Website Privacy Statement

---

At The Crystillery, we are committed to protecting your privacy and ensuring that your personal data is handled in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Website Privacy Statement explains how we collect, use, store, and protect your personal information when you visit or make a purchase from our website.

The Crystillery
Website: www.thecrystillery.co.uk

We may collect and process the following data:

• Personal identification information (e.g. name, email address, phone number, shipping address, billing address)
   
• Payment details (processed securely via third-party payment processors like Stripe or PayPal)
   
• Purchase history and preferences
   
• Browsing information (cookies, IP address, browser type, etc.)
   
• Communication data (emails, messages, reviews)
   

We use your personal data to:

• Process and deliver your orders
   
• Manage your customer account
   
• Communicate with you (order updates, queries, offers if opted in)
   
• Improve our website and customer experience
   
• Comply with legal obligations
   

We do not sell your personal information to third parties.

We only process your data when we have a legal basis to do so, including:

• Contractual obligation – to fulfil your orders
   
• Legal obligation – to meet UK legal requirements
   
• Consent – when you subscribe to marketing or newsletters
   
• Legitimate interest – to improve our website and customer service
   

We may share your data with:

• Payment processors (e.g. PayPal, Stripe)
   
• Delivery providers (e.g. Royal Mail, courier services)
   
• Website service providers (e.g. Shopify, Wix, Squarespace etc.)
   
• Legal authorities, where required
   

All third parties are required to respect the confidentiality of your data.

Your data is stored securely and only for as long as necessary to fulfil its purpose, including for tax and accounting purposes.

Under UK GDPR, you have rights including:

• Right to access – You can request a copy of your personal data
   
• Right to rectification – You can request corrections
   
• Right to erasure – You can ask us to delete your data
   
• Right to restrict or object to processing
   
• Right to data portability
   

To exercise any of these rights, contact us via the Contact Us section of our website.

Our website uses cookies to enhance your browsing experience. You can manage cookie preferences through your browser settings. Learn more in our Cookie Policy.

We may update this statement from time to time. Any changes will be posted on this page with a revised effective date.

If you have any questions or concerns about this privacy statement or how we use your data, please contact us via the Contact Us section of our website.
 

If you're not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.