Effective Date: January 1, 2025 | Last Updated: May 30, 2026
Crystaluck (“we,” “us,” or “our”) operates https://crystaluck.com (the “Site”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site or make a purchase from us. By using our Site, you agree to the practices described in this policy.
1. Who We Are
Crystaluck is a crystal healing and orgonite products company based in Torrance, California. Our website address is: https://crystaluck.com. We are committed to protecting your personal information and your right to privacy.
If you have any questions about this Privacy Policy or our practices, please contact us at hello@crystaluck.com.
2. Information We Collect
Information You Provide to Us
We collect information that you voluntarily provide when you:
Create an account — name, email address, password, and optional profile information
Place an order — billing address, shipping address, phone number, email address, and payment information
Subscribe to our newsletter — email address and name
Contact us — name, email address, and any information you include in your message
Leave reviews or comments — name, email address, and review content
Participate in promotions or surveys — contact details and any responses you provide
Information Collected Automatically
When you visit our Site, we automatically collect certain information, including:
Device information — IP address, browser type and version, operating system, device type, and screen resolution
Usage data — pages visited, time spent on pages, click patterns, referring URLs, and exit pages
Location data — approximate geographic location based on your IP address (city/country level)
Log data — access times, error logs, and referring website addresses
3. How We Use Your Information
We use the information we collect for the following purposes:
Order fulfillment — process and ship your orders, send order confirmations and tracking updates
Customer service — respond to your inquiries, provide support, and resolve disputes
Account management — create and maintain your account, manage your preferences
Marketing communications — send promotional emails about new products, special offers, and crystal healing content (only with your consent)
Site improvement — analyze usage patterns, troubleshoot technical issues, and enhance user experience
Fraud prevention — detect and prevent fraudulent transactions and unauthorized access
Legal compliance — comply with applicable laws, regulations, and legal processes
4. Cookies & Tracking Technologies
We use cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device when you visit our Site.
Essential Cookies
These cookies are necessary for the Site to function properly. They enable core features such as shopping cart functionality, secure checkout, and account authentication. You cannot opt out of these cookies.
Analytics Cookies
We use analytics tools (such as Google Analytics) to understand how visitors interact with our Site. These cookies collect information about pages visited, time spent, and navigation patterns. This data is aggregated and does not personally identify you.
Marketing Cookies
With your consent, we use marketing cookies to deliver advertisements relevant to your interests. These cookies track your browsing activity across websites and help us measure the effectiveness of our advertising campaigns.
Managing Cookies
You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling certain cookies may affect the functionality of our Site. For more information on managing cookies, visit your browser’s help documentation.
5. Third-Party Services
We may share your information with trusted third-party service providers who assist us in operating our Site and conducting our business:
Payment processors — to securely process your transactions (we do not store full credit card numbers)
Shipping carriers — to deliver your orders (USPS, UPS, FedEx, DHL, etc.)
Email service providers — to send transactional and marketing emails
Analytics providers — to analyze Site traffic and user behavior
Customer support tools — to manage and respond to your inquiries
Advertising platforms — to deliver targeted advertisements (with your consent)
These third parties are contractually obligated to use your information only for the purposes we specify and to protect it in accordance with this Privacy Policy.
6. Payment Security
Your payment information is processed through secure, PCI-compliant payment gateways. We use industry-standard SSL/TLS encryption to protect data transmitted during checkout.
Important: Crystaluck does not store your full credit card number, CVV, or other sensitive payment details on our servers. All payment processing is handled by our certified payment partners.
We accept payments through major credit cards and other methods as displayed at checkout. All transactions are monitored for fraud prevention purposes.
7. How We Share Your Information
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
With your consent — when you explicitly authorize us to share your information
Service providers — with trusted partners who assist in our operations (as described in Section 5)
Legal requirements — when required by law, regulation, legal process, or governmental request
Business transfers — in connection with a merger, acquisition, or sale of assets (you will be notified of any such change)
Safety and rights — to protect the rights, property, or safety of Crystaluck, our customers, or others
8. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes described in this policy:
Account data — retained for as long as your account is active, plus 30 days after deletion request
Order records — retained for 7 years to comply with tax and accounting regulations
Comments and reviews — retained indefinitely to maintain content integrity (anonymized upon request)
Marketing preferences — retained until you unsubscribe or withdraw consent
Analytics data — automatically anonymized after 26 months
When data is no longer needed, it is securely deleted or anonymized.
9. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
Access — request a copy of the personal data we hold about you
Correction — request correction of inaccurate or incomplete data
Deletion — request deletion of your personal data (subject to legal retention requirements)
Data portability — request a copy of your data in a structured, machine-readable format
Withdraw consent — opt out of marketing communications at any time by clicking “unsubscribe” in any email or contacting us
Object to processing — object to certain types of data processing
To exercise any of these rights, please contact us at hello@crystaluck.com. We will respond to your request within 30 days.
10. Children’s Privacy
Our Site is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at hello@crystaluck.com, and we will promptly delete such information from our records.
11. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws. When we transfer your data internationally, we implement appropriate safeguards, including:
Standard contractual clauses approved by relevant authorities
Encryption of data in transit and at rest
Contractual commitments from service providers to protect your data
By using our Site, you consent to the transfer of your information to the United States and other countries where we operate.
12. Data Security
We implement industry-standard security measures to protect your personal information, including:
SSL/TLS encryption for all data transmissions
Secure server infrastructure with regular security updates
Access controls limiting employee access to personal data
Regular security audits and vulnerability assessments
Employee training on data protection best practices
While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to taking all reasonable measures to protect your data.
13. Embedded Content
Articles and pages on this Site may include embedded content (e.g., videos, images, social media posts). Embedded content from other websites behaves in the exact same way as if you visited that website directly.
These third-party websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with the embedded content, including tracking your interaction if you have an account and are logged in to that website.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
Update the “Last Updated” date at the top of this page
Post a notice on our Site for 30 days after the changes take effect
Send an email notification to registered users for significant changes
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
