Privacy Policy

This policy explains what personal information Krystal Jewels collects, why, and what we do with it. We keep it deliberately short and specific.

Who we are

Krystal Jewels, [TODO: owner — registered business name and address]. Contact: [TODO: owner — privacy contact email].

What we collect

• Account details— your email address and password, handled by our authentication provider. Passwords are stored hashed; we never see them.
• Order and delivery details— name, email, phone and shipping address, so we can fulfil and support your order.
• Payment details— collected and processed entirely by Square on Square’s own checkout page. Card numbers never reach our servers and we cannot see them. We store only the Square order and payment identifiers needed to reconcile your order.
• Usage analytics— first-party page views and basic cart events, tied to a random identifier stored in your browser, not to your name.

Why we use it

• To take payment for and deliver your order.
• To send transactional email: order confirmations and service messages.
• To provide customer support and handle returns.
• To understand which products people look at, so we stock better.
• To send marketing email, only if you signed up for it. You can unsubscribe at any time.

Who we share it with

We do not sell your personal information. We share it only with the service providers that make the shop work:

• Square — payment processing.
• Supabase — database, accounts, and file storage.
• Resend — sending transactional email.
• Vercel — website hosting.
• [TODO: owner — add any shipping carrier or other processor you share addresses with]

Cookies and local storage

We use cookies to keep you signed in, and your browser’s local storage to remember your cart and an anonymous analytics identifier. We do not use third-party advertising or cross-site tracking cookies.

How long we keep it

Order records are kept for [TODO: owner — retention period — check your tax and accounting obligations]. Account details are kept until you ask us to delete them.

Your rights

You can ask us to show you the personal information we hold about you, correct it, or delete it. Email [TODO: owner — privacy contact email]and we’ll respond within [TODO: owner — response time — e.g. 30 days]. Deleting your account does not remove order records we’re required to keep for tax purposes.

[TODO: owner — confirm which privacy laws apply to you (e.g. CCPA if you sell to California residents, GDPR if you sell to the EU/UK) and add the specific rights and disclosures those require]

Children

This shop is not intended for children under [TODO: owner — minimum age — commonly 13 or 16], and we do not knowingly collect their information.

Changes

If we change this policy we’ll update the date at the top of this page.