Privacy policy

Privacy Policy

Last Updated: August 2026

Crystallode respects your privacy and is committed to protecting personal information collected through our website, services, and business activities.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you:

  • Visit our website;
  • Purchase products;
  • Request quotations;
  • Contact us;
  • Use our sourcing or wholesale services;
  • Interact with our marketing communications.

This Privacy Policy applies together with applicable privacy laws, including where relevant:

  • European Union General Data Protection Regulation (EU GDPR);
  • United Kingdom GDPR;
  • Applicable United States state privacy laws;
  • Other applicable data protection regulations.

1. About This Privacy Policy

This Privacy Policy explains:

  • What information we collect;
  • How we use information;
  • When we share information;
  • How we protect information;
  • Your privacy rights.

By using the Crystallode website, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

We may collect different types of information depending on how you interact with us.

2.1 Information You Provide Directly

When you place an order, request a quotation, create an account, or contact us, we may collect:

  • Name;
  • Email address;
  • Billing information;
  • Shipping address;
  • Company information;
  • Telephone number if provided;
  • Order details;
  • Payment-related information handled by payment providers;
  • Communication records;
  • Product requirements;
  • Customization information;
  • Files, images, or specifications provided by customers.

2.2 Order and Transaction Information

When you purchase products or services, we may collect information related to:

  • Products purchased;
  • Order history;
  • Payment status;
  • Shipping information;
  • Delivery information;
  • Returns and refund requests;
  • Customs-related information where required.

2.3 Business and Wholesale Information

For wholesale and commercial customers, we may collect:

  • Company name;
  • Business contact information;
  • Purchase requirements;
  • Product specifications;
  • Commercial documents;
  • Shipping requirements;
  • Sourcing requests.

2.4 Technical Information

When you visit our website, certain technical information may be automatically collected, including:

  • IP address;
  • Browser type;
  • Device information;
  • Operating system;
  • Website activity;
  • Pages viewed;
  • Time spent on website;
  • Referral sources;
  • Cookie information.

3. How We Collect Information

We collect information through:

Direct Collection

Information provided by you when you:

  • Place orders;
  • Contact us;
  • Submit inquiries;
  • Request quotations;
  • Participate in business communications.

Automatic Collection

Information collected through:

  • Cookies;
  • Analytics tools;
  • Website technologies;
  • Shopify platform functions.

Third-Party Sources

We may receive information from:

  • Payment providers;
  • Shipping providers;
  • Fraud prevention services;
  • Marketing platforms;
  • Technology providers.

4. How We Use Personal Information

We may use personal information for the following purposes:

4.1 Order Processing and Fulfillment

Including:

  • Processing purchases;
  • Confirming orders;
  • Preparing products;
  • Arranging shipment;
  • Providing tracking information;
  • Managing returns and refunds.

4.2 Customer Service

Including:

  • Responding to inquiries;
  • Providing support;
  • Handling complaints;
  • Communicating regarding orders.

4.3 Wholesale and Sourcing Services

Including:

  • Preparing quotations;
  • Communicating with suppliers;
  • Coordinating samples;
  • Managing procurement requests;
  • Arranging inspections;
  • Coordinating logistics.

4.4 Website Operation and Improvement

Including:

  • Improving website performance;
  • Understanding customer behavior;
  • Maintaining website security;
  • Preventing fraud.

4.5 Legal and Regulatory Compliance

Including:

  • Accounting requirements;
  • Tax obligations;
  • Customs compliance;
  • Fraud prevention;
  • Responding to lawful requests.

4.6 Marketing Communications

Where permitted by law and based on your choices, we may use information to:

  • Send promotional emails;
  • Provide product updates;
  • Share business information;
  • Send offers or announcements.

You may unsubscribe from marketing communications at any time.

5. Legal Bases for Processing Personal Information

Where GDPR or similar laws apply, we process personal information based on:

Contract Performance

When processing is necessary to:

  • Complete purchases;
  • Provide requested services;
  • Deliver products.

Legal Obligations

When processing is required for:

  • Tax;
  • Accounting;
  • Customs;
  • Regulatory obligations.

Legitimate Interests

Including:

  • Website security;
  • Fraud prevention;
  • Business management;
  • Service improvement.

Consent

Where required, we process information based on your consent, including certain marketing and cookie activities.

You may withdraw consent where applicable.

6. Shopify and Service Providers

Crystallode uses third-party service providers to operate our business.

These may include:

  • Shopify platform services;
  • Payment processors;
  • Shipping providers;
  • Analytics providers;
  • Email service providers;
  • Customer communication tools.

These providers may process information only as necessary to provide their services and according to their own privacy policies.

7. Payment Information

Crystallode does not store complete payment card information.

Payment transactions are processed through third-party payment providers that maintain their own security systems and compliance standards.

Payment providers may collect and process information necessary to complete transactions.

8. Shipping and Logistics Information

To deliver orders internationally, we may share necessary information with:

  • Courier companies;
  • Freight providers;
  • Customs brokers;
  • Delivery partners.

Information shared may include:

  • Recipient name;
  • Shipping address;
  • Contact details;
  • Shipment information;
  • Customs documentation information where required.

Only information reasonably necessary for shipping and customs processing will be provided.

9. International Data Transfers

Because Crystallode operates internationally, personal information may be processed in countries other than your own.

This may include transfers between:

  • Customers' countries;
  • China;
  • Shopify infrastructure locations;
  • Third-party service providers.

Where required by applicable law, appropriate safeguards will be used for international transfers.

10. Cookies and Similar Technologies

Crystallode uses cookies and similar technologies to:

  • Operate essential website functions;
  • Remember customer preferences;
  • Analyze website performance;
  • Improve user experience;
  • Support marketing activities where permitted.

Cookies may be provided by:

  • Shopify;
  • Analytics providers;
  • Advertising platforms;
  • Other technology partners.

You may manage cookie preferences through your browser settings or available website cookie controls.

11. Marketing Communications

You may receive marketing communications if:

  • You have requested them;
  • You have consented;
  • Applicable law permits such communication.

You can unsubscribe by:

  • Following the unsubscribe instructions;
  • Contacting us through available channels.

Unsubscribing from marketing does not affect transactional communications related to orders.

12. Data Retention

We retain personal information only for as long as necessary for:

  • Providing services;
  • Maintaining business records;
  • Legal compliance;
  • Resolving disputes;
  • Enforcing agreements.

Retention periods depend on:

  • Type of information;
  • Legal requirements;
  • Business needs;
  • Regulatory obligations.

13. Data Security

Crystallode uses reasonable technical and organizational measures to protect personal information.

These measures may include:

  • Access controls;
  • Secure service providers;
  • Administrative safeguards;
  • Data handling procedures.

However, no internet transmission or electronic storage method can be guaranteed to be completely secure.

14. Your Privacy Rights

Depending on your location and applicable law, you may have rights including:

Access

Request information about personal data we hold.

Correction

Request correction of inaccurate information.

Deletion

Request deletion of personal information where legally applicable.

Restriction

Request limitation of certain processing activities.

Objection

Object to certain processing activities.

Data Portability

Request transfer of certain information where applicable.

Withdrawal of Consent

Withdraw previously provided consent where processing is based on consent.

15. European Economic Area (EEA) and United Kingdom Users

Where EU GDPR or UK GDPR applies, you may have additional rights regarding:

  • Legal basis of processing;
  • International transfers;
  • Supervisory authority complaints;
  • Automated decision-making where applicable.

You may contact your local data protection authority if you believe your rights have been violated.

16. United States Privacy Rights

Depending on your state of residence, you may have privacy rights including:

  • Right to know what information is collected;
  • Right to request deletion;
  • Right to correct information;
  • Right to opt out of certain data sharing activities.

Applicable rights depend on:

  • Your location;
  • Applicable thresholds;
  • Nature of processing activities.

17. Children’s Privacy

Crystallode products and services are not directed toward children.

We do not knowingly collect personal information from children without appropriate authorization.

If you believe a child has provided personal information improperly, please contact us.

18. Third-Party Links

Our website may contain links to third-party websites.

Crystallode is not responsible for the privacy practices, content, or security of third-party websites.

Customers should review third-party privacy policies before providing information.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • Legal changes;
  • Business changes;
  • Technology updates;
  • Service improvements.

The updated version will be published on this page with a revised effective date.

20. Contact

For privacy-related questions or requests, please use the official contact information provided on the Crystallode website.