Privacy Policy for Crystal Kalm

Last Updated: June 2026

At Crystal Kalm, operated by Clare, I am deeply committed to maintaining the trust and confidence of the visitors to my website and my clients. This Privacy Policy outlines how I collect, use, and protect your personal data when you visit my site, purchase handcrafted jewellery, or book a wellbeing session.

✦ What Information I Collect

To fulfil your orders or bookings, you provide me with certain information, which may include:

  • Your name, email address, and postal address (for shipping handcrafted jewellery).

  • Details of the services or products you are booking or purchasing.

  • Any personal notes or crystal preferences you choose to share with me for custom wire-wrapped pieces or intuitive readings.

✦ How I Use Your Information

I rely on a number of legal bases to collect, use, and share your information, including:

  • To Provide My Services: To fulfil your jewellery orders, settle disputes, or provide customer support.

  • Consent: When you explicitly sign up for my newsletter or membership (which you can revoke at any time).

  • Legal Compliance: If required by tax law or legal obligations (such as keeping financial records of sales).

✦ Sharing Your Information

Your privacy is sacred to me. I only share your personal information for very limited reasons, such as:

  • Service Providers: Secure third-party platforms required to run my business (e.g., Squarespace for website hosting, Stripe/PayPal for secure payment processing, and postal services like Royal Mail to deliver your jewellery).

  • Legal Obligations: Only if required by law to comply with regulatory or legal proceedings.

✦ Data Retention & Security

I retain your personal information only for as long as necessary to provide you with my services and as described in this policy (typically up to 7 years for tax and accounting purposes). I use secure, industry-standard platforms to ensure your data is safe.

✦ Your Rights (UK GDPR)

If you reside in the UK or EU, you have the right to access, receive a copy of, change, restrict my use of, or delete your personal information. You can contact me at any time to exercise these rights.