1. Who We Are

Crystaluck is a crystal healing and orgonite products company based in Torrance, California. Our website address is: https://crystaluck.com. We are committed to protecting your personal information and your right to privacy.

If you have any questions about this Privacy Policy or our practices, please contact us at hello@crystaluck.com.

2. Information We Collect

Information You Provide to Us

We collect information that you voluntarily provide when you:

• Create an account — name, email address, password, and optional profile information
• Place an order — billing address, shipping address, phone number, email address, and payment information
• Subscribe to our newsletter — email address and name
• Contact us — name, email address, and any information you include in your message
• Leave reviews or comments — name, email address, and review content
• Participate in promotions or surveys — contact details and any responses you provide

Information Collected Automatically

When you visit our Site, we automatically collect certain information, including:

• Device information — IP address, browser type and version, operating system, device type, and screen resolution
• Usage data — pages visited, time spent on pages, click patterns, referring URLs, and exit pages
• Location data — approximate geographic location based on your IP address (city/country level)
• Log data — access times, error logs, and referring website addresses

3. How We Use Your Information

We use the information we collect for the following purposes:

• Order fulfillment — process and ship your orders, send order confirmations and tracking updates
• Customer service — respond to your inquiries, provide support, and resolve disputes
• Account management — create and maintain your account, manage your preferences
• Marketing communications — send promotional emails about new products, special offers, and crystal healing content (only with your consent)
• Site improvement — analyze usage patterns, troubleshoot technical issues, and enhance user experience
• Fraud prevention — detect and prevent fraudulent transactions and unauthorized access
• Legal compliance — comply with applicable laws, regulations, and legal processes

4. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device when you visit our Site.

Essential Cookies

These cookies are necessary for the Site to function properly. They enable core features such as shopping cart functionality, secure checkout, and account authentication. You cannot opt out of these cookies.

Analytics Cookies

We use analytics tools (such as Google Analytics) to understand how visitors interact with our Site. These cookies collect information about pages visited, time spent, and navigation patterns. This data is aggregated and does not personally identify you.

Marketing Cookies

With your consent, we use marketing cookies to deliver advertisements relevant to your interests. These cookies track your browsing activity across websites and help us measure the effectiveness of our advertising campaigns.

Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling certain cookies may affect the functionality of our Site. For more information on managing cookies, visit your browser’s help documentation.

5. Third-Party Services

We may share your information with trusted third-party service providers who assist us in operating our Site and conducting our business:

• Payment processors — to securely process your transactions (we do not store full credit card numbers)
• Shipping carriers — to deliver your orders (USPS, UPS, FedEx, DHL, etc.)
• Email service providers — to send transactional and marketing emails
• Analytics providers — to analyze Site traffic and user behavior
• Customer support tools — to manage and respond to your inquiries
• Advertising platforms — to deliver targeted advertisements (with your consent)

These third parties are contractually obligated to use your information only for the purposes we specify and to protect it in accordance with this Privacy Policy.

6. Payment Security

Your payment information is processed through secure, PCI-compliant payment gateways. We use industry-standard SSL/TLS encryption to protect data transmitted during checkout.

We accept payments through major credit cards and other methods as displayed at checkout. All transactions are monitored for fraud prevention purposes.

7. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With your consent — when you explicitly authorize us to share your information
• Service providers — with trusted partners who assist in our operations (as described in Section 5)
• Legal requirements — when required by law, regulation, legal process, or governmental request
• Business transfers — in connection with a merger, acquisition, or sale of assets (you will be notified of any such change)
• Safety and rights — to protect the rights, property, or safety of Crystaluck, our customers, or others

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy:

• Account data — retained for as long as your account is active, plus 30 days after deletion request
• Order records — retained for 7 years to comply with tax and accounting regulations
• Comments and reviews — retained indefinitely to maintain content integrity (anonymized upon request)
• Marketing preferences — retained until you unsubscribe or withdraw consent
• Analytics data — automatically anonymized after 26 months

When data is no longer needed, it is securely deleted or anonymized.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your personal data (subject to legal retention requirements)
• Data portability — request a copy of your data in a structured, machine-readable format
• Withdraw consent — opt out of marketing communications at any time by clicking “unsubscribe” in any email or contacting us
• Object to processing — object to certain types of data processing

To exercise any of these rights, please contact us at hello@crystaluck.com. We will respond to your request within 30 days.

10. Children’s Privacy

Our Site is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at hello@crystaluck.com, and we will promptly delete such information from our records.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws. When we transfer your data internationally, we implement appropriate safeguards, including:

• Standard contractual clauses approved by relevant authorities
• Encryption of data in transit and at rest
• Contractual commitments from service providers to protect your data

By using our Site, you consent to the transfer of your information to the United States and other countries where we operate.

12. Data Security

We implement industry-standard security measures to protect your personal information, including:

• SSL/TLS encryption for all data transmissions
• Secure server infrastructure with regular security updates
• Access controls limiting employee access to personal data
• Regular security audits and vulnerability assessments
• Employee training on data protection best practices

13. Embedded Content

Articles and pages on this Site may include embedded content (e.g., videos, images, social media posts). Embedded content from other websites behaves in the exact same way as if you visited that website directly.

These third-party websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with the embedded content, including tracking your interaction if you have an account and are logged in to that website.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the “Last Updated” date at the top of this page
• Post a notice on our Site for 30 days after the changes take effect
• Send an email notification to registered users for significant changes

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We aim to respond to all privacy-related inquiries within 2 business days.