Privacy Policy
Last updated: July 2026
At The Calm Crystal, your privacy matters to us. This policy explains what personal data we collect, why we collect it, and how we keep it safe. We are committed to full compliance with the General Data Protection Regulation (GDPR) and applicable data protection laws.
If you have any questions about this policy, please contact us at support@thecalmcrystal.com.
1. Who We Are
The Calm Crystal is an independent online retailer of natural crystals and mineral gifts. References to "we", "us", or "our" in this policy refer to The Calm Crystal and its operators.
2. What Data We Collect
We collect personal data only when necessary to provide our services. This may include:
- Contact information — name, email address, phone number
- Shipping information — delivery address and country
- Payment information — processed securely via Shopify Payments; we do not store card details
- Account information — if you create a customer account
- Browsing data — pages visited, device type, and referral source, collected via cookies and analytics tools
3. How We Use Your Data
We use your data to:
- Process and fulfil your orders
- Send order confirmations and shipping updates
- Respond to your enquiries and provide customer support
- Send marketing emails, where you have given consent (you may unsubscribe at any time)
- Improve our website and shopping experience through analytics
- Comply with legal obligations
4. Legal Basis for Processing (GDPR)
We process your data on the following legal grounds:
- Contract performance — to fulfil your order
- Legitimate interests — to improve our services and prevent fraud
- Consent — for marketing communications and non-essential cookies
- Legal obligation — where required by law
5. Sharing Your Data
We do not sell your personal data. We may share it with trusted third parties only where necessary, including:
- Shopify — our e-commerce platform and payment processor
- Shipping carriers — to deliver your order
- Email marketing tools — where you have opted in to communications
- Analytics providers — such as Google Analytics, in anonymised form
All third-party providers are required to handle your data in accordance with applicable data protection laws.
6. Cookies
We use cookies to improve your browsing experience, remember your preferences, and analyse site traffic. You can manage your cookie preferences through your browser settings or our cookie consent tool. For more detail, please refer to our Cookie Policy.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Order records are typically retained for up to 7 years for accounting and legal compliance purposes.
8. Your Rights
Under GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data ("right to be forgotten")
- Object to or restrict certain types of processing
- Request a portable copy of your data
- Withdraw consent at any time, where processing is based on consent
To exercise any of these rights, please contact us at support@thecalmcrystal.com. We will respond within 30 days.
9. Data Security
We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or misuse. All transactions are encrypted via SSL/TLS.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "Last updated" date. We encourage you to review this page periodically.
Contact Us
If you have any questions, concerns, or requests regarding your personal data, please reach out:
We aim to respond to all privacy-related enquiries within 2 business days.