CRAFTS AND STONE1. Information you give us
- Your account: your name, email address and password. Your password is never stored as you type it; we keep only a one-way cryptographic hash of it.
- Orders and addresses: the shipping address and phone number you enter at checkout, any addresses you save to your account, the items you order and your order history.
- Enquiries: the name, email, phone number and message you send through our contact form, and the details you give when you request a private viewing (including a preferred date and the piece you would like to see).
- Custom jewellery requests: your contact details, your description of the piece, your gemstone, metal and budget preferences, and any reference images you upload.
- Newsletter: your email address, if you choose to subscribe.
We do not collect payment card details on this website. Payment for an order is arranged directly with our team after checkout.
2. Information collected automatically
- Sign-in records: when you sign in, we record your browser type and IP address against that session, to keep your account secure and to spot misuse.
- Searches: the words you search for in our shop. If you are signed in, your recent searches are linked to your account so we can show them back to you. Searches are also counted, without any identity, to show popular searches and to learn what customers are looking for.
- Security: your IP address is used briefly to limit how often forms and sign-in can be used from one connection, which protects you and us from automated attacks.
- Essential cookies: described in section 8. We do not use advertising cookies, analytics or tracking tools, and we do not build profiles of your browsing.
3. How we use your information
- To process and deliver your orders, arrange payment, and send order confirmations and status updates.
- To respond to your messages, viewing requests and custom jewellery requests.
- To run your account, keep it secure, and prevent fraud and abuse of the website.
- To send you our newsletter, only if you subscribed. Every newsletter email lets you unsubscribe.
- To improve our catalogue and website, using search terms and order trends.
- To meet our legal, tax and accounting obligations.
If you are in the European Union or the United Kingdom, we rely on these legal bases: performing our contract with you (orders and your account), our legitimate interests (security, fraud prevention and improving our service), your consent (the newsletter, which you can withdraw at any time), and legal obligations (tax and accounting records).
4. Who we share it with
We never sell your personal information. We share it only with:
- Service providers who run the website for us: website hosting (Vercel), our database (Supabase), image and video hosting (Cloudinary), email delivery (Resend) and security and caching infrastructure (Upstash). They process data only on our instructions.
- Couriers and customs authorities, who need your name, address and phone number, and the contents and value of your parcel, to deliver it.
- Professional advisers and authorities, such as accountants, lawyers or law enforcement, where the law requires it or to protect our legal rights.
5. International transfers
Our business operates in Pakistan and the United States, and our service providers store data in other countries, including the United States and the European Union. Where your information moves between countries, we rely on our providers' contractual safeguards to keep it protected to the standard this policy describes.
6. How long we keep it
- Account information: for as long as your account is open. You can ask us to close it at any time.
- Orders and invoices: for as long as tax and accounting laws require us to keep them.
- Messages, viewing requests and custom jewellery requests: for as long as needed to deal with them and any follow-up.
- Newsletter: until you unsubscribe.
- Sign-in sessions: they expire after 30 days, or immediately when you sign out.
7. Your rights
Depending on where you live, you may have the right to access the personal information we hold about you, to correct it, to have it deleted, to object to or restrict how we use it, to receive a copy of it in a portable format, and to withdraw your consent at any time. To use any of these rights, contact us using the details below; we may need to confirm your identity first. If you are unhappy with how we have handled your information, you can also complain to the data protection authority in your country.
8. Cookies
We use only the cookies the website needs to work. Because they are strictly necessary, they do not require consent, and blocking them will stop sign-in or the cart from working.
| Name | Purpose | Duration |
|---|---|---|
| cs_access_token | Keeps you signed in while you browse | 15 minutes |
| cs_refresh_token | Keeps you signed in between visits until you sign out | 30 days |
| cs_guest_cart | Remembers your cart if you are not signed in | 90 days |
| NEXT_LOCALE | Remembers the language you chose | Until you close your browser |
| cs_currency | Remembers the currency you chose to see prices in | 1 year |
| cs_theme | Remembers whether you chose the light or dark look for the site | 1 year |
We also store one setting in your browser's session storage (not a cookie) so the homepage's introduction plays only once per visit. It is deleted when you close the tab.
9. How we protect it
Everything you send us travels over an encrypted (HTTPS) connection. Passwords are stored only as secure hashes, access to customer information is limited to our staff through authenticated accounts, and our forms are protected against automated abuse. No system is perfectly secure, but we work to protect your information and will tell you and the relevant authorities about a breach where the law requires it.
10. Children
Our website and products are intended for adults. We do not knowingly collect information from anyone under 18. If you believe a child has given us personal information, please contact us and we will delete it.
11. Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed. If we make a significant change, we will tell you by email or with a notice on the website.
12. Contact us
For any privacy question or request, contact us at:
See also our Terms & Conditions.