Privacy Policy

Last updated: January 2025

1. Information Collected

In the course of our business activities, we may collect the following personal information:

• Identification information — First name, last name, email address, phone number (optional).
• Shipping information — Full mailing address, postal code, province.
• Order information — Purchase history, order numbers, products purchased, amounts.
• Communication information — Messages sent through our contact form, email correspondence.
• Technical information — IP address, browser type, pages visited, visit duration (collected automatically).

2. Use of Information

Your personal information is used for the following purposes:

• Processing and shipping your orders.
• Communicating with you regarding your orders or inquiries.
• Sending you a tracking number for delivery.
• Processing returns and refunds.
• Improving our website and services.
• Complying with our legal and tax obligations.

We never sell, rent, or share your personal information with third parties for marketing purposes.

3. Cookies

Our site uses cookies to ensure proper functionality. The types of cookies used are:

• Essential cookies — Required for the site to function (session, shopping cart). These cookies cannot be disabled.
• Performance cookies — Help us understand how visitors interact with the site in order to improve the user experience.

Your shopping cart is stored locally in your browser (localStorage) and is not transmitted to third parties.

4. Third-Party Services

We use trusted third-party services for certain features. These services only have access to the information necessary to perform their functions:

• Stripe — Secure credit card payment processing. Your payment information is processed directly by Stripe and never passes through our servers. Stripe is PCI DSS Level 1 certified. Stripe Privacy Policy.
• Canada Post — Order shipping. Your name and shipping address are shared for package delivery.

5. Data Retention

We retain your personal information for the following periods:

• Order data — Retained for 7 years in accordance with Canadian tax requirements.
• Contact messages — Retained for 2 years, then deleted.
• Technical data — Retained for a maximum of 12 months.

6. Data Security

We implement appropriate security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all communications.
• No credit card data stored on our servers.
• CSRF protection on all forms.
• Restricted access to personal data.

7. Your Rights

In accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA), you have the following rights:

• Right of access — You may request to view the personal information we hold about you.
• Right of rectification — You may request the correction of inaccurate or incomplete information.
• Right to withdraw consent — You may withdraw your consent to the collection and use of your information at any time.
• Right to deletion — You may request the deletion of your personal information, subject to our legal retention obligations.

8. PIPEDA Compliance

CristalTech is committed to complying with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), as well as Quebec's Act respecting the protection of personal information in the private sector (Law 25). We adhere to the ten privacy principles established by PIPEDA.

9. Changes to This Policy

We reserve the right to modify this privacy policy at any time. Any changes will be posted on this page with a revised update date. We encourage you to review this page regularly.

10. Contact Us

For any questions or requests regarding the protection of your personal information, or to exercise your rights, please contact us through our contact form. We will process your request within 30 days.

If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada.