Information we may use
Depending on what you do, this can include account details, name, contact details, order and delivery data, messages, complaint or return evidence, newsletter choices, and technical or device information generated by Shopify.
This page explains what information is used when you browse, order, contact support or open the external tracking service.
Privacy enquiries and rights requests: business@crystalpeptshop.com.
Depending on what you do, this can include account details, name, contact details, order and delivery data, messages, complaint or return evidence, newsletter choices, and technical or device information generated by Shopify.
Payment details and fraud/payment screening are handled by Shopify and enabled payment providers. The theme does not store full payment-card details.
Data may be processed to perform a contract, take pre-contract steps, provide support, fulfil legal and tax duties, prevent fraud, protect legitimate operational interests, and manage optional processing based on consent where required.
Shopify provides the storefront, checkout, order and contact-form infrastructure. Relevant data may also be provided to enabled payment providers, fulfilment and shipping parties, professional advisers and authorities where necessary.
Order and address data is shared with the parties needed to prepare and deliver an order. The carrier is identified in the applicable fulfilment or tracking information.
The Shipping page opens 17TRACK only after a visitor submits a tracking number. The number is included in the external URL and processed under 17TRACK's own privacy practices. No Shopify login is sent by the theme.
Shopify uses necessary technologies for storefront and checkout functions. The theme uses local storage only for the visitor's light/dark preference. Optional Shopify or app technologies are controlled through the configured Shopify privacy system.
This theme does not include a custom analytics or marketing tracker. Optional services enabled through Shopify or installed apps are subject to the storefront's consent controls and applicable privacy settings.
Shopify, payment, support, tracking or delivery providers may process data in other countries. Where required, cross-border processing is supported by the provider's applicable contractual or legal transfer safeguards.
Order data: retained for the period needed for contracts, tax, accounting, fraud prevention and legal obligations.
Support data: retained only as long as needed for the enquiry, complaint or return and related legal obligations.
Analytics data: any enabled provider applies its configured retention controls and documented service terms.
Reasonable technical and organisational safeguards are used, including Shopify's hosted commerce infrastructure. No internet transmission or storage method is completely risk-free.
Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection. Consent can be withdrawn for future processing through Cookie settings or by contacting the privacy address.
You may lodge a complaint with the competent data-protection supervisory authority. Contact the store first if you would like the issue reviewed directly.
The storefront is intended for adults with legal capacity to purchase. This policy may be updated prospectively; the current dates appear above when configured.