Privacy Policy
Last updated: 23 July 2026
We keep this simple: we collect only what we need to send you your crystals, and we don't sell your data.
What we collect
- Order details — your name, email address, shipping address, and what you bought.
- Payment information — handled entirely by our payment processor. We receive a confirmation that payment succeeded and the last four digits of your card. We never see or store your full card number.
- Messages — anything you send us by email, so we can help you.
- Basic technical data — standard server logs (IP address, browser type) kept for security and troubleshooting.
Stored in your browser
We don't use advertising or tracking cookies. We do store two small items in your browser's local storage:
- your shopping cart, so it survives a page refresh; and
- a flag recording that you confirmed you're 18 or older, so you aren't asked every visit.
Both stay on your device and can be cleared any time via your browser settings.
How we use it
Only to take payment, fulfil and ship your order, provide support, handle returns, prevent fraud, and meet our legal and accounting obligations. We do not use your data for advertising, and we do not sell or rent it to anyone.
Who we share it with
- Our payment processor (Stripe), to take payment securely.
- Shipping carriers, to deliver your order.
- Our website host (Netlify), which runs the site and stores order-fulfilment data.
- Authorities, only where the law requires it.
That's the complete list. No data brokers, no advertisers.
Discretion
Orders ship in plain, unbranded packaging. We don't add you to any mailing list without your consent, and we never disclose customer purchases to third parties beyond those listed above.
How long we keep it
Order records are retained as long as needed to support returns and to satisfy tax and accounting requirements (typically several years). Support emails are kept only as long as useful.
Your rights
You can ask us to access, correct, or delete your personal information, or to stop using it. Email support@thecrystalbaddie.com and we'll respond within 30 days. Note we may need to keep certain order records to meet legal obligations even after a deletion request.
Security
The site is served over encrypted HTTPS and payment details go directly to our processor. No system is perfectly secure, but we take reasonable measures to protect your information.
Children
This site is for adults 18 and over. We don't knowingly collect information from anyone under 18. If you believe a minor has given us information, contact us and we'll delete it.
Changes
If this policy changes, we'll update the date above.