2. Consent

How do you obtain my consent?

When you provide personal information to complete a transaction, verify your credit card, place an order, arrange a delivery, or return a purchase, we imply that you consent to our collecting and using that information for the specific purpose involved.

If we request your personal information for a secondary purpose, such as marketing, we will either ask for your express consent or give you an opportunity to decline.

How do I withdraw my consent?

If you change your mind after opting in, you may withdraw your consent for us to contact you or continue collecting, using, or disclosing your information at any time. Please contact us at support@crysvibe.com.

3. Disclosure

We may disclose your personal information if required by law or if you violate our Terms of Service.

4. Shopify

Our store is hosted by Shopify Inc. Shopify provides the online e-commerce platform that allows us to sell our products and services to you.

Your data is stored through Shopify’s data storage, databases, and general Shopify application. Shopify stores your data on secure servers protected by a firewall.

Payment

If you choose a direct payment gateway to complete your purchase, Shopify stores your credit card data. It is encrypted in accordance with the Payment Card Industry Data Security Standard (PCI-DSS).

Your purchase transaction data is retained only for as long as necessary to complete the transaction. Once the transaction is complete, the purchase transaction information is deleted.

Direct payment gateways adhere to PCI-DSS standards as managed by the PCI Security Standards Council, a joint effort involving brands such as Visa, Mastercard, American Express, and Discover.

5. Third-Party Services

In general, third-party providers used by us will collect, use, and disclose your information only to the extent necessary to perform the services they provide.

Certain providers, including payment gateways and payment transaction processors, maintain their own privacy policies concerning the information required for purchase-related transactions.

Some providers may be located in, or operate facilities within, a jurisdiction different from yours or ours. If your transaction involves such a provider, your information may become subject to the laws of the jurisdiction in which that provider or its facilities are located.

For example, if you are located in Canada and your transaction is processed by a payment gateway in the United States, the personal information used to complete the transaction may be subject to disclosure under applicable United States legislation.

6. Security

We take reasonable precautions and follow industry best practices to protect your personal information from inappropriate loss, misuse, access, disclosure, alteration, or destruction.

If you provide credit card information, it is encrypted using Secure Socket Layer technology (SSL) and stored using AES-256 encryption.

Although no method of transmission over the Internet or electronic storage is completely secure, we follow PCI-DSS requirements and implement additional generally accepted industry standards.

7. Cookies

The following cookies may be used by our store. They are listed so you can decide whether you wish to opt out where applicable.

• _session_id: A unique session token that allows Shopify to store information about your session, including the referrer and landing page.
• _shopify_visit: Contains no personal data and remains active for 30 minutes after the last visit. It is used by the website provider’s internal statistics tracker to record visits.
• _shopify_uniq: Contains no personal data and expires at midnight, relative to the visitor, on the following day. It counts the number of visits made to the store by a single customer.
• cart: A unique token that remains active for two weeks and stores information about the contents of your shopping cart.
• _secure_session_id: A unique session token used to support a secure browsing session.
• storefront_digest: A unique token retained indefinitely. If the store is password-protected, it determines whether the visitor has access.

8. Age of Consent

By using this site, you confirm that you are at least the age of majority in your state or province of residence.

Alternatively, you confirm that you are the age of majority in your state or province of residence and have given us permission to allow any of your minor dependents to use this site.

9. Changes to This Privacy Policy

We reserve the right to modify this privacy policy at any time, so please review it regularly. Changes and clarifications take effect immediately upon being posted on the website.

If we make material changes, we will provide notice here so that you remain informed about what information we collect, how we use it, and the circumstances under which we may use or disclose it.

If our store is acquired by or merged with another company, your information may be transferred to the new owners so that we may continue selling products to you.

Questions and Contact Information

To access, correct, amend, or delete personal information we hold about you, register a complaint, or request additional information, please contact our Privacy Compliance Officer at support@crysvibe.com.