Privacy policy

Last updated: July 29, 2026

Sacred Soul Crystals ("we", "us", or "our") operates this online store and website, including all related information, products, services, features and tools, to provide customers with crystals, spiritual products and related services (the "Services"). Our online store is hosted by Shopify, which provides the e-commerce platform that enables us to sell our products securely.

This Privacy Policy explains how we collect, use, store, share and protect your personal information when you visit our website, place an order, create an account, subscribe to our mailing list, contact us, or otherwise use our Services.

Sacred Soul Crystals is the data controller of your personal information for the purposes described in this Privacy Policy. Where Shopify processes your information to provide and improve its platform, Shopify acts as an independent data controller for those processing activities.

Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read and understood how your personal information is collected, used and disclosed as described below. If there is any conflict between our Terms of Service and this Privacy Policy regarding the processing of personal information, this Privacy Policy will take precedence.

Personal Information We Collect or Process

When we refer to "personal information", we mean information that identifies you or could reasonably be linked to you. We collect only the personal information necessary to provide our Services, fulfil orders, communicate with customers, and comply with our legal obligations.

Depending on how you interact with our Services, we may collect the following categories of personal information:

  • Contact information, including your name, billing address, delivery address, email address and telephone number.
  • Order and transaction information, including products purchased, order history, payment confirmation, shipping information, refunds, exchanges and returns.
  • Payment information, including payment method and transaction details. Payment card information is processed securely by our payment providers. Sacred Soul Crystals does not store your full payment card details.
  • Account information, if you create an account, including your login credentials and account preferences.
  • Communications, including information you provide when contacting us by email, contact form or social media regarding enquiries, orders or customer support.
  • Device and technical information, including your IP address, browser type, operating system, device identifiers and information about how you use our website.
  • Website usage information, including pages viewed, products viewed, items added to your basket and other interactions with our website, which help us improve our Services and customer experience.

We do not intentionally collect special category personal data (such as information relating to your health, religious beliefs or other sensitive personal information). If you voluntarily provide this information to us, we will only process it where necessary to respond to your enquiry or where otherwise permitted by law.

Personal Information Sources

We collect personal information from the following sources:

Directly from you

We collect information that you voluntarily provide when you:

  • place an order;
  • create a customer account;
  • subscribe to our mailing list;
  • contact us with an enquiry;
  • request customer support; or
  • otherwise communicate with us.

Automatically through our website

When you visit our website, certain technical information is collected automatically, including information about your device, browser, IP address and how you interact with our website. This information helps us operate, maintain and improve our Services.

Our website uses cookies and similar technologies. Information about the cookies we use and how you can manage your preferences is available in our separate Cookie Policy.

From our service providers

We receive information from trusted third-party service providers who help us operate our business, including Shopify, payment processors, shipping providers and other services necessary to process orders and provide customer support.

We do not purchase personal information from third parties for marketing purposes.

How We Use Your Personal Information

We use your personal information only where we have a lawful basis to do so under the General Data Protection Regulation (GDPR). Depending on how you interact with our Services, we may use your personal information for the following purposes:

To provide and fulfil your orders (Contract)

We use your personal information to:

  • process and confirm your orders;
  • process payments;
  • arrange delivery of your purchases;
  • provide order updates;
  • manage returns, refunds and exchanges;
  • create and manage your customer account (where applicable); and
  • provide customer support relating to your purchases.

To operate and improve our website (Legitimate Interests)

We use information about how our website is used to:

  • maintain and improve our website and Services;
  • understand how customers use our website;
  • improve website functionality and customer experience;
  • troubleshoot technical issues; and
  • protect the security and integrity of our website.

Marketing Communications (Consent)

We will only send marketing emails to customers who have actively subscribed to our mailing list or otherwise provided their consent where required by law.

Marketing emails may include:

  • new product announcements;
  • special offers;
  • promotions;
  • newsletters; and
  • updates about Sacred Soul Crystals.

You may withdraw your consent at any time by clicking the unsubscribe link included in every marketing email or by contacting us directly. Unsubscribing from marketing emails will not affect service-related communications regarding your orders.

Security and Fraud Prevention (Legitimate Interests)

We use personal information where necessary to:

  • detect and prevent fraud;
  • protect our customers and business;
  • secure our website and systems;
  • investigate suspicious or unlawful activity; and
  • enforce our Terms of Service where necessary.

Legal and Regulatory Obligations (Legal Obligation)

We may process and retain personal information where necessary to:

  • comply with Irish and European Union laws;
  • maintain tax and accounting records;
  • respond to lawful requests from public authorities;
  • establish, exercise or defend legal claims; and
  • comply with other applicable legal obligations.

How We Disclose Personal Information

We only share your personal information where necessary to operate our business, fulfil your orders, comply with legal obligations or where you have instructed or consented to us doing so.

We may disclose your personal information in the following circumstances:

Service Providers

We share personal information with trusted third-party service providers who help us operate our business and provide our Services. These may include:

  • Shopify, which hosts and operates our online store;
  • payment providers, who securely process payments;
  • shipping and delivery providers, who deliver your orders;
  • IT, website hosting and cloud storage providers;
  • customer support providers; and
  • professional advisers, including accountants or legal advisers where necessary.

These service providers are only permitted to use your personal information where necessary to provide services on our behalf and are required to protect your information in accordance with applicable data protection laws.

Shopify

Our online store is hosted by Shopify. Information you provide when using our website is processed by Shopify to enable the operation of our online store, payment processing, fraud prevention, order fulfilment and other services necessary to provide our Services.

Shopify may process certain personal information in accordance with its own Privacy Policy where it acts as an independent data controller.

Marketing

We do not sell or rent your personal information to third parties for their own marketing purposes.

If you have subscribed to our mailing list, your email address will only be used to send marketing communications from Sacred Soul Crystals. You can unsubscribe at any time using the link included in every marketing email.

Where you ask us to

We may share your personal information where you instruct us to do so, for example to deliver an order to a third-party recipient or where you choose to interact with third-party services linked from our website.

Legal Requirements

We may disclose personal information where required to do so by law, to comply with legal obligations, respond to lawful requests from public authorities, establish or defend legal claims, investigate suspected fraud or unlawful activity, or protect the rights, property or safety of Sacred Soul Crystals, our customers or others.

Business Changes

If our business is sold, transferred, merged or reorganised, personal information may be transferred as part of that transaction, subject to applicable data protection laws.

Relationship with Shopify

Our online store is hosted by Shopify Inc., which provides the e-commerce platform that enables us to sell our products and services online.

When you visit our website, place an order, create an account or otherwise use our Services, certain personal information is processed by Shopify on our behalf to operate and maintain the online store, process payments, provide fraud protection, fulfil orders and improve the security and functionality of the platform.

In some circumstances, Shopify may process your personal information for its own purposes as an independent data controller, including to improve and develop its products and services, comply with legal obligations, and maintain the security and integrity of its platform.

For more information about how Shopify collects, uses and protects personal information, please refer to Shopify Consumer Privacy Policy and Shopify Privacy Portal Link.

Where personal information is transferred internationally by Shopify or its service providers, appropriate safeguards are applied in accordance with applicable data protection laws, including the use of Standard Contractual Clauses or other approved transfer mechanisms where required.

Third Party Websites and Links

Our website may contain links to third-party websites, social media platforms or other online services that are not owned or controlled by Sacred Soul Crystals.

If you choose to follow a link to a third-party website, please be aware that their privacy practices are governed by their own privacy policies and terms of use. We encourage you to review those policies before providing any personal information.

We are not responsible for the privacy practices, content, security or operation of third-party websites or services. The inclusion of a link on our website does not imply that we endorse or approve the content, products or services offered by those third parties.

Any personal information you choose to provide directly to a third-party website or platform is subject to that third party's own privacy policy and not this Privacy Policy.

Children's Data

Our Services are intended for individuals who are at least 18 years of age or the age of majority in their country of residence. We do not knowingly collect personal information from children.

If we become aware that we have collected personal information from a child without appropriate parental or guardian consent where required by law, we will take reasonable steps to delete that information as soon as possible.

If you believe that a child has provided us with personal information, please contact us using the details provided at the end of this Privacy Policy so that we can investigate and, where appropriate, remove the information.

Security and Retention of Your Information

We take the security of your personal information seriously and implement appropriate technical and organisational measures to protect it against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

While we take reasonable steps to protect your personal information, no method of transmitting information over the internet or storing electronic data is completely secure. For this reason, we cannot guarantee the absolute security of information transmitted through our website.

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including to meet our legal, regulatory, tax and accounting obligations.

In general, we retain personal information as follows:

  • Order and transaction records – retained for up to six years to comply with Irish tax and accounting requirements.
  • Customer account information – retained while your account remains active and for a reasonable period afterwards unless you request deletion, where legally permitted.
  • Customer enquiries and correspondence – retained only for as long as necessary to respond to your enquiry and maintain appropriate business records.
  • Mailing list information – retained until you unsubscribe or withdraw your consent.
  • Technical and website usage information – retained for only as long as necessary for security, analytics and website performance purposes, in accordance with our Cookie Policy and applicable legal requirements.

When personal information is no longer required, we will securely delete, anonymise or otherwise dispose of it in accordance with applicable data protection laws.

Your Rights and Choices

If you are located in Ireland, the European Economic Area (EEA) or the United Kingdom, you have certain rights under applicable data protection laws in relation to your personal information.

Subject to applicable legal requirements and exceptions, you may have the right to:

Right of Access

Request confirmation of whether we process your personal information and obtain a copy of the personal information we hold about you.

Right to Rectification

Request that we correct or update any inaccurate or incomplete personal information.

Right to Erasure ("Right to be Forgotten")

Request that we delete your personal information where we no longer have a legal reason to retain it.

Right to Restrict Processing

Request that we restrict how we process your personal information in certain circumstances.

Right to Object

Object to our processing of your personal information where we rely on our legitimate interests as the legal basis for processing. You also have the right to object at any time to the use of your personal information for direct marketing.

Right to Data Portability

Where applicable, request a copy of the personal information you have provided to us in a structured, commonly used and machine-readable format, or request that we transfer it directly to another organisation where technically feasible.

Right to Withdraw Consent

Where we rely on your consent to process your personal information, including for marketing emails, you may withdraw your consent at any time. This will not affect the lawfulness of any processing carried out before your consent was withdrawn.

Managing Marketing Communications

If you have subscribed to our mailing list, you can unsubscribe at any time by clicking the unsubscribe link included in every marketing email or by contacting us directly. You will continue to receive essential service communications relating to any orders you place with us.

Exercising Your Rights

To exercise any of your rights, please contact us using the details provided at the end of this Privacy Policy.

We may ask you to provide sufficient information to verify your identity before responding to your request. This is to protect your personal information and ensure it is only disclosed to the correct individual.

We will respond to requests as soon as reasonably possible and, in any event, within the time limits required by applicable data protection law.

Complaints

If you have any questions or concerns about how we collect, use or protect your personal information, please contact us first using the details provided at the end of this Privacy Policy. We will do our best to resolve your concerns promptly and fairly.

If you are not satisfied with our response, you have the right to lodge a complaint with the Irish Data Protection Commission (DPC), which is the supervisory authority responsible for data protection in Ireland.

Irish Data Protection Commission

Website: https://www.dataprotection.ie

You may also have the right to lodge a complaint with the data protection supervisory authority in the EU Member State where you live, work or where you believe a breach of data protection law has occurred.

International Transfers

Some of the third-party service providers we use, including Shopify and certain payment, technology and cloud service providers, may process or store your personal information outside Ireland or the European Economic Area (EEA).

Where your personal information is transferred outside the EEA or the United Kingdom, we will ensure that appropriate safeguards are in place to protect your information in accordance with applicable data protection laws. These safeguards may include:

  • European Commission Adequacy Decisions;
  • Standard Contractual Clauses approved by the European Commission; or
  • other lawful transfer mechanisms recognised under applicable data protection legislation.

We take reasonable steps to ensure that any organisation processing your personal information on our behalf provides an appropriate level of protection for your personal data.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, our services, legal requirements or data protection practices.

When we make significant changes, we will update the "Last Updated" date at the top of this Privacy Policy and, where required by law, provide additional notice through our website or by other appropriate means.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

Contact

f you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or would like further information about how we process your personal information, please contact us:

Sacred Soul Crystals
Data Controller

Email: soulwithsorcha@gmail.com

Location: Dublin, Ireland

We will respond to your enquiry as soon as reasonably possible and in accordance with applicable data protection laws.