Privacy Policy

Privacy Policy of Etheria Crystals Independent Website

Welcome to etheriacrystals.com! We value your privacy. This policy is designed to explain how we collect, use, share, and protect your personal information when you use the services of this website (including the purchase, browsing of energy crystal products, and related services). Please read it carefully. By using this website, you signify your consent to all the terms of this policy.

I. Scope of Application

1. Applicable Parties: This policy applies to the processing of personal information of users worldwide (including but not limited to registered users, visitors, and consumers) when they access this website, create an account, purchase products, use customer service, or participate in interactions.
2. Geographical Scope: No matter which country or region you are in, as long as you use this website, you are bound by this policy. If the laws of your region have special provisions for privacy protection, we will comply with local legal requirements.

II. Types of Information We Collect

(A) Personal Information You Provide Voluntarily

1. Account and Registration Information: When registering, you are required to provide your name, email address, and mobile phone number (used for account creation, security verification, and order notifications). If you choose to log in through a third party (such as Google or Facebook), we will obtain the public information you authorize (such as your avatar, nickname, and email).
2. Order and Delivery Information: When making a purchase, you need to provide the shipping address (including country/region, city, and detailed address), the recipient’s name, and contact phone number (for logistics and delivery). Payment Information: When using third-party payment methods such as PayPal or credit cards, we collect the order amount, payment time, and transaction ID. We do not store the complete payment card information (which is encrypted by the third-party platform).
3. Customer Communication Information: When consulting customer service, submitting after-sales requests, or leaving product reviews, the message content, problem description, and contact information you provide. When subscribing to emails/text messages, your email address or mobile phone number (used to send new product notifications, promotional activities, and order status updates, and you can unsubscribe at any time).

(B) Automatically Collected Non-Personal Information

1. Device and Browsing Data: Device Information: IP address, device model, operating system, and browser type (used to optimize the page display on different devices). Log Information: Access time, browsed pages, search keywords, and click behavior (used to analyze user habits and improve the product recommendation algorithm).
2. Cookies and Similar Technologies: Functional Cookies: Remember the login status and shopping cart content to facilitate quick order placement (for example, keep the “Amethyst Bracelet” you added until your next visit). Analytical Cookies: Use tools such as Google Analytics to count traffic data and understand which crystal pages are the most popular (for example, the search volume of “Moonstone” is the highest). Advertising Cookies: With your consent, display cross-border personalized advertisements to you (for example, if you have browsed “Brazilian Citrine”, you may see the promotion of similar products on social media). You can manage Cookies through your browser settings (such as disabling or clearing them), but it may affect some functions (such as not being able to save the shopping cart).

III. How We Use Your Information

1. Core Service Delivery: Process orders, arrange global logistics, and provide after-sales support (such as assisting with cross-border returns and exchanges). Send order confirmations and logistics tracking information.
2. User Experience Optimization: Analyze browsing and purchase data to optimize product classification.
3. Compliance and Security Requirements: Verify account identities to prevent cross-border fraudulent transactions (such as detecting abnormal login IPs or payment behaviors). Comply with tax regulations of various countries (such as VAT in the EU and sales tax in the US), and collect necessary information for tax filing.
4. Personalized Marketing: Send cross-border promotions via email/text messages (such as “Free shipping on orders over €100 in the European station” and “New Year’s special offers in Australia”). Based on your browsing history, recommend complementary products (for example, after purchasing “Rose Quartz”, push “Crystal Cleansing Spray”).

IV. How We Share Your Information

(A) Necessary Third-Party Sharing

1. Cross-Border Logistics Partners (such as DHL, FedEx): Share the shipping address and contact phone number to ensure accurate order delivery (requiring logistics providers to comply with regional privacy rules such as the General Data Protection Regulation (GDPR)).
2. Payment Service Providers (such as PayPal, Stripe): Share the transaction amount and order number to complete cross-border payment settlement (comply with the PCI-DSS security standard to ensure the security of payment data).
3. Technology Service Providers: When entrusting Google Analytics to analyze user behavior and Mailchimp to send marketing emails, only provide the necessary data and require them to sign a global confidentiality agreement.
4. Customs and Tax Authorities: According to cross-border trade regulations, provide information such as the order amount and commodity name to the customs clearance authorities (to ensure compliance with regulations such as the “List of Cross-Border E-commerce Retail Import Commodities”).

(B) Disclosure Permitted by Law

• Respond to legal requests from your country or region (such as investigations by data protection agencies in the EU), court orders, or government agency requirements.
• If you violate the rules of this website (such as false orders or malicious complaints), we may disclose your information to protect our rights and interests.

V. Information Storage and Cross-Border Transmission

1. Storage Location:

• Your personal information is mainly stored in [the country/region where the server is located, such as “Amazon AWS (Frankfurt region) in the United States”], ensuring compliance with local data center security standards.
• When transmitting data across borders, we transmit data through encrypted channels (such as SSL), and for EU users, we use the “Standard Contractual Clauses (SCCs)” as the data transmission mechanism to ensure compliance.

2. Storage Period: Account Information: After you cancel your account, we will delete or anonymize the relevant data, but order records will be retained for at least 5 years (to meet the needs of cross-border tax audits).

• Cookie and Log Data: Retained for a maximum of 24 months for user behavior analysis.

3. Security Measures: Technical Level: Use AES-256 encryption to store sensitive information (such as addresses and payment transaction IDs), and conduct regular penetration testing and vulnerability scanning. Management Level: Employees are required to pass cross-border privacy training, and access to user data requires two-factor authentication. Unauthorized access is prohibited.

VI. Your Rights

(A) Basic Rights

1. Access and Correction: After logging in to your account, you can view and update information such as your name, email address, and address in the “Personal Center”; or submit an access/correction request through [the email address of the privacy officer], and we will respond within 15 working days.
2. Deletion and Cancellation: When applying to cancel your account, we will delete your personal information (except as required by law). If you are in California, you can exercise the “right to be deleted” in accordance with the CCPA.
3. Restriction of Processing: If you have objections to the accuracy of the information, you can request us to restrict the processing of your information until the problem is resolved.

(B) Rights in Special Regions

EU Users (GDPR): Enjoy the “right to be forgotten” and can request us to delete your personal information (unless required by law to be retained). You can request a copy of your personal information (“right to data portability”) and choose to transfer it to other controllers. California Users (CCPA): You can exercise the “right to opt out of sale” through [the email address of the privacy officer], and we will not sell your personal information to third parties (“sale” is defined in accordance with the CCPA). Other Regions: You can exercise corresponding privacy rights according to the laws of your country or region (such as the LGPD in Brazil and the PIPEDA in Canada, etc.).

(C) Withdrawal of Consent

Refuse to Receive Marketing Emails/Text Messages: Click the “Unsubscribe” link at the bottom of the email, or reply to the text message with “STOP” (applicable to users worldwide). Object to Personalized Advertising: Disable Cookies through your browser, or contact us to turn off advertising recommendations (which may affect the relevance of advertisements).

VII. Protection of Minors

The products and services of this website are mainly aimed at users who are at least 16 years old (in the EU region)/at least 18 years old (in other regions). If you are under the above age, you need to use this website with the consent of your parents or guardians. We will not deliberately collect the personal information of minors, and if we find it, we will delete it immediately.

VIII. Policy Changes and Effectiveness

1. Change Notification: We may modify this policy due to updates in cross-border regulations (such as revisions to the GDPR, data rules after Brexit in the UK) or business adjustments. For major changes, we will notify you through pop-ups, announcements on the homepage, or emails (such as additional notifications for EU users).
2. Effectiveness Rules: After the revised policy takes effect, your continued use of this website means that you accept the new terms. If you do not agree, you should stop using it immediately and cancel your account.

IX. Contact Us

If you need to exercise your privacy rights, consult about the policy, or file a complaint, you can contact our cross-border privacy officer through the following method: etheriacrystals01@gmail.com