[Privacy Policy] – That Crystal Lady

That Crystal Lady Privacy Policy

Effective Date: 15AUG2025

1. Who We Are

Our website address is: https://thatcrystallady.com.
That Crystal Lady sells crystals, minerals, gemstones, and handmade jewelry. This Privacy Policy explains how we collect, use, and protect your personal data when you use our site.

2. Comments

When visitors leave comments on the site, we collect the data shown in the comments form, along with the visitor’s IP address and browser user agent string to help detect spam.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to check if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

3. Media

If you upload images to the website, avoid uploading images with embedded location data (EXIF GPS). Visitors can download and extract location data from images posted on the site.

4. Cookies

We use cookies to improve your browsing experience and operate our store. Examples:

Comment Cookies: If you leave a comment, you may opt in to saving your name, email address, and website in cookies for convenience. These last for one year.
Login Cookies: When you log in, we set cookies to store login information and screen display preferences. Login cookies last two days; “Remember Me” lasts two weeks; screen options cookies last one year.
Temporary Cookies: If you visit our login page, we set a temporary cookie to check if your browser accepts cookies. This contains no personal data and is deleted when you close your browser.
Post-Edit Cookies: If you edit or publish an article, a cookie with the post ID is saved for 1 day.
WooCommerce Cookies: We use cookies to keep track of your cart, wishlist, and checkout sessions.

You can manage or disable cookies in your browser, but parts of our site may not work correctly without them.

5. Embedded Content from Other Websites

Articles on this site may include embedded content (e.g., videos, images, articles). Embedded content behaves the same as if you visited that site directly.
These sites may collect data, use cookies, embed third-party tracking, and monitor your interaction with embedded content, including tracking if you are logged in to that site.

6. E-Commerce Data Collection

When you shop with us, we collect:

Name, shipping/billing address, email, and phone number
Order details, including purchased products and transaction totals
Payment details (processed securely via third-party payment gateways — we do not store your credit card number)
Account login details (if you create one)

We only share your data with:

Payment processors (e.g., Stripe, PayPal, Square)
Shipping providers (e.g., USPS, UPS)
Service providers (e.g., hosting, email services, IT support)
Automated spam detection services for comments and forms
Legal authorities if required by law or to prevent fraud

If you request a password reset, your IP address will be included in the reset email.

8. How Long We Retain Your Data

Comments and their metadata are retained indefinitely so follow-up comments can be approved automatically.
Registered users’ personal data is stored in their user profile until deleted or edited by the user or admin.
Order records are kept for at least 7 years for accounting, tax, and legal purposes.

9. What Rights You Have Over Your Data

If you have an account, or have left comments, you can request:

An exported file of the personal data we hold about you
Deletion of your personal data (excluding data we must keep for legal, administrative, or security reasons)

To make a request, contact: thatcrystalladyAR@gmail.com

10. Where Your Data Is Sent

Visitor comments may be checked through automated spam detection services. Orders and shipping data may be transmitted to payment processors and postal/shipping providers.

11. Security

We use SSL encryption, secure hosting, and regular security scans to protect your data. While we take strong precautions, no system is 100% secure.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be posted here with the updated “Effective Date.”