so your data may be transferred between these locations. Where data leaves the UK or the European Economic Area we rely on adequacy regulations or on standard contractual clauses together with a transfer risk assessment, and we apply the same security standards regardless of where data is held.

• Unconverted enquiries — 24 months from last contact.
• Customer and supplier records — for the life of the relationship plus 7 years.
• Compliance and know-your-customer records — 5 to 7 years after the relationship ends, as required by applicable anti-money-laundering law.
• Analytics data — up to 24 months, in aggregated form wherever possible.

We use encrypted transport for this website, access controls and least-privilege permissions for our commercial systems, multi-factor authentication for staff accounts, and staff training on handling counterparty information. No transmission over the internet can be guaranteed completely secure; if a breach affects your rights we will notify you and the relevant regulator as required by law.

Depending on where you live you may have the right to access, correct, delete, port or restrict the processing of your personal data, to object to processing based on legitimate interests, and to withdraw consent. These rights arise under the UK GDPR and Data Protection Act 2018, the EU GDPR, PIPEDA in Canada, and state privacy laws including the CCPA/CPRA in the United States. California residents may also request details of the categories of personal information collected and disclosed, and are entitled not to be discriminated against for exercising their rights.

To exercise any right, email support@sunshineminerals.online. We respond within one month, and we may ask you to verify your identity first. If you are not satisfied with our response you may complain to the UK Information Commissioner's Office, the Office of the Privacy Commissioner of Canada, or your local supervisory authority.

This is a business-to-business website. It is not directed at children and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this policy to reflect changes in our operations or in the law. The date at the top of this page shows when it was last revised, and material changes will be highlighted on this page. Where a change affects cookie use we will ask for your consent again.