Crystal Heirlooms is committed to ensuring that your personal data is processed lawfully, transparently and for a specific purpose. Once that purpose is fulfilled and the data is no longer required it is deleted.

The General Data Protection Regulation (GDPR) is an EU data protection law that replaces the Data Protection Act 1998 in the UK. It came into effect on 25 May 2018. It gives you the right to access any information that we hold about you, the right to know why we are processing that data, how long we store it for and who gets to see it. You are also entitled to ask us to rectify any errors in this data, and request that we erase you from our records.

Personal information that this website collects and why we collect it

This site uses Google Analytics in order to track user interaction. We use this data to understand how many people visit our website and to track their journey through the website.

Google Analytics uses cookies to record data including approximate geographical location, device, internet browser and operating system, but none of this information personally identifies you to us.

We also allow Google Analytics benchmarking data sharing. This means that data can be used to help create features and publications that give us a better understanding about what’s happening across our industry. Because this data is aggregated and made anonymous, it cannot be used to identify our account, our organization or you as our users.

Our third party data processor

Crystal Heirlooms uses PayPal Website Standard Payments and Online Invoicing to process payments for products purchased from this website. We also use PayPal Here mobile payment at events and exhibitions.

PayPal follows standard Payment Card Industry Data Security Standard (PCI DSS) compliance protocols to protect their customers. PCI DSS provides business best practice guidelines to establish a minimum security standard.

You can read PayPal’s full privacy policy here:

In order for us to process your online purchase PayPal pass the following information to us:
Your name
Your email address
A delivery address
Details of the product you have purchased

We keep this information for accounting and administrative purposes only. These are core business purposes that enable us to process your order when you purchase from us. We have put in place robust physical, electronic and managerial procedures in order to prevent unauthorised access to, or disclosure of, your data during this period.

We do not collect, hold or distribute any personal data about individuals or third parties for direct marketing, advertising or similar purposes.

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites, and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

Your rights

You may request details of personal information that we hold about you by writing to Crystal Heirlooms, 19 Pollards Wood Road, Oxted, Surrey RH8 0HY or emailing enquiries@cyrstal-heirlooms.co.uk.

This policy is effective from 20 April 2018.

Crystal Heirlooms may change this policy from time to time in order to comply with current regulations and legal requirements.