Welcome to BoldRadiant
今天下单立减100元优惠
Welcome to BoldRadiant
Privacy Policy
Aug 01, 2026

BoldRadiant (“BoldRadiant”, “we”, “us” or “our”) operates boldradiant.com and its regional storefronts, offering jewelry and engagement rings featuring lab-grown diamonds. We respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains what personal information we collect, how and why we use it, with whom we share it, how long we keep it, and the rights and choices available to you.


This Privacy Policy takes effect on August 1, 2026 and was last updated on that date. Please read it together with our Cookie Policy, our User Agreement, and, where relevant, our After-Sales Privacy Statement.

1. Introduction and Scope

This Privacy Policy applies to personal information we collect through our websites, online stores, customer accounts, checkout and payment flows, live chat, contact and subscription forms, product reviews, after-sales services, and related communications (together, our “Services”). It applies regardless of the region (“area”, such as us or hk) or language (such as en, zh-cn or ja) in which you access our Services.


Depending on where you are located, different laws may apply to the processing of your personal information, including the EU/EEA General Data Protection Regulation (GDPR), the UK GDPR, Swiss data protection law, and the California Consumer Privacy Act as amended (CCPA/CPRA). Where a specific law grants you additional rights, the relevant sections below explain them.


The company acting as the data controller (the entity responsible for your personal information) is BoldRadiant. Our full legal entity name, registered address, governing law and dispute-resolution terms are as follows: the data controller is BoldRadiant, contactable at info@boldradiant.com (our registered postal address is available on request); this Policy is governed by the laws of the Hong Kong SAR, and the courts of Hong Kong have jurisdiction, without prejudice to any mandatory consumer-protection rights in your country of residence.

2. Information We Collect

We collect personal information that you provide directly, information generated as you use our Services, and limited information from third parties such as login and payment providers. Below we describe what we collect at each business touchpoint.

2.1 Account Registration, Login and Password Reset

When you create an account, sign in, or reset your password, we collect your email address and a password. Passwords are stored only in hashed form; we never store your password in plain text. If you choose to sign in with Google, we receive basic Google account information (such as your name and email address) through an authorization flow handled by our backend; we do not receive your Google password.

2.2 Checkout and Orders

When you place an order, we collect your name, email address, phone number, shipping address, billing address, and the details of the items you order. We use this information to process, fulfill and support your order.


Payment card data is handled directly by our payment providers. When you pay by card, your card number and related payment credentials are transmitted from your browser directly to Stripe (via Stripe.js) or to PayPal (via the PayPal SDK). This sensitive payment data does not pass through, and is not stored on, our own servers. We receive only limited confirmation and transaction reference information needed to complete and reconcile your order.

2.3 Profile and Address Book

If you maintain a profile, we store the profile details and saved addresses you provide in your address book. For your protection, when we display your email address or phone number back to you in the account interface, we mask part of the value.

2.4 Email Subscription

If you subscribe to our marketing or newsletter emails, we collect your email address so we can send you the communications you requested. Every marketing email contains an unsubscribe link, and you may opt out at any time.

2.5 Contact Form

When you contact us through a contact form, we collect your name, email address and the message you send so we can respond to your inquiry.

2.6 Product Reviews

If you submit a product review, we collect your rating, review text, and any images or videos you upload. Reviews may be displayed publicly together with the information you choose to include.

2.7 Live Chat

When you use our live chat, we collect your name, email address, the messages you send, any files you upload, and, where relevant, a snapshot of the associated order to help our agents assist you. Our live chat is self-hosted by BoldRadiant over a secure WebSocket (wss) connection; it is not a third-party chat SaaS.

2.8 After-Sales Tickets

When you open an after-sales request, we collect the ticket content, the associated order, your contact details, and any supporting files or evidence you upload. See our After-Sales Privacy Statement for more detail.

2.9 Account Deletion Requests

When you request deletion of your account, we send a verification code to your email address and process the confirmation you provide to initiate the deletion. See Section 12 for how account deletion and anonymization work.

2.10 Information Collected Automatically

As you browse, we and our tracking technologies may collect technical and usage information such as device and browser type, pages viewed, links clicked, and general interaction data. Details of the specific cookies, local storage keys and analytics used are set out in Section 3 and in our Cookie Policy.

3. Cookies and Tracking Technologies

We use a small number of cookies, browser local storage, and — where enabled and permitted by your consent — third-party analytics and marketing technologies. This section summarizes them; our Cookie Policy lists each item in full.

3.1 Cookies We Use

We use only three first-party cookies:

  • token — your login session (a JWT), valid for approximately 7 days. This cookie is essential and cannot be switched off if you wish to remain logged in.
  • area — your region code (such as us or hk), stored for approximately 720 days; it determines the applicable merchant and currency. This cookie is functional.
  • locale and NEXT_LOCALE — your language preference, stored for approximately 720 days. These cookies are functional.


Your cookie consent choices are not stored in a cookie; they are stored in your browser’s local storage (see below).

3.2 Browser Local Storage

We store certain data in your browser’s local storage to make our Services work and to remember your preferences and activity on your device. These items include:

  • cookie_permissions_list — your cookie consent choices (the functional / analytical / marketing category switches).
  • pref_locale and pref_area — mirrors of your language and region preferences.
  • tourists_email — a guest (not-logged-in) email address.
  • address_form — a temporary store of guest checkout address details.
  • store_shopping — your shopping cart.
  • store_shopping_discount_codes — discount codes applied to your cart.
  • order — the order/payment process state, which may include temporary data such as a payment client secret.
  • boldradiant_chat_* — live-chat visitor ID, lead, session and read-status data.
  • boldradiant_recently_viewed — products you recently viewed.
  • blog:show-product:* — product-display state within blog articles.


We also use browser session storage solely as a technical guard for reloading page resources (chunk reloads); it holds no personal data.

3.3 Analytics and Marketing Technologies

Where enabled and where you have given the relevant consent, we may load the following third-party technologies:

  • Google Analytics 4 (GA4, via gtag) — loaded only after you grant analytical consent. The measurement ID is configurable and may be absent; GA4 is used only where enabled.
  • Meta (Facebook) Pixel — loaded only after you grant marketing consent, and only where enabled.


We do not use reCAPTCHA, external font CDNs, Hotjar, Segment, TikTok Pixel or similar tools. A data layer may exist in the page, but analytics behavior is governed by GA4 as described above and only where enabled.


You can review and change your choices at any time through Cookie Settings, accessible from the bottom of our web pages. See Section 5 and our Cookie Policy for details.

4. How We Use Your Information

We use your personal information for the following purposes:

  • To create and manage your account, authenticate you, and enable password reset.
  • To process, fulfill, ship and support your orders, and to handle returns, exchanges and after-sales requests.
  • To provide customer service, including live chat and responses to contact-form inquiries.
  • To send transactional communications (such as order confirmations and account or security notices).
  • To send marketing and newsletter emails where you have subscribed or where otherwise permitted, subject to your right to opt out.
  • To display and manage product reviews you submit.
  • To remember your preferences (language, region) and improve your browsing experience.
  • Where enabled and consented, to measure and analyze site performance and audience (analytics) and to deliver relevant advertising (marketing).
  • To maintain the security and integrity of our Services and prevent fraud and abuse.
  • To comply with legal obligations and to establish, exercise or defend legal claims.

Where the GDPR or UK GDPR applies, we rely on the following legal bases under Article 6:

  • Contract — to create your account, process and fulfill your orders, and provide the Services you request.
  • Consent — to load analytics and marketing technologies, to send marketing emails where consent is required, and for other processing where we ask for your consent. You may withdraw consent at any time.
  • Legitimate interests — to secure our Services, prevent fraud, understand and improve how our Services are used, and communicate with you about your relationship with us, balanced against your rights and interests.
  • Legal obligation — to comply with tax, accounting, consumer-protection and other legal requirements.

How consent works depends on your region:

  • GDPR regions (EEA, the UK and Switzerland): analytics and marketing technologies are off by default (opt-in). They load only after you actively grant the relevant consent.
  • United States: such technologies are on by default (opt-out), and we provide a means to decline them.


A consent banner is shown only in the regions we manage for this purpose (the United States, the EU/EEA, the UK and Switzerland). If you opt out after scripts have already loaded in a session, those scripts are not actively unloaded, but they will not be loaded again on your next visit.


You can review, change or withdraw your consent at any time through Cookie Settings at the bottom of our web pages. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

6. How We Share Your Information

We share personal information only as needed to provide our Services and as described below. We use service providers who process data on our behalf and under our instructions.

  • Stripe — payment processing. Card data is sent from your browser directly to Stripe; we receive transaction confirmation and references.
  • PayPal — payment processing via the PayPal SDK, on the same browser-direct basis.
  • Google — for Google sign-in (an authorization flow handled through our backend) and for address / places lookups used during checkout, which we call through a backend proxy.
  • Self-hosted LiveChat — our own chat infrastructure processes the chat data described in Section 2.7.
  • Shipping and logistics providers — to deliver your orders, using the name, address and contact details necessary for delivery.
  • Legal, compliance and safety recipients — regulators, law enforcement, courts or professional advisers where required by law or to protect our rights, users and Services.


We may also share information in connection with a corporate transaction (such as a merger, acquisition or reorganization), subject to appropriate confidentiality and this Privacy Policy.


We do not sell your personal information.

7. International Transfers

Because we operate across multiple regions and use service providers located in different countries, your personal information may be transferred to, stored in, or accessed from countries other than the one in which you reside. These countries may have data-protection laws that differ from those in your jurisdiction.


Where we transfer personal information across borders, we take steps to ensure it is protected in accordance with applicable law. The specific transfer mechanisms we rely on (such as EU Standard Contractual Clauses, the UK International Data Transfer Addendum, adequacy decisions, or other safeguards) are the EU Standard Contractual Clauses and the UK International Data Transfer Addendum, together with any additional safeguards required by applicable law.

8. Data Retention

We keep your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy — including to provide the Services, maintain your account, complete transactions, provide after-sales support, and comply with our legal, tax, accounting and dispute-resolution obligations — after which we delete or anonymize it.


The specific retention periods (the exact months or years we keep each category of data) are as follows: account data is retained while your account remains active; order, payment and transaction records are retained for 7 years to meet tax, accounting and anti-fraud obligations; marketing data is kept until you unsubscribe; and customer-service records are kept for up to 24 months after your query is resolved, unless a longer period is required by law. Where you delete your account, we follow the anonymization process described in Section 12.

9. Your Rights and Choices

Subject to your local law, you may have the following rights over your personal information:

  • Access — to obtain confirmation of, and a copy of, the personal information we hold about you.
  • Rectification — to correct inaccurate or incomplete information.
  • Erasure — to request deletion of your personal information in certain circumstances.
  • Restriction — to request that we limit our processing in certain circumstances.
  • Portability — to receive certain information in a portable format, or have it transmitted to another controller where technically feasible.
  • Objection — to object to processing based on legitimate interests, and to object to direct marketing at any time.
  • Withdraw consent — where processing is based on consent, to withdraw it at any time.


You can exercise many of these rights yourself: you can update your profile and address book, review your orders, reviews and after-sales tickets, unsubscribe from marketing emails via the link in each email, and manage tracking via Cookie Settings. To make any other request, contact us at info@boldradiant.com. We may need to verify your identity before acting on a request.

10. GDPR-Specific Rights (EEA, UK and Switzerland)

If you are located in the EEA, the UK or Switzerland, you have the rights listed in Section 9 under the GDPR / UK GDPR, and you also have the right to lodge a complaint with your local data protection supervisory authority. Where we rely on consent, you may withdraw it at any time without affecting prior processing. Our Data Protection Officer and, where applicable, our EU and UK representatives are reachable at info@boldradiant.com.

11. CCPA-Specific Rights (California)

If you are a California resident, you have the right to know what personal information we collect, use and disclose; the right to request deletion of your personal information; the right to correct inaccurate personal information; and the right to opt out of the “sale” or “sharing” of personal information. We do not sell your personal information and do not share it for cross-context behavioral advertising in a manner that would constitute a “sale” under the CCPA.


We will not discriminate against you for exercising your privacy rights. You may exercise these rights by contacting us at info@boldradiant.com, and you may use an authorized agent where permitted by law.

12. Account Deletion and Anonymization

You may request deletion of your account at any time. The process works as follows:

  • Email verification — you initiate deletion and confirm it using a verification code sent to your account email address.
  • Open-obligation check — if you have pending orders or open after-sales tickets, deletion is blocked until those are resolved.
  • 15-day cooling-off period — once initiated, a 15-day cooling-off period begins.
  • Automatic cancellation on login — if you log in at any time during the cooling-off period, the deletion request is automatically cancelled and your account remains active.
  • Anonymization — after the cooling-off period, your account is anonymized: your email address is changed to a non-identifying value in the form deleted_*@deleted.local and your login type is set to “deleted”. Data rows are retained to preserve referential (foreign-key) integrity of related records such as historical orders; we do not physically delete these rows.


Anonymization is irreversible. Once your account has been anonymized, it cannot be restored. This process is described in more detail in our Account Deletion Agreement.

13. Children’s Privacy

Our Services are directed to adults and are not intended for children. We do not knowingly collect personal information from children below the applicable minimum age. The exact age threshold (for example, under 16 or under 13 depending on jurisdiction) is under 16 (or under 13 where permitted by local law), and in all cases under 18 for account creation. If you believe a child has provided us personal information, please contact us at info@boldradiant.com and we will take appropriate steps to remove it.

14. Data Security

We use reasonable technical and organizational measures to protect your personal information. These include encryption of data in transit (HTTPS/TLS, and secure WebSocket for live chat), storing passwords only in hashed form, and masking part of your email address and phone number when displayed back to you in the account interface. As noted in Section 2.2, payment card data is handled directly by Stripe and PayPal and does not reach our servers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies or legal requirements. When we make material changes, we will update the effective date at the top of this Policy and, where appropriate, provide additional notice. Please review this Policy periodically.

16. Contact Us

If you have questions about this Privacy Policy or how we handle your personal information, or wish to exercise your rights, please contact us:


BoldRadiant
Email: info@boldradiant.com
Legal entity name and registered address: BoldRadiant — contact info@boldradiant.com (registered postal address available on request)