This Privacy Policy explains how Crystal Code processes personal data in connection with the website planetcrystalpiece.beauty and related business development activities.
Depending on your location and the applicable law, you may have rights relating to your personal data, including access, correction, deletion, restriction, objection, and portability. You may also have the right to lodge a complaint with a supervisory authority if you believe your data has been handled unlawfully.
To exercise a privacy right, please provide enough information for us to identify the relevant data and assess the request. We may ask for additional details where needed to verify identity or understand the scope of the request. We will respond within the timeframe required by applicable law and may decline a request where a legal exception applies.
We retain personal data for the period necessary to provide services, manage business records, resolve disputes, comply with legal obligations, and support legitimate operational needs. When data is no longer needed, we delete it or anonymise it, unless a longer retention period is required by law.
If we make material changes, we will update the policy on the website and may provide additional notice where appropriate. The revised version takes effect when posted unless a different effective date is stated.
We may collect identification and contact details, business information, communication content, technical data, and usage data. In a business development context, this can include information submitted through inquiry forms, project discussions, account or service administration, and records of interactions with the website.
We receive data directly from users when they submit forms, request information, or communicate with us. We also collect certain data automatically through the website, such as device and browser information, log data, and cookie-related information. Where relevant, we may obtain limited business contact details from clients, prospects, or other parties involved in a project.
The site may use essential cookies to support core functions, functional cookies to remember settings, and analytics cookies to understand how the site is used. Where applicable, cookies may be session-based or persistent. Non-essential cookies are used only where permitted by law and, if required, after consent.
You may block or delete cookies through your browser settings. If the site provides a cookie preference tool, you may use it to adjust non-essential cookies. Some cookies are necessary for the site to function properly, and limiting them may affect performance or availability of certain features.
When the GDPR applies, we process personal data on a lawful basis such as performance of a contract, compliance with legal obligations, legitimate interests, or consent where required. We apply data minimisation, purpose limitation, and storage limitation principles to the extent relevant to our operations.
Where the GDPR applies, individuals may have rights to access, rectify, erase, restrict, object to processing, and receive a copy of their data in a portable format. Where processing is based on consent, consent may be withdrawn for future processing. These rights are not absolute and may be limited by legal obligations or legitimate grounds for retaining the data.
We use personal data to respond to inquiries, assess and manage business opportunities, provide and maintain the website, communicate about projects or services, support security and fraud prevention, analyse site performance, maintain records, and comply with legal obligations. Where permitted, we may also use data to improve service quality and manage internal administration.
We may share personal data with trusted service providers that support website hosting, technical maintenance, analytics, communications, document handling, or other operational functions. These parties act on our instructions where they process data on our behalf, and they are expected to use appropriate confidentiality and security measures. If a business transaction affects our operations, data may be transferred as part of that transaction subject to applicable safeguards.
We may disclose personal data to public authorities, courts, or other third parties when necessary to comply with legal obligations, enforce our rights, protect against fraud or security incidents, or respond to lawful requests. We may also share information where disclosure is necessary to establish, exercise, or defend legal claims.
