Privacy Notice

CALIFORNIA RESIDENTS: Please see our notice for California residents here

1. What we need

Our Personal Data Protection Policy governs the use and storage of your data. You can see our Personal Data Protection Policy here.

Crystal Commerce, Inc. is a Controller of the personal data you (data subject) provide us. We collect the following types of personal data from you:

  • Full Name
  • Phone Number
  • Email Address
  • Physical Address
  • IP Address
  • Browser Cookies
  • Credit Card Information

2. Why we need it

We need your personal data in order to provide you with the following services:

  • Collection of Full Name, Phone Number, Email Address, Physical Address, and Credit Card Information is to create an account within our billing system for automated billing and our accounts receivable.
  • Collection of Full Name, Phone Number, Email Address, Physical Address, and Credit Card Information is to fulfil orders placed via Crystal Commerce’s software.
  • Collection of IP Address and Browser Cookies is needed to provide e-commerce services to our users.

3. What we do with it 

Your personal data is processed in 7116 220th ST SW STE A, Mountlake Terrace, WA 98043 located in the United States. Hosting and storage of your data takes place in 555 Bailey Ave, San Jose, CA 95141 which is located in the United States.

The following third party providers will have access to your data if these providers are utilized by the user:

  • eBay
  • Amazon
  • TCGPlayer

Third party providers outside of the previously mentioned providers will not have access to your data, unless specifically required by law.

4. How long we keep it

Under Washington State law, we are required to keep your documents until it’s no longer legitimately needed according to the Data Retention Policy. After this period, your personal data will be irreversibly destroyed. Any personal data held by us for marketing and service update notifications will be kept by us until such time that you notify us that you no longer wish to receive this information. Please see [Data Retention Policy] for more information on our personal data retention schedule.

5. What are your rights?

Should you believe that any personal data we hold on you is incorrect or incomplete, you have the ability to request to see this information, rectify it or have it deleted. Please contact us through [Data Subject Access Request Form].

In the event that you wish to complain about how we have handled your personal data, please contact our support team at or in writing at 7116 220th ST SW STE A, Mountlake Terrace, WA 98043. Our Data Protection Office will then look into your complaint and work with you to resolve the matter. 

If you still feel that your personal data has not been handled appropriately according to the law, you can contact [Data Protection Authority] and file a complaint with them.