Privacy Policy

Privacy Policy

Last Updated: September 2026

At Crystal Heaven, we respect your privacy and are committed to handling your personal information responsibly, transparently, and securely.

This Privacy Policy explains how Crystal Heaven (“Crystal Heaven,” “we,” “us,” or “our”) collects, uses, stores, processes, shares, and protects personal information when you visit our website, create an account, purchase products, communicate with us, subscribe to marketing communications, or otherwise interact with our services.

This Privacy Policy applies to customers and visitors using Crystal Heaven's website and related online services in India.

By accessing or using our website and services, you acknowledge the practices described in this Privacy Policy.


1. About Crystal Heaven

Crystal Heaven is an ecommerce business operating from India and offering products including natural crystals, gemstones, crystal jewellery, spiritual products, décor items, and related products.

Business Name: Crystal Heaven
Location: Khambhat, Gujarat – 388620, India
Email: care@crystalheaven.in
Phone: +91 8734888998

For privacy-related questions, requests, corrections, or concerns, you may contact us using the details provided above.


INFORMATION WE COLLECT

2. Personal Information You Provide to Us

Depending on how you interact with Crystal Heaven, we may collect personal information that you voluntarily provide.

This may include:

  • Full name;

  • Email address;

  • Mobile number;

  • Billing address;

  • Shipping/delivery address;

  • PIN code;

  • City and state;

  • Order information;

  • Products purchased;

  • Customer account information;

  • Communication preferences;

  • Information submitted through forms;

  • Customer-support communications;

  • Return, exchange, refund, and cancellation information;

  • Product reviews or feedback;

  • Marketing preferences; and

  • Other information you voluntarily provide to us.

We request customers to provide only information that is reasonably necessary for the relevant transaction or service.


3. Order and Transaction Information

When you place an order, we collect information necessary to process and fulfil the transaction.

This may include:

  • Order number;

  • Products purchased;

  • Product quantities;

  • Product variations;

  • Order value;

  • Discounts and promotional information;

  • Payment status;

  • Shipping information;

  • Delivery status;

  • Return or exchange history; and

  • Customer communications relating to the transaction.

We use this information to process orders, provide customer service, maintain transaction records, prevent fraud, and fulfil applicable business, accounting, and legal requirements.


4. Payment Information

Payments may be processed through third-party payment service providers such as Razorpay, PhonePe, SMEpay, and other payment methods that we may make available from time to time.

We may receive limited payment-related information necessary to verify and manage a transaction, such as:

  • Payment status;

  • Transaction/reference number;

  • Payment method;

  • Amount paid;

  • Refund status; and

  • Other transaction-related information.

Payment card numbers, banking credentials, UPI credentials, and other sensitive payment information may be collected and processed directly by the applicable payment service provider rather than stored directly by Crystal Heaven.

We encourage customers to review the privacy and security practices of the payment service they use.


5. Cash on Delivery Information

Where Cash on Delivery (COD) is available, we may process customer contact information, delivery information, order value, COD status, delivery confirmation, and related transaction information.

Relevant information may be shared with courier or logistics providers to facilitate COD delivery and collection.


6. Customer Account Information

Customers may have the option to create or use a customer account on our website.

When you create or use an account, we may process information including:

  • Name;

  • Email address;

  • Mobile number;

  • Account identifier;

  • Saved addresses;

  • Order history;

  • Wishlist or preferences, where available;

  • Wallet or credit information, where applicable; and

  • Other account-related information.

Customers are responsible for maintaining the confidentiality of their account credentials.

Please notify us promptly if you believe your account has been accessed without authorization.


INFORMATION COLLECTED AUTOMATICALLY

7. Device and Technical Information

When you visit our website, certain technical information may be collected automatically through our website platform, cookies, analytics services, advertising technologies, and similar tools.

This may include:

  • IP address;

  • Browser type;

  • Device type;

  • Operating system;

  • Device identifiers;

  • Approximate location derived from technical information;

  • Referring website;

  • Pages viewed;

  • Date and time of visits;

  • Time spent on pages;

  • Website interactions;

  • Click activity;

  • Shopping behaviour;

  • Cart activity;

  • Checkout activity; and

  • Other technical or usage information.

This information helps us operate, secure, analyze, and improve our website and customer experience.


COOKIES AND TRACKING TECHNOLOGIES

8. Cookies

Crystal Heaven uses cookies and similar technologies to operate and improve our website.

Cookies are small data files placed on your browser or device when you visit a website.

Depending on their purpose, cookies may help us:

  • Keep the website functioning correctly;

  • Maintain customer sessions;

  • Remember customer preferences;

  • Keep products in a shopping cart;

  • Support account login;

  • Understand website usage;

  • Measure website performance;

  • Detect errors;

  • Improve navigation;

  • Measure advertising effectiveness;

  • Personalize marketing; and

  • Provide more relevant advertising.


9. Types of Cookies We May Use

Our website may use different categories of cookies, including:

Essential Cookies

These cookies are necessary for important website functions such as shopping carts, checkout, account access, security, and session management.

Functional Cookies

These cookies help remember choices or preferences and improve website functionality.

Analytics Cookies

These cookies help us understand how visitors interact with our website, which pages are visited, how visitors navigate the site, and how the website performs.

Advertising and Marketing Cookies

These technologies may be used to measure advertising performance, understand customer interests, create audiences, limit repetitive advertising, and deliver advertising that may be more relevant to users.


10. Cookie Consent and Preferences

Where applicable, Crystal Heaven provides a cookie or consent mechanism that allows website visitors to manage certain categories of cookies and tracking technologies.

Some cookies are necessary for the operation of the website and may not be capable of being disabled through our website controls.

You may also be able to manage cookies through your browser settings.

Disabling certain cookies may affect some website features or functionality.


HOW WE USE PERSONAL INFORMATION

11. Purposes for Which We Use Information

We may process personal information for purposes including:

  • Creating and managing customer accounts;

  • Processing orders;

  • Confirming payments;

  • Packing and dispatching products;

  • Delivering orders;

  • Providing tracking information;

  • Processing COD transactions;

  • Providing customer support;

  • Responding to questions and requests;

  • Processing cancellations;

  • Processing returns and exchanges;

  • Processing eligible refunds;

  • Managing warranties or repair services where applicable;

  • Sending transactional communications;

  • Preventing fraud and misuse;

  • Protecting our website and customers;

  • Improving our products and services;

  • Analyzing website performance;

  • Understanding customer preferences;

  • Managing promotional campaigns;

  • Conducting advertising and marketing;

  • Sending marketing communications where permitted;

  • Maintaining business and accounting records;

  • Resolving disputes;

  • Enforcing applicable terms and policies; and

  • Complying with applicable legal or regulatory obligations.

We seek to limit processing to information reasonably relevant to the applicable purpose.


SHOPIFY

12. Ecommerce Platform

Crystal Heaven operates its ecommerce website using Shopify.

Shopify provides technology and infrastructure that enables us to operate our online store, customer accounts, checkout, order management, and related ecommerce functionality.

As part of providing these services, information relating to website visitors and customers may be processed through Shopify's systems in accordance with Shopify's applicable privacy and security practices.

Customers may review Shopify's own privacy information for further information about how Shopify processes personal data.


SHIPPING AND LOGISTICS

13. Sharing Information With Courier Partners

To fulfil and deliver orders, we share necessary customer information with courier, shipping, fulfilment, and logistics providers.

Information shared may include:

  • Customer name;

  • Delivery address;

  • PIN code;

  • Mobile number;

  • Order/shipment reference;

  • COD amount where applicable; and

  • Other information reasonably necessary to complete delivery.

Our logistics providers may include services such as:

  • Shiprocket;

  • iThink Logistics;

  • Delhivery;

  • Blue Dart;

  • India Post;

  • Shadowfax;

  • Xpressbees;

  • Amazon-related delivery/logistics services; and

  • Other courier or logistics partners used by Crystal Heaven from time to time.

The courier used for a particular order may depend on the destination, serviceability, parcel characteristics, delivery requirements, and operational considerations.


ANALYTICS AND ADVERTISING

14. Analytics Services

We may use analytics technologies and third-party services to understand how visitors use our website and to improve website performance.

These services may collect or process information such as:

  • IP address;

  • Device information;

  • Browser information;

  • Website activity;

  • Pages visited;

  • Session information;

  • Referral information;

  • Interaction events; and

  • Conversion information.

We may use services such as Google Analytics and other analytics tools from time to time.


15. Advertising Technologies

Crystal Heaven may advertise through online platforms including search engines and social-media platforms.

We may use technologies provided by services such as:

  • Google;

  • Meta/Facebook;

  • Instagram;

  • Other advertising networks and platforms.

These technologies may help us:

  • Measure advertising performance;

  • Understand whether an advertisement resulted in a purchase;

  • Build advertising audiences;

  • Re-engage website visitors;

  • Measure conversions;

  • Understand customer interactions; and

  • Display more relevant advertising.

The information available to these providers is governed by their respective privacy policies, technologies, user settings, and applicable consent requirements.


MARKETING COMMUNICATIONS

16. Email Marketing

Where permitted and based on applicable preferences or consent, Crystal Heaven may send promotional emails relating to:

  • New products;

  • Offers;

  • Discounts;

  • Sales;

  • Product launches;

  • Crystal Heaven news;

  • Recommendations; and

  • Other promotional information.

You may unsubscribe from promotional emails using the unsubscribe mechanism provided in the communication, where available, or by contacting us.

Transactional communications relating to an existing order or account may still be sent where necessary.


17. SMS Marketing

Where permitted, we may use your mobile number to send promotional SMS communications.

You may withdraw or change your marketing preferences through the available opt-out mechanism or by contacting us.

Operational messages relating to orders, payments, deliveries, or customer-support requests may be treated separately from promotional communications.


18. WhatsApp Communications

Crystal Heaven may communicate with customers through WhatsApp for purposes including:

  • Order-related communications;

  • Customer support;

  • Delivery updates;

  • Product information;

  • Abandoned-cart communications where permitted; and

  • Marketing or promotional messages where permitted.

You may request that promotional WhatsApp communications stop by using an available opt-out method or contacting Crystal Heaven.

Certain transactional or service-related communications may still be necessary for active orders or customer requests.


THIRD-PARTY SERVICES

19. Shopify Apps and Other Service Providers

Crystal Heaven may use third-party Shopify applications and service providers to support different aspects of our business.

These may include providers supporting:

  • Customer reviews;

  • Email marketing;

  • SMS marketing;

  • WhatsApp communications;

  • Customer support;

  • Loyalty programs;

  • Wallet functionality;

  • Product recommendations;

  • Analytics;

  • Advertising;

  • Abandoned-cart recovery;

  • Fraud prevention;

  • Payment processing;

  • Shipping;

  • Order management;

  • Website optimization; and

  • Other ecommerce functionality.

We share or make information available to these providers only as reasonably necessary for the services they perform or as otherwise permitted by applicable law.

The exact service providers used by Crystal Heaven may change from time to time as our ecommerce operations evolve.


20. When We May Share Personal Information

We do not treat customer personal information as a product that we sell for independent monetary consideration.

However, personal information may be disclosed or made available where reasonably necessary to:

  • Shopify and ecommerce infrastructure providers;

  • Payment processors;

  • Courier and logistics providers;

  • Marketing and communication providers;

  • Analytics providers;

  • Advertising platforms;

  • IT and hosting providers;

  • Customer-support providers;

  • Professional advisers;

  • Fraud-prevention and security providers;

  • Government authorities;

  • Courts, regulators, or law-enforcement authorities where legally required; and

  • Other service providers supporting our operations.

Service providers may process information according to their own applicable privacy obligations and contractual arrangements.


DATA RETENTION

21. How Long We Keep Personal Information

Crystal Heaven does not apply one universal retention period to every category of information.

We retain personal information only for as long as reasonably necessary for purposes such as:

  • Fulfilling orders;

  • Maintaining customer accounts;

  • Providing customer support;

  • Maintaining transaction records;

  • Processing returns, refunds, exchanges, or repairs;

  • Accounting and taxation;

  • Fraud prevention;

  • Resolving disputes;

  • Enforcing agreements;

  • Meeting legal or regulatory requirements; and

  • Other legitimate operational requirements.

Different categories of information may therefore be retained for different periods.

When information is no longer reasonably required, we may delete, anonymize, aggregate, or otherwise dispose of it as appropriate, subject to applicable legal and technical requirements.


DATA SECURITY

22. How We Protect Information

Crystal Heaven takes reasonable administrative, organizational, and technical measures designed to protect personal information against risks such as:

  • Unauthorized access;

  • Unauthorized disclosure;

  • Loss;

  • Misuse;

  • Alteration; and

  • Destruction.

Our website and transactions also rely on security measures implemented by Shopify, payment processors, hosting/infrastructure providers, and other third-party services.

However, no website, internet transmission, electronic storage system, or security method can guarantee absolute security.

Customers should also take reasonable precautions to protect their account credentials and devices.


23. Suspected Account or Security Issues

If you believe that your Crystal Heaven account or personal information may have been accessed or used without authorization, please contact us promptly at:

care@crystalheaven.in

We may request information reasonably necessary to verify your identity and investigate the issue.


YOUR PRIVACY CHOICES AND RIGHTS

24. Access to Personal Information

Subject to applicable law, you may contact Crystal Heaven to request information regarding personal data associated with you that we process or maintain.

We may need to verify your identity before fulfilling certain requests.


25. Correction and Updating of Information

If personal information associated with your account is inaccurate, incomplete, or outdated, you may request correction or update of that information.

Certain account information may also be editable directly through your customer account where that functionality is available.


26. Request for Deletion

Subject to applicable law and necessary exceptions, you may request deletion or erasure of eligible personal information associated with you.

We may need to retain certain information where reasonably necessary or legally required, including for:

  • Completed transactions;

  • Taxation;

  • Accounting;

  • Fraud prevention;

  • Legal compliance;

  • Dispute resolution;

  • Enforcement of agreements; or

  • Other permitted purposes.

Accordingly, a deletion request does not necessarily require immediate deletion of every record associated with a customer.


27. Withdrawal of Consent

Where we rely on your consent for a particular type of processing, you may request to withdraw that consent using an available mechanism or by contacting us.

Withdrawal of consent will apply prospectively and may affect our ability to provide a service where the relevant information is necessary for that service.

Withdrawal does not ordinarily affect processing that was lawfully undertaken before withdrawal.


28. Marketing Opt-Out

You may opt out of promotional communications by:

  • Using an unsubscribe link in an email, where provided;

  • Using the applicable SMS opt-out mechanism;

  • Requesting to stop promotional WhatsApp communications;

  • Adjusting available communication preferences; or

  • Contacting Crystal Heaven Customer Support.

Please note that opting out of marketing does not necessarily prevent us from sending essential transactional or service communications relating to your orders, payments, deliveries, account, or customer-support requests.


29. Privacy Requests and Identity Verification

To protect customer information, we may need to verify your identity before processing certain privacy requests.

Depending on the request, we may ask for information reasonably necessary to confirm that the person making the request is the customer or an appropriately authorized person.

We will not ordinarily disclose personal information to someone who cannot reasonably establish authorization to receive it.


CHILDREN'S PRIVACY

30. Services Not Directed to Children

Crystal Heaven's online store and services are not specifically directed toward children.

We do not intentionally design our services for the purpose of collecting personal information from children.

If we become aware that personal information relating to a child has been collected in circumstances requiring additional consent or other measures under applicable law, we may take appropriate steps to address the information.

Parents or lawful guardians who believe that a child has provided personal information to Crystal Heaven may contact us.


THIRD-PARTY WEBSITES

31. External Links

Our website may contain links to websites, social-media platforms, payment services, or other services operated by third parties.

Crystal Heaven does not control the privacy practices of independent third-party websites.

When you leave our website or interact directly with another provider, that provider's privacy policy and terms may apply.

We encourage users to review the privacy policies of third-party services before providing personal information to them.


SOCIAL MEDIA

32. Social Media Interactions

Crystal Heaven may maintain profiles or pages on social-media platforms such as Instagram, Facebook, and other platforms.

If you interact with Crystal Heaven through social media, information relating to your interaction may also be processed by the relevant social-media platform according to its own privacy policy.

Information that you make publicly available through social media may be visible to other users.


FRAUD PREVENTION AND SECURITY

33. Fraud and Misuse Prevention

We may process relevant information to detect, investigate, and prevent:

  • Fraudulent transactions;

  • Payment fraud;

  • Account misuse;

  • Return or refund abuse;

  • Unauthorized account access;

  • Suspicious orders;

  • Website attacks; and

  • Other unlawful or abusive activity.

Where reasonably necessary, information may be shared with payment providers, logistics providers, security providers, professional advisers, or authorities in connection with such matters.


LEGAL AND REGULATORY DISCLOSURES

34. Legal Requirements

Crystal Heaven may disclose personal information where reasonably necessary to:

  • Comply with applicable law;

  • Respond to lawful governmental or regulatory requests;

  • Comply with court orders or legal proceedings;

  • Protect our legal rights;

  • Investigate suspected fraud or unlawful conduct;

  • Protect customers or other persons; or

  • Establish, exercise, or defend legal claims.

Where appropriate, we seek to limit such disclosures to information reasonably relevant to the applicable requirement.


BUSINESS CHANGES

35. Business Transfer or Reorganization

If Crystal Heaven undergoes a business restructuring, merger, acquisition, transfer, sale of assets, or similar transaction, relevant business records containing personal information may be transferred as part of that transaction, subject to applicable law and appropriate safeguards.


PRIVACY AND DATA PROTECTION IN INDIA

36. Applicable Privacy Framework

Crystal Heaven operates in India and processes customer information with regard to applicable Indian privacy, information-technology, consumer, and data-protection requirements.

India's digital personal-data framework includes the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, with applicable provisions taking effect according to the commencement framework notified by the Government of India.

As applicable legal requirements become effective or are amended, Crystal Heaven may update its privacy practices and this Privacy Policy accordingly.


GRIEVANCES AND PRIVACY REQUESTS

37. Contacting Us About Your Personal Information

If you have a question, concern, complaint, correction request, deletion request, consent-related request, or other privacy-related request, please contact:

Crystal Heaven

Email: care@crystalheaven.in
Phone: +91 8734888998
Address: Crystal Heaven, Khambhat, Gujarat – 388620, India

Please include sufficient information to help us identify your request and, where applicable, the account or transaction concerned.

We may request reasonable verification before processing a privacy request in order to protect personal information from unauthorized disclosure or modification.


38. Grievance Handling

If you have a grievance concerning the handling of your personal information, please contact Crystal Heaven using the contact details above.

We will review the matter and make reasonable efforts to respond and address legitimate privacy concerns in accordance with applicable requirements.

Where applicable law provides additional grievance or regulatory remedies, those rights remain available subject to the relevant legal requirements.


CHANGES TO THIS PRIVACY POLICY

39. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in:

  • Our business practices;

  • Website functionality;

  • Shopify services;

  • Payment providers;

  • Courier partners;

  • Third-party applications;

  • Marketing technologies;

  • Data-processing practices; or

  • Applicable legal and regulatory requirements.

When this policy is materially updated, the revised version may be published on our website with an updated “Last Updated” date.

We encourage customers and website visitors to review this Privacy Policy periodically.


40. Contact Information

For questions regarding this Privacy Policy or Crystal Heaven's handling of personal information, please contact:

Crystal Heaven
Khambhat, Gujarat – 388620, India

Email: care@crystalheaven.in
Phone: +91 8734888998

We will make reasonable efforts to review and respond to legitimate privacy-related enquiries.


Last Updated: September 2026