KJ

Policies

Privacy Policy

Last updated: 08/02/2026

This policy explains what personal information Krystal Jewels collects, why, and what we do with it. We keep it deliberately short and specific.

Who we are

Krystal Jewels, Krystal Jewels LLC. Questions about privacy, or about the information we hold on you, go to kjewelsbiz@gmail.com.

What we collect

  • Account details— your email address and password, handled by our authentication provider. Passwords are stored hashed; we never see them. You can buy as a guest without making an account.
  • Order and delivery details— name, email, phone and shipping address, so we can fulfil and support your order.
  • Payment details— collected and processed entirely by Square on Square’s own checkout page. Card numbers never reach our servers and we cannot see them. We store only the Square order and payment identifiers needed to reconcile your order.
  • Return requests — when you use our return form, what you type is emailed straight to us. It isn’t saved to a database.
  • Usage analytics— first-party page views and basic cart events, tied to a random identifier stored in your browser, not to your name.

Why we use it

  • To take payment for and deliver your order.
  • To send transactional email: order confirmations and service messages.
  • To provide customer support and handle returns.
  • To understand which products people look at, so we stock better.
  • To send marketing email, only if you signed up for it. You can unsubscribe at any time.

Who we share it with

We do not sell your personal information. We share it only with the service providers that make the shop work:

  • Square — payment processing.
  • Supabase — database, accounts, and file storage.
  • Resend — sending transactional email.
  • Vercel — website hosting.
  • USPS— shipping and delivery.

We may also disclose information where the law requires it — for example a valid legal request, or to investigate fraud against us.

Cookies and local storage

We use cookies to keep you signed in, and your browser’s local storage to remember your cart and an anonymous analytics identifier. We do not use third-party advertising or cross-site tracking cookies.

Clearing your browser storage for this site clears your cart and resets the analytics identifier. Signing out clears the session cookie.

How we protect it

The site is served over HTTPS. Order and account data sits behind database access rules that keep your records visible only to you and to us, and card details never touch our systems at all. No system is perfect, but we don’t hold what we don’t need.

How long we keep it

Order records are kept for 6 months -3 1 year. Account details are kept until you ask us to delete them. Analytics events are anonymous and kept indefinitely.

Your rights

You can ask us to show you the personal information we hold about you, correct it, or delete it. You can also ask us to stop sending marketing emails — every marketing message has an unsubscribe link, and opting out never affects order confirmations, which we are required to send.

California Resident Privacy Rights (CCPA/CPRA)

Under California law, California residents have the right to request access to, correct, or delete their personal information. You also have the right to opt out of the sale or sharing of your data for targeted advertising and to exercise these rights without discrimination.

  • Account Deletion Note: Requesting account deletion will not remove order or transaction records that we are legally required to keep for tax and compliance purposes.
  • Marketing Emails: You can unsubscribe from marketing emails via the link in any marketing message. Opting out will never affect transactional emails (such as order confirmations).

To exercise any of your privacy rights, please contact us at kjewelsbiz@gmail.com. We will respond to verified requests within 45 days.

Children

This shop is not intended for children under 13, and we do not knowingly collect their information. If you believe a child has given us personal information, email us and we’ll delete it.

Changes

If we change this policy we’ll update the date at the top of this page.