Privacy Policy

 Privacy Policy

Cosmic Moon Crystals
Website & Store: https://cosmicmooncrystals.com
Contact: info@cosmicmooncrystals.com

Last updated: September 3, 2025

This Privacy Policy explains how Cosmic Moon Crystals (“Cosmic Moon Crystals,” “we,” “us,” or “our”) collects, uses, discloses, and safeguards personal information when you visit or make a purchase from our website and online store (the “Site”). By using the Site, you agree to this Policy.
Note: This is a general template and not legal advice. Please have an attorney review for your specific business and jurisdictions.
 

This Policy applies to personal information processed through the Site, including purchases, account creation, contact forms, email subscriptions, and customer support.

• Data Controller: Cosmic Moon Crystals
   
• Email: info@cosmicmooncrystals.com
   
• Jurisdiction: United States (serving customers worldwide)
   

• Identifiers & contact data: name, email address, billing/shipping address, phone number.
   
• Order details: products purchased, order notes, gift messages.
   
• Account & preferences: username, password (hashed), saved addresses, wishlist, size preferences.
   
• Communications: messages via forms, email, social channels, or reviews.
   
• Appointments/bookings (if offered): session type, preferred dates/times, non-health notes you choose to provide.
   
• Promotions: entries and content you submit.
   

• Device & usage data: IP address, browser type, OS, referring URLs, pages viewed, timestamps, approximate location (from IP), interaction data.
   
• Cookies & similar tech: pixels, tags, beacons for core functions, analytics, and (where applicable) advertising.
   

• Payment processors: transaction confirmations, last four digits of card, billing info (we do not store full card numbers).
   
• Shipping & fraud-prevention partners: delivery updates, risk signals.
   
• Analytics/ads partners (if used): de-identified or pseudonymized insights and interest categories.
   

We do not intentionally collect sensitive personal information (e.g., health, precise geolocation, government IDs). Please do not submit such data to us.

• Provide the Site & fulfill orders: process payments, ship products, send confirmations/updates, handle returns.
   
• Customer support: respond to questions, requests, and complaints.
   
• Account & personalization: maintain your account, remember preferences, recommend products.
   
• Site performance & security: operate, maintain, debug, and secure the Site; prevent fraud/misuse.
   
• Analytics & improvement: understand usage and improve offerings and navigation.
   
• Marketing (where permitted): send emails about products, offers, and resources; show interest-based ads (if used).
   
• Legal & compliance: comply with laws, enforce terms, protect rights and safety.
   

Legal bases for EEA/UK users (GDPR): contract performance, legitimate interests (security, improvement, basic analytics, marketing to existing customers), consent (for non-essential cookies/marketing), and legal obligations.

We use cookies and similar technologies for:

• Essential operations: cart, checkout, login, session security.
   
• Performance & analytics: measuring traffic and improving the Site.
   
• Advertising & social media (if enabled): showing relevant ads, measuring campaigns, enabling share features.
   

You can manage cookies in your browser. Where required by law, we obtain consent for non-essential cookies.

Global Privacy Control (GPC) & Universal Opt-Out Signals:
We honor browser/device-level opt-out signals, such as Global Privacy Control (GPC), as requests to opt out of targeted advertising and the sale/share of personal data where applicable.

We share personal information with:

• Service providers/Processors: hosting and platform providers, payment processors, shipping carriers, email/SMS tools, analytics and anti-fraud tools, customer support tools (used only as instructed by us).
   
• Business transfers: in a merger, acquisition, financing, or sale of assets, as permitted by law.
   
• Legal compliance & safety: to comply with law/legal process, respond to lawful requests, enforce terms, or protect rights, property, and safety.
   
• With your consent or at your direction.
   

We do not sell personal information for money. We may engage in targeted advertising or cross-context behavioral advertising (which some laws define as a “sale” or “share”). See Your Privacy Rights for opt-out choices.

We retain personal information only as long as necessary for the purposes described (including legal/accounting/reporting requirements), after which we delete or de-identify it.

We use administrative, technical, and physical safeguards designed to protect personal information (e.g., HTTPS, role-based access, password hashing). No method of transmission or storage is 100% secure.

Depending on your state, you may have rights to access/know, correct, delete, portability, and opt out of targeted advertising and data “sales” or “sharing.” See state-specific sections below to exercise these rights.

• Categories collected: identifiers, customer records (limited), commercial info, internet/network activity, approximate geolocation, inferred preferences (for personalization/ads, if used).
   
• Sources: you, your device/browser, service providers, analytics/ads partners.
   
• Purposes & disclosures: as described in Sections 3–5.
   
• Financial incentives: none at this time.
   
• Sensitive data: not intentionally collected; if provided inadvertently, we use it only as necessary and permitted by law.
   

Texas residents have the right to:

1. Confirm & Access whether we process your personal data and access it;
    
2. Correct inaccuracies;
    
3. Delete personal data;
    
4. Portability (obtain a copy of personal data you provided, in a portable format); and
    
5. Opt Out of (a) targeted advertising, (b) the sale of personal data, and (c) profiling in furtherance of decisions that produce legal or similarly significant effects.
    

How to exercise your Texas rights (two methods):

• Submit a request via our Texas Privacy Rights form (https://cosmicmooncrystals.com/texas-privacy-rights).
   
• Or email info@cosmicmooncrystals.com with the subject line “Texas Privacy Request” and tell us which rights you want to exercise.
   

Verification & Authorized Agents: We may request information (e.g., order number, email on file) to verify your identity. You may use an authorized agent; we may require proof of authorization and, where allowed, direct confirmation from you.

Response Time: We will respond within 45 days of receiving your request; we may extend once by 45 days and will explain why.

Appeals: If we deny your request, you may appeal by replying to our decision email with “TDPSA Appeal.” We will provide a written decision within 60 days. If your appeal is denied, you may contact the Texas Attorney General through their public complaint portal.

Opt-Out Signals: We honor universal opt-out signals (e.g., Global Privacy Control) as requests to opt out of targeted advertising and the sale/share of personal data.

Sensitive/Biometric Data Notices:

• We do not sell sensitive personal data or biometric personal data.
   
• If that ever changes, we will update this Policy and include the required notices:
  “NOTICE: We may sell your sensitive personal data.” and/or
  “NOTICE: We may sell your biometric personal data.”
   

Nevada residents may opt out of the sale of covered information by emailing info@cosmicmooncrystals.com.

You may have rights to access, rectify, erase, restrict processing, object (including to direct marketing), data portability, and to withdraw consent at any time (without affecting prior processing). You may lodge a complaint with your local supervisory authority. Contact info@cosmicmooncrystals.com to exercise rights.

If you access the Site from outside the U.S., your information may be processed in the U.S. and other countries that may not offer the same level of protection as your home jurisdiction. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses).

The Site is not directed to children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal information from children. If you believe a child provided personal information, contact info@cosmicmooncrystals.com and we will delete it.

The Site may link to third-party websites, plug-ins, and social media platforms. We are not responsible for their privacy practices. Review their policies before providing personal information.

If you post reviews, photos, or other content, it may be publicly visible. Do not submit content you do not want disclosed.

If you opt in to receive emails or texts, you may unsubscribe at any time using the link in the message or by contacting us. We may still send transactional messages (e.g., order confirmations).

We may update this Policy from time to time. The “Last updated” date reflects the most recent changes. Material changes will be posted on the Site.

Questions or privacy requests: info@cosmicmooncrystals.com