Privacy Policy

Privacy Policy for [LuckyGems] Crystal Jewelry

Effective Date: July 3, 2025
Last Updated: July 3, 2025

1. Information We Collect
We collect data essential to fulfill your crystal energy needs:

Identifiers:
Name, email, shipping/billing address (for order processing and customs clearance) 
Phone number (for delivery updates via carriers like DHL/UPS)
Commercial Data:
Purchase history (e.g., Rose Quartz for love, Amethyst for calm) and custom design requests (e.g., birthdate-aligned stones) 
Sensitive Personal Data:
Optional: Birth date, zodiac sign, or intention (e.g., "career focus") for personalized crystal prescriptions. Consent is explicitly obtained before collection .
Technical Data:
IP address, browser type, and Shopify Analytics data (e.g., pages viewed) to optimize site experience.
2. How We Use Your Information
Your data empowers us to serve your energy journey:

Order Fulfillment: Processing payments, shipping orders (with logistics partners like EcoCart), and customs documentation .
Personalization: Recommending crystals based on purchase history (e.g., Citrine for wealth if you bought abundance-themed items) .
Compliance: Verifying age (e.g., for orders containing metal components) and fraud prevention.
Marketing: Sending crystal-care tips or new arrival updates only if you opt-in. Unsubscribe anytime.
3. Data Sharing & Third Parties
We share minimally to protect your energy:

Essential Partners:
Payment gateways (e.g., Airwallex): Only transaction data, not full card details .
Logistics providers (e.g., DHL,E-package): Address and phone number for delivery .
Legal Obligations: Disclose if required by law (e.g., customs authorities requesting HS codes) .
No Sale of Data: We never sell or rent your data to third parties for marketing.
4. Your Rights (GDPR/CCPA Compliance)
You control your data’s energy flow:

Access & Portability: Request a copy of your data (e.g., order history) via [support@findchip.asia].
Deletion: Ask to delete non-essential data (e.g., birth date used for customization) .
Opt-Out: Unsubscribe from marketing emails via footer links or adjust cookie preferences.
Non-Discrimination: We won’t deny service for exercising rights (CCPA Section 1798.125).
5. Data Security & Retention
Encryption: All data transmitted uses TLS/SSL encryption (Shopify Level 1 PCI DSS compliant) .
Retention Period:
Order data: 5 years for tax/audit purposes (required by law) .
Marketing data: Until consent withdrawal.
6. International Transfers
Data may transfer to servers outside your country (e.g., Shopify’s US/Canada data centers) under EU-US Data Privacy Framework adequacy standards .
7. Updates to This Policy
Material changes (e.g., new data uses) will be emailed 30 days prior and posted on this page.
8. Contact Us
For data requests or crystal-energy policy questions:

• Email: [support@findchip.asia]
• Whatsapp/Celphone: [+86 198 98364806]