Privacy policy

Who we are

Aurora Crystal Co., Ltd. operates this website and the engraving workshop behind it. Every crystal we sell is cut, polished and engraved by us — we do not resell.

For anything in this policy, write to [email protected].

What we collect when you order

We keep it deliberately small. An order records:

• your name, email address and phone number
• the delivery address you give us
• the specification, quantity and price of what you ordered
• any note you add to the order (names, dates, wording to engrave)

What we do not collect

• We never receive or store your payment card details. PayPal handles the payment and shares only the transaction result with us.
• We do not run customer accounts, so there is no password of yours on our server.
• We do not use advertising trackers or third-party analytics.

Your photo and design files

This is the part customers ask about most, so here it is in plain words:

• This website never receives your photo. There is no upload form anywhere on the site.
• After you place an order, your dedicated agent contacts you on WhatsApp and you send the picture there.
• We use it for exactly two things: preparing your free 3D proof, and engraving your piece.
• We never publish it, never use it in advertising, and never hand it to anyone else — unless you ask us to in writing.
• The photo is deleted from our agents' working devices within 30 days of your order being completed.
• If a file has ever been stored on our server, it is erased automatically 30 days after it was added.

Why we are allowed to hold it

We process your order details because they are needed to perform the contract between us (making and shipping what you ordered), and to meet accounting obligations.

The abuse-prevention hash described below is kept on the basis of our legitimate interest in protecting the site.

Who else sees it

Only what is strictly necessary:

• PayPal — to process your payment.
• The courier or postal service — your name, address and phone number, so the parcel can be delivered.
• WhatsApp — the messaging service you and your agent use to exchange photos and updates; that conversation is also governed by WhatsApp's own privacy terms.

We do not sell your data, and we do not share it for advertising.

How long we keep things

• Order and invoice records: as long as tax and accounting rules require.
• Photos and design files: deleted within 30 days of the order being completed.
• Contact-form messages: until your enquiry is answered, and no longer than 12 months.
• Order-lookup and anti-spam logs: 24 hours.
• The hashed IP address attached to an order: kept with the order record so we can defend against fraudulent orders.

Your rights

Wherever you live, we apply the same standard:

• Ask us what we hold about you, and get a copy.
• Ask us to correct anything wrong.
• Ask us to delete your photo or your order data — we will delete whatever we are not legally required to keep.
• Ask us to stop using your data for a particular purpose.

Write to [email protected] and we will answer within one working day. If you are in the EU or UK, you also have the right to complain to your national data protection authority.

Cookies

This site sets one cookie: a session cookie that remembers your language and keeps your form entries while you fill them in. It carries no tracking identifier and expires on its own.

We set no advertising or analytics cookies, which is why you will not see a cookie banner here.

How we protect your data

• The whole site runs over HTTPS.
• Order pages and the order lookup are protected against cross-site request forgery.
• Your IP address is stored only as a one-way hash, never in readable form.
• Uploaded files on our server are stored outside the executable area and can never be run as code.
• Access to order data is limited to the agent handling your order and our workshop manager.

Changes to this policy

If we change how we handle your data, we update this page and the date at the top. Material changes are also announced to customers with an open order by email.

Continuing to use the site after an update means you accept the revised policy.