Privacy Policy

Last updated: June 23, 2026

This Privacy Policy explains how SANSUNCRYSTAL (“SANSUN,” “we,” “us,” or “our”) collects, uses, shares, and protects your personal information when you visit https://sansuncrystal.com/ (the “Site”), make a purchase, or otherwise interact with us. It also describes your rights and choices regarding your personal information.

By using the Site, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Site.

For the purposes of the EU and UK General Data Protection Regulation (GDPR), the data controller is SANSUNCRYSTAL. You can contact us at any time at sansuncrystal@outlook.com.

Comments

When visitors leave comments on the site, we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Information We Collect

We collect the following categories of personal information.

Information you provide to us directly:

Identity and contact details — name, email address, shipping and billing address, and phone number.
Order information — products purchased, order value, and transaction history.
Payment information — your payment method and the details needed to process payment. Card numbers are collected and processed directly by our payment providers; we do not store full card details on our own servers.
Account information — if you create an account, your login credentials and saved preferences.
Communications — the content of messages, emails, reviews, survey responses, and any information you share when you contact our support team.
Marketing preferences — your choices about receiving emails, SMS, or other marketing.

Information we collect automatically:

When you visit the Site, our service providers and we automatically collect certain information through cookies and similar technologies, including your IP address, device type, browser type, operating system, referring URLs, pages viewed, links clicked, approximate location, and how you interact with the Site. Please see Section — Cookies and Tracking Technologies.

Information we receive from third parties:

Payment processors, who confirm your payment status.
Shipping and fulfillment partners, who provide delivery updates.
Analytics and advertising providers, who help us understand and improve how the Site is used.
Social media platforms, if you interact with us or click our ads there.

We do not intentionally collect sensitive personal information (such as health, religious, or biometric data). Please do not send us such information.

How We Use Your Information

We use your personal information to:

Process, fulfill, and deliver your orders, and send order confirmations and updates.
Take payment and prevent, detect, and investigate fraud or other prohibited activity.
Provide customer support and respond to your requests.
Create and manage your account.
Send you marketing communications where you have consented or where otherwise permitted by law, and personalize the content and offers you see.
Operate, maintain, analyze, and improve the Site, our products, and our services.
Comply with our legal obligations, enforce our terms, and protect our rights and the rights of others.

Legal Bases for Processing (EEA, UK, and Switzerland)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process your personal information only where we have a valid legal basis to do so:

Performance of a contract — to process and deliver the orders you place with us.
Consent — for example, to send you marketing emails or to set non-essential cookies. You may withdraw your consent at any time.
Legitimate interests — to operate and secure the Site, prevent fraud, understand our customers, and improve our products and services, provided these interests are not overridden by your rights and freedoms.
Legal obligation — to comply with applicable laws, such as tax, accounting, and consumer-protection requirements.

How We Share Your Information

We do not sell your personal information for money. We share personal information only as described below:

Service providers and processors who perform functions on our behalf, including payment processing, order fulfillment and warehousing, shipping and logistics, website and e-commerce hosting, analytics, email and SMS marketing, advertising, customer support, and fraud prevention. These providers may access personal information only to perform their services for us and are contractually required to protect it.
Advertising and analytics partners — we may share certain online identifiers and usage data with partners such as analytics and advertising platforms to measure and improve our marketing. Depending on your jurisdiction, some of this activity may be considered “sharing” or a “sale” of personal information under applicable law. You can opt out as described in that section.
Business transfers — if we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction.
Legal and safety reasons — when we believe disclosure is necessary to comply with the law, respond to lawful requests, enforce our terms, or protect the rights, property, or safety of SANSUN, our customers, or others.
With your consent — for any other purpose disclosed to you at the time we collect the information.

Cookies and Tracking Technologies

We use cookies, pixels, tags, and similar technologies to operate the Site, remember your preferences, analyze traffic, and (with your consent where required) deliver and measure advertising.

Strictly necessary cookies are required for the Site to function (for example, to keep items in your cart) and cannot be switched off.
Analytics and performance cookies help us understand how the Site is used.
Advertising and targeting cookies help us show you relevant ads and measure their effectiveness.

Where required by law (for example, in the EEA and UK), we obtain your consent before setting non-essential cookies through our cookie banner, and we honor recognized opt-out preference signals such as Global Privacy Control (GPC) where applicable. You can manage your preferences at any time through your browser settings. Disabling some cookies may affect how the Site works.

International Data Transfers

We operate internationally, and your personal information may be transferred to, stored in, and processed in countries other than the one in which you live, including countries that may not provide the same level of data protection as your home country. Where we transfer personal information out of the EEA, the UK, or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum / UK International Data Transfer Agreement, where relevant). You may contact us for more information about these safeguards.

Data Retention

We keep your personal information for as long as necessary to fulfill the purposes described in this Policy, including to provide our services, comply with our legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. When personal information is no longer needed, we securely delete or anonymize it.

Data Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information against loss, misuse, and unauthorized access, disclosure, alteration, and destruction. However, no method of transmission over the internet or method of storage is completely secure, so we cannot guarantee absolute security.

Your Privacy Rights

Your rights depend on where you live. To exercise any of the rights below, contact us at sansuncrystal@outlook.com. We may need to verify your identity before responding, and we will not discriminate against you for exercising your rights.

EEA, UK, and Switzerland (GDPR)

You have the right to:

Access the personal information we hold about you.
Request correction of inaccurate or incomplete information.
Request erasure of your personal information (“right to be forgotten”).
Restrict or object to our processing, including for direct marketing or profiling.
Receive your personal information in a portable format (data portability).
Withdraw consent at any time where processing is based on consent.
Lodge a complaint with your local data protection authority.

California (CCPA/CPRA)

If you are a California resident, you have the right to:

Know what personal information we collect, use, disclose, and share, and to request a copy of it.
Delete the personal information we have collected from you, subject to certain exceptions.
Correct inaccurate personal information.
Opt out of the “sale” or “sharing” of your personal information, including for cross-context behavioral advertising.
Limit the use and disclosure of sensitive personal information (note: we do not use sensitive personal information for purposes that require this option).
Non-discrimination for exercising your rights.

To opt out of the sale or sharing of your personal information, use our [“Do Not Sell or Share My Personal Information”] link, adjust your cookie settings, or enable a Global Privacy Control (GPC) signal in your browser, which we will honor as a valid opt-out request. You may use an authorized agent to submit a request on your behalf with proper authorization.

Other U.S. states (e.g., Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana)

If you reside in a U.S. state with a comprehensive privacy law, you may have rights similar to those above, including the right to access, correct, delete, and obtain a copy of your personal information, and to opt out of targeted advertising and the sale of personal information. Some states allow you to appeal a denied request. Contact us to exercise these rights.

Canada (PIPEDA) and Australia (Privacy Act)

If you are in Canada or Australia, you have the right to access and correct your personal information and to make a complaint to the relevant regulator. Contact us to exercise these rights.

Marketing Communications

If you have opted in to marketing, you can unsubscribe at any time by clicking the “unsubscribe” link in any marketing email, replying STOP to SMS messages (where applicable), or contacting us. We may still send you non-promotional, transactional messages relating to your orders and account.

Children’s Privacy

The Site is intended for adults and is not directed to children. We do not knowingly collect personal information from children under the age of 16 (or the minimum age required in your jurisdiction). If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

Third-Party Links

The Site may contain links to third-party websites and services that we do not operate or control. This Privacy Policy does not apply to those third parties, and we encourage you to review their privacy policies.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will post the updated version on this page and revise the “Last updated” date above. Where required by law, we will provide additional notice or obtain your consent.