Privacy policy
Last updated: September 18, 2026
# Privacy Policy
Hex and Harmony Crystals operates the Hex & Harmony Crystals mobile application, this website and online store, including all related information, content, features, tools, products and services (collectively, the “Services”).
Our online store is powered by Shopify, and our mobile application uses services including Supabase to provide account authentication, database, storage and application functionality.
This Privacy Policy explains how Hex and Harmony Crystals collects, uses, stores and discloses personal information when you use the Hex & Harmony Crystals mobile application, visit our website, make a purchase or other transaction, create or manage an account, upload content, receive notifications, or otherwise communicate with us.
If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls in relation to the collection, processing and disclosure of personal information.
Please read this Privacy Policy carefully. By using or accessing the Services, you acknowledge that you have read and understood this Privacy Policy.
## Personal Information We Collect or Process
When we use the term “personal information”, we mean information that identifies you or can reasonably be linked to you.
Personal information does not include information that has been anonymised or de-identified so that it cannot reasonably identify you.
Depending on how you use the Services, we may collect or process the following categories of personal information:
- Contact details, including your name, billing address, shipping address, phone number and email address.
- Account information, including your email address, account identifier, login credentials, profile name, preferences and settings.
- Transaction information, including items you view, add to your basket, save to a wishlist, purchase, return, exchange or cancel, and details of previous transactions.
- Payment-related information, including payment method, payment status, transaction references and payment confirmation information. Full payment card details are generally processed by our payment providers rather than stored directly by Hex and Harmony Crystals.
- Communications with us, including information you provide when contacting customer support or making an enquiry.
- Device and technical information, including device type, operating system, browser information, IP address, network information and identifiers required to operate, secure and troubleshoot the Services.
- Usage information, including information about how and when you interact with our website, store or mobile application.
## Information Collected Through the Hex & Harmony Crystals App
When you use the Hex & Harmony Crystals mobile application, we may also collect or process:
- App account information, including your email address, account identifier, profile name and optional phone number.
- Saved app content, including wishlists, favourite products or crystals, My Altar entries, intentions, personal notes and other content you choose to save.
- Photos and images that you choose to upload, including photographs added to My Altar.
- Camera or photo-library access, where you choose to take or select an image for use within the app.
- Notification information, including an app/device push-notification token, device platform and notification preferences where you choose to enable notifications.
- Order and checkout information, including contact details, delivery information, basket contents, order information and payment-related transaction references.
- Technical information required to provide, secure, maintain and troubleshoot the app.
We do not access your camera or photo library unless you choose to use a feature that requires that access and grant permission on your device.
## Personal Information Sources
We may collect personal information from the following sources:
- Directly from you, including when you create an account, place an order, update your profile, save app content, upload an image, contact us or otherwise provide information.
- Automatically through the Services, including from your device when you use our website or mobile application.
- From Shopify and our service providers where they provide technology or services on our behalf.
- From payment providers involved in processing or confirming payments.
- From business partners and other third parties where permitted by law.
## How We Use Your Personal Information
We may use personal information for the following purposes:
### Providing and Improving the Services
We use personal information to:
- Provide and operate the website, store and mobile application.
- Create, maintain and manage customer accounts.
- Authenticate users and keep accounts secure.
- Process orders and payments.
- Arrange shipping and delivery.
- Process returns, exchanges and cancellations.
- Save wishlists, favourites and other account preferences.
- Provide My Altar functionality, including private notes, intentions and uploaded photographs.
- Provide app notifications where enabled.
- Provide customer support.
- Remember your preferences.
- Improve, maintain and troubleshoot the Services.
### Marketing and Advertising
Where permitted by law, and where consent is required, we may use personal information to send marketing and promotional communications.
You can unsubscribe from promotional emails at any time using the unsubscribe link contained in those messages.
You may also update marketing preferences within your account where this functionality is available.
### Security and Fraud Prevention
We may use personal information to:
- Authenticate accounts.
- Detect and prevent fraud.
- Detect misuse, malicious activity or unauthorised access.
- Protect our customers, business and Services.
- Investigate suspicious activity.
- Maintain the security and integrity of our systems.
### Communicating With You
We use personal information to:
- Respond to enquiries.
- Provide customer support.
- Send important account or order information.
- Provide service-related notifications.
- Communicate changes to our Services or policies where appropriate.
### Legal and Regulatory Purposes
We may use personal information where necessary to:
- Comply with applicable law.
- Respond to valid legal requests.
- Meet tax, accounting and regulatory obligations.
- Resolve disputes.
- Enforce our terms and policies.
- Protect our legal rights.
## How We Disclose Personal Information
We may disclose personal information to third parties where necessary to provide the Services or for other legitimate purposes described in this Privacy Policy.
This may include:
- Shopify, which provides our ecommerce platform.
- Supabase, which provides database, authentication, storage and backend services used by the Hex & Harmony Crystals mobile application.
- Expo and related app infrastructure providers used to support mobile app functionality, including app notifications.
- Payment providers, including PayPal and other payment services used to process or facilitate transactions.
- Delivery and fulfilment providers where required to deliver an order.
- IT, hosting, security, analytics and support providers.
- Marketing providers where permitted by law and in accordance with your preferences.
- Professional advisers such as accountants, legal advisers and insurers where necessary.
- Government agencies, regulators, law enforcement bodies or courts where disclosure is legally required.
We may also disclose information:
- When you specifically request or consent to the disclosure.
- In connection with a business sale, merger, restructuring or similar transaction.
- Where necessary to protect our rights, customers or Services.
## Supabase and App Data
The Hex & Harmony Crystals mobile application uses Supabase to provide authentication, database and storage functionality.
Depending on the features you use, information processed through Supabase may include:
- Account identifiers.
- Email addresses.
- Profile information.
- Saved wishlists.
- My Altar entries.
- Intentions and personal notes.
- Private My Altar photographs.
- Notification preferences.
- Registered notification devices.
- Order and checkout information.
User-uploaded My Altar photographs are stored in app storage associated with the relevant user account and are intended to remain private to that user.
## Push Notifications
If you choose to enable app notifications, the Hex & Harmony Crystals app may register a push-notification token associated with your device.
This token may be used to send notifications including:
- Order updates.
- Back-in-stock notifications.
- Product-drop notifications.
- General announcements.
You can control notification permissions through your device settings and, where available, within the app.
Disabling notifications does not prevent you from using the other main features of the app.
## Payments
Payments may be processed by third-party payment providers including Shopify-supported payment processors and PayPal.
Payment providers process information in accordance with their own privacy policies and security practices.
Hex and Harmony Crystals may receive payment status, transaction identifiers, order references and confirmation information required to manage and fulfil an order.
We do not normally store complete payment card details ourselves.
## Relationship With Shopify
Our online store is hosted by Shopify.
Shopify collects and processes personal information in order to provide ecommerce functionality, payment services, fraud prevention, analytics and other services.
Information submitted through our online store may be transmitted to Shopify and its service providers, including providers located outside the United Kingdom.
For more information about how Shopify handles personal information, please refer to the Shopify Consumer Privacy Policy:
https://www.shopify.com/legal/privacy/app-users
Shopify privacy requests may also be managed through:
https://privacy.shopify.com/
## Third-Party Websites and Links
The Services may contain links to websites, payment services, social networks or other platforms operated by third parties.
We are not responsible for the privacy, security, accuracy or content of third-party services.
You should review the privacy policies and terms of any third-party services you choose to use.
## Children's Data
The Services are not intended for use by children who are below the age at which they may lawfully provide consent or enter into transactions in their jurisdiction.
We do not knowingly collect personal information from children where doing so would be unlawful.
If you believe that a child has provided personal information to us improperly, please contact us so that we can investigate and, where appropriate, delete the information.
## Security
We use appropriate technical and organisational measures intended to protect personal information.
However, no system, network or method of transmission is completely secure and we cannot guarantee absolute security.
You are responsible for keeping your account credentials secure and should not share your password with anyone else.
## Retention of Your Information
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.
This may include retaining information in order to:
- Maintain your account.
- Provide the Services.
- Fulfil orders.
- Comply with legal, tax and accounting obligations.
- Prevent fraud.
- Resolve disputes.
- Enforce our agreements.
App-specific information such as wishlists, My Altar content, uploaded photographs and notification preferences is generally retained while your account remains active unless you delete that content or request deletion of your account.
Certain transaction, order or financial records may be retained after account deletion where required or permitted for legal, tax, accounting, fraud-prevention or regulatory purposes.
## Account and App Data Deletion
Users of the Hex & Harmony Crystals mobile application may request deletion of their app account and associated personal information.
A deletion request may include information associated with the account such as:
- Profile information.
- Saved wishlists.
- My Altar entries.
- Personal notes.
- Intentions.
- Uploaded My Altar photographs.
- Notification preferences.
- Registered notification devices.
To request deletion of your Hex & Harmony Crystals app account and associated data, please contact:
info@hexandharmonycrystals.com
Please use the subject line:
Account Deletion Request
We may need to verify your identity before processing a deletion request.
Once verified, we will delete personal information associated with the app account unless we are required or permitted to retain certain information for legitimate purposes such as:
- Legal obligations.
- Tax and accounting requirements.
- Fraud prevention.
- Dispute resolution.
- Chargebacks.
- Enforcement of our terms.
Information relating to completed purchases may therefore be retained where required for legal, tax, accounting or regulatory purposes even after an app account is deleted.
We will also provide an online method for requesting account deletion through our website.
## Your Rights and Choices
Depending on where you live, you may have rights relating to your personal information.
These may include:
### Right of Access
You may request information about the personal information we hold about you.
### Right to Correction
You may request that inaccurate or incomplete personal information be corrected.
### Right to Deletion
You may request deletion of personal information, subject to applicable legal exceptions.
### Right to Data Portability
In certain circumstances, you may request a copy of personal information in a portable format.
### Right to Restrict Processing
You may have the right to ask us to restrict certain processing.
### Right to Object
You may have the right to object to certain uses of personal information.
### Withdrawal of Consent
Where processing is based on consent, you may withdraw that consent at any time.
Withdrawal of consent does not affect processing that took place lawfully before consent was withdrawn.
### Marketing Preferences
You may unsubscribe from promotional emails using the unsubscribe link contained in our emails.
You may still receive non-promotional communications relating to orders, your account, security or important service information.
### Targeted Advertising and Data Sharing
Depending on applicable law, you may have rights relating to targeted advertising or the sharing of personal information.
You can manage applicable preferences here:
https://hexandharmonycrystals.com/pages/data-sharing-opt-out
We will not discriminate against you for exercising your privacy rights.
We may need to verify your identity before responding to a request.
## UK and European Privacy Rights
If you live in the United Kingdom or European Economic Area, you may have additional rights under applicable data protection law.
These may include rights to:
- Access your personal information.
- Correct inaccurate information.
- Request deletion.
- Restrict processing.
- Object to processing.
- Receive portable copies of certain data.
- Withdraw consent.
Where required, we will respond to privacy requests within the applicable legal timeframe.
## Complaints
If you have concerns about how we handle personal information, please contact us first so that we can investigate.
You may also have the right to complain to your local data protection authority.
For users in the United Kingdom, the relevant supervisory authority is the Information Commissioner’s Office (ICO).
## International Transfers
Some of our service providers may process or store personal information outside the United Kingdom or European Economic Area.
Where required, we rely on recognised safeguards for international transfers, such as:
- Adequacy regulations or decisions.
- Standard Contractual Clauses.
- The UK International Data Transfer Agreement or UK Addendum.
- Other recognised legal safeguards.
## Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to:
- Our Services.
- Our mobile application.
- Our business practices.
- Technology.
- Legal or regulatory requirements.
When we make changes, we will update the “Last updated” date at the top of this policy.
Where required by law, we will provide additional notice of material changes.
## Contact
If you have questions about this Privacy Policy, our privacy practices, your personal information, or if you wish to exercise your privacy rights, please contact:
Hex and Harmony Crystals
Email:
info@hexandharmonycrystals.com
Telephone:
0739274613
Address:
9 Reynards Court
Great Baddow
Chelmsford
CM2 7HU
United Kingdom
For the purposes of applicable data protection law, Hex and Harmony Crystals is the data controller of personal information processed as described in this Privacy Policy.