Privacy Policy

Digital Crystal

Website: https://digital-crystal.com
Email: hello@digital-crystal.com

We provide professional web design, Webflow development, Tilda development, Opencart development, UI/UX design, branding, and e-commerce solutions for clients globally. For all data protection questions, requests, or legal matters, contact: hello@digital-crystal.com

We collect only the data necessary to communicate with you, deliver services, improve site performance, and maintain security.

2.1 Information You Provide Voluntarily

When you submit forms, request a quote, or contact us:

• Name
• Email address
• Phone number
• Company / project details
• Uploaded files (briefs, brand materials, screenshots)
• Messages and communication content

2.2 Information Collected Automatically

Collected through cookies and analytics tools:

• IP address
• Browser type and version
• Device type and OS
• Pages visited
• Time spent on pages
• Clicks, scrolls, interactions
• Referral source
• Geolocation (approximate, anonymized)

2.3 Payment Information

If you make payments (e.g., for services or deposits):
All payments are processed through secure third-party platforms (Stripe, PayPal, Wise, Payoneer). We do not store card numbers or sensitive financial data.

2.4 Information from Third Parties

We may receive limited data from:

• Analytics services (Google Analytics, Meta Pixel)
• Advertising platforms
• Social media (if you contact us through them)

All data remains subject to this Privacy Policy.

We use your data only for legitimate business purposes:

3.1 Service Delivery

• Responding to inquiries
• Preparing proposals and cost estimates
• Providing design and development services
• Managing projects and communication
• Sending onboarding information
• Delivering completed work

3.2 Website Improvement

• Analyzing performance
• Identifying usability issues
• A/B testing
• Improving content and marketing strategies

3.3 Security

• Detecting suspicious activity
• Preventing fraud and unauthorized access
• Protecting our infrastructure

3.4 Legal Obligations

• Record-keeping
• Regulatory compliance
• Responding to lawful requests

We never use your data for automated decision-making or profiling without your consent.

For visitors in the EU/EEA and UK, we process data on the following legal bases:

• Consent - contact forms, cookies, analytics
• Contractual necessity - preparing proposals, performing services
• Legitimate interest - improving security, preventing abuse
• Legal obligation - record-keeping, compliance

You may withdraw consent at any time.

We use cookies to ensure website functionality and improve user experience.

• Types of CookiesEssential cookies - required for security and navigation
• Analytics cookies - Google Analytics, Meta Pixel
• Functional cookies - remembering preferences
• Marketing cookies - anonymized tracking for ad optimization

You may disable cookies in your browser at any time.
A full Cookie Policy can be provided upon request or displayed separately.

We use modern security measures, including:

• HTTPS encryption
• Secure servers
• Firewalls and access control
• Encrypted communication
• Limited personnel access
• Strong password and authentication policies

While no digital transmission is 100% secure, we follow industry best practices to protect your information.

We retain data only as long as necessary:

• Contact form submissions: 12–24 months
• Project files and communication: duration of cooperation + 12 months
• Contracts and billing information: up to 7 years (legal requirement)
• Analytics data: 26–38 months (Google default)

You may request earlier deletion if allowed by law.

We never sell or rent your personal data.

We may share data only with:

8.1 Trusted Service Providers

• Hosting platforms
• Analytics tools
• Communication tools
• Payment processors
• Project management services
• Cloud storage

All vendors meet privacy and security standards (GDPR-compliant where required).

8.2 Legal Authorities

Only if required by:

• Court order
• Law enforcement
• Applicable regulations

We do not share information for marketing purposes unless explicitly permitted.

Your data may be processed in the United States, the EU, and other countries where our tools operate.

We ensure appropriate protection measures, including:

• Standard Contractual Clauses (SCCs)
• GDPR-compliant providers
• Encrypted and secure transfers

You may request our list of subprocessors at any time.

Depending on your location, you have the right to:

EU/UK (GDPR Rights)

• Access your data
• Correct inaccuracies
• Delete your data (“right to be forgotten”)
• Restrict processing
• Object to processing
• Data portability
• Withdraw consent
• Lodge a complaint with a data authority

California (CCPA/CPRA Rights)

• Know what data is collected
• Request deletion
• Opt out of data sharing and sale (we do not sell data)
• Non-discrimination for exercising rights

To exercise any right: hello@digital-crystal.com

We do not knowingly collect information from children under 13 years old (US) or 16 years old (EU/UK).
If we discover such data, we delete it immediately.

Our website may contain external links.

We are not responsible for:

• their content
• their privacy practices
• their data handling policies

We recommend reviewing each site’s privacy policy separately.

We may update this Policy periodically.
Updates take effect once published on this page.

The “Last updated” date will always reflect the latest version.

For any privacy-related questions, requests, or concerns:

Digital Crystal

Email: hello@digital-crystal.com
Website: https://digital-crystal.com