Privacy Policy
At Cristal Shop, protecting your privacy and personal data is a foundational commitment. This policy outlines how we handle, store, and protect your information.
1. Information We Collect
When you visit our website, register an account, place an order, or submit a price negotiation proposal, we may collect the following categories of data:
- Identity & Contact Details: Full name, email address, contact phone number, and account username.
- Shipping & Billing Details: Recipient name, street address, city, state, postal code, and country for physical merchandise delivery.
- Transaction Records: Order item details, pricing, negotiated offer notes, and payment verification receipts.
- Technical & Diagnostic Data: IP address, browser type, operating system, pages visited, and general geographic location derived from IP.
2. How We Use Information
We process collected information for legitimate business purposes, including:
- Fulfilling and dispatching orders, communicating tracking updates, and managing returns.
- Facilitating the interactive "Make an Offer" price negotiation engine and notifying buyers of approved counter-offers.
- Preventing fraudulent transactions, verifying payment authenticity, and complying with anti-money laundering (AML) protocols.
- Providing real-time customer support via live chat, telephone, or email concierge.
- Optimizing website performance, catalog browsing speed, and interface responsiveness.
3. Data Security & Encryption
Cristal Shop employs industry-standard security protocols to safeguard your sensitive data. All web traffic is strictly encrypted using modern Transport Layer Security (TLS 1.3) with HTTPS enforcement.
Our database systems employ strict parameter isolation, hashed password storage (Bcrypt / Argon2), and rate-limiting throttles on all sensitive endpoints to neutralize automated brute-force attacks. We never store raw credit card numbers or banking passwords on our local databases.
6. Your Privacy Rights (GDPR & CCPA)
Depending on your jurisdiction, you have the following rights regarding your personal information:
- Right of Access: Request a full copy of the personal data we maintain about you.
- Right of Rectification: Request correction of inaccurate or incomplete information.
- Right of Erasure: Request the deletion of your account and associated personal data ("Right to be Forgotten"), subject to mandatory financial record retention laws.
- Right to Restrict Processing: Request restrictions on how your data is utilized for marketing purposes.
To exercise any of these rights, submit a written request to support@cristalshop.store.
7. Data Retention
We retain your account data for as long as your profile remains active. Transaction and invoice data are retained for a minimum of seven (7) years to comply with international accounting, tax, and anti-fraud regulations.
8. Children's Privacy
Cristal Shop does not knowingly market to or solicit data from individuals under eighteen (18) years of age. If we discover that a minor has submitted personal information, we will take immediate steps to remove the data from our active systems.
9. Policy Updates
We may periodically update this Privacy Policy to reflect changing security practices or statutory requirements. When substantial amendments are made, the revised policy will be posted with an updated effective date at the top of this document.
10. Privacy Officer Contact
If you have questions, feedback, or concerns regarding this Privacy Policy or our data handling practices, please contact our Data Protection Officer: