Legal

Privacy Policy

Last updated: May 2026 · BOUNND by MOH London Ltd

BOUNND ("we", "us", "our") is a trading name of MOH London Ltd, registered in England and Wales. We are committed to protecting your privacy and handling your personal data transparently, in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data enquiries: privacy@bounnd.com

What We Collect

  • Name and email address (via OAuth sign-in)
  • Phone number (provided during profile completion)
  • Diamond details you submit (certificate numbers, specifications)
  • Session data (journey progress, intent selection)
  • Device and browser information (IP address anonymised after collection)

How We Use Your Data

  • Provide diamond pricing estimates and trade calculations
  • Process sell and trade requests
  • Communicate quotes, status updates, and scheduling
  • Improve our pricing engine and platform experience
  • Comply with legal obligations

Third-Party Services

  • Google OAuth — authentication only, we don't access your Google data
  • Microsoft OAuth — authentication only
  • Facebook / Instagram OAuth — authentication only
  • MongoDB Atlas — encrypted database hosting
  • Vercel — secure application hosting

Data Protection

  • All data encrypted in transit (TLS/HTTPS)
  • Database encrypted at rest
  • JWT session tokens with secure, httpOnly cookies
  • No passwords stored — OAuth-only authentication
  • Access restricted to authorised personnel only

Your Rights (GDPR / UK DPA 2018)

  • Right to access — request a copy of your personal data
  • Right to rectification — correct inaccurate information
  • Right to erasure — request deletion of your data
  • Right to portability — receive your data in a portable format
  • Right to object — opt out of processing for marketing
  • Right to withdraw consent at any time

Data Retention

  • Account data retained while your account is active
  • Journey session data retained for 90 days
  • Cached lab responses expire after 30 days
  • Deleted account data purged within 30 days of request
  • Transaction records kept for 6 years (legal requirement)

Cookies

We use essential cookies for authentication and session management. For full details, see our Cookie Policy.

Contact Us

To exercise any of your rights or ask questions about this policy:

  • Email: privacy@bounnd.com
  • Post: MOH London Ltd, London, United Kingdom

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.