Last updated: February 2026
Velora Crystal ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you visit our website hovo.mybigcommerce.com or make a purchase.
1. Information We Collect
- Personal Information: Name, email address, shipping and billing address, phone number, and payment details when you place an order.
- Browsing Data: IP address, browser type, operating system, referring URLs, pages visited, and timestamps, collected through cookies and similar technologies.
- Account Information: Login credentials and order history if you create an account.
- Communication Data: Any information you provide when contacting us via email or our contact form.
2. How We Use Your Information
- To process and fulfill your orders
- To communicate about your purchases and provide customer support
- To improve our website, products, and services
- To send promotional emails and newsletters (only with your consent)
- To comply with legal obligations
- To prevent fraud and enhance security
3. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), we process your personal data based on the following legal grounds:
- Contract Performance: Processing necessary to fulfill your order and provide our services.
- Legitimate Interest: To improve our products/services and prevent fraud.
- Consent: For marketing communications — you may withdraw consent at any time.
- Legal Obligation: To comply with applicable laws and regulations.
4. Data Processing & Third-Party Services
Our website is hosted on BigCommerce, which acts as our data processor. When you make a purchase, your data is processed through BigCommerce's secure platform. BigCommerce complies with PCI-DSS standards for payment security.
We may also share your information with the following trusted third-party service providers:
- Payment Processors: Stripe, PayPal, or other payment gateways to securely process transactions.
- Shipping Carriers: USPS, UPS, FedEx, or DHL to deliver your orders.
- Email Marketing: Email service providers to send newsletters (only with your consent).
- Analytics: Google Analytics to understand website traffic and usage patterns.
These providers are contractually obligated to protect your data and may only use it for the specific purposes we authorize.
5. Cookies & Tracking Technologies
Our website uses the following types of cookies:
- Essential Cookies: Required for the website to function (shopping cart, authentication).
- Analytics Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics).
- Marketing Cookies: Used to deliver relevant advertisements (only with your consent).
You can manage cookie preferences through your browser settings. Disabling essential cookies may affect website functionality.
6. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Specifically:
- Order data: Retained for 7 years for tax and legal compliance.
- Account data: Retained until you request account deletion.
- Marketing data: Retained until you unsubscribe or withdraw consent.
7. Your Rights
For All Customers:
- Access, correct, or delete your personal data
- Opt out of marketing communications at any time
- Request a copy of the data we hold about you
Additional Rights for EEA Residents (GDPR):
- Right to data portability
- Right to restrict processing
- Right to object to processing
- Right to lodge a complaint with your local data protection authority
Additional Rights for California Residents (CCPA):
- Right to know what personal information is collected, used, shared, or sold
- Right to delete personal information held by us
- Right to opt-out of the sale of personal information — We do not sell your personal information
- Right to non-discrimination for exercising your CCPA rights
8. International Data Transfers
Your information may be transferred to and processed in the United States, where our servers and service providers are located. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) where required, to protect your data in compliance with applicable laws.
9. Data Security
We implement industry-standard security measures including SSL/TLS encryption for all data transmissions. Our payment processing is PCI-DSS compliant. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
10. Children's Privacy
Our website and services are not directed to individuals under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If we learn that we have collected data from a child, we will promptly delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically. For significant changes, we will notify you via email or a prominent notice on our website.
12. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:
- Email: support@auracrystal.com
- Contact Page: Contact Us