Privacy & email choices

Who is responsible

CRYSTENORA is operated from China. The responsible operator's legal name and full postal address have not yet been provided and must be added before commercial checkout or marketing email launches. Privacy questions and requests can be sent to zhuliuliu668@gmail.com. We do not invent an operator identity or return address.

Enquiries and orders are not newsletter consent

Information you provide for an enquiry or purchase is used to respond to that request and fulfil the order. Transactional correspondence is not permission to send marketing. A name, contact details or order information supplied through another form does not automatically activate a newsletter subscription.

Optional email reminders

The separate newsletter form asks only for an email address, not a phone number or birthday. Its marketing-consent box starts unchecked. The offer is free email reminders, up to two per calendar month, with no automatic charges. Every new newsletter request stays pending until you open the confirmation page and explicitly submit the confirmation form. Merely opening or prefetching a confirmation link does not activate marketing. Confirmation links expire after 48 hours. Rejected mail is not described as successfully sent; while the service is not configured, the form says it is not live.

Each newsletter email provides a signed unsubscribe link usable without logging in. Selecting the unsubscribe link completes an unsubscribe request through a token-protected submission; with JavaScript disabled, the page provides a code-and-submit alternative. A minimal hashed suppression entry is retained to respect opt-outs. A repeated public form submission does not silently reactivate an unsubscribed address. Rejoining requires a verified request and a new explicit double opt-in.

Newsletter security and retention

The newsletter module stores records in a private server-side database, not in public posts or REST records. Administrator access is restricted. It uses request nonces, a honeypot, bounded scalar and email validation, and keyed IP hashes for request rate limits; it does not keep a raw IP in the newsletter database. Verification tokens are stored as keyed hashes, not raw tokens.

Pending identifying records are eligible for deletion after 14 days. Confirmed subscriptions without a fresh explicit confirmation for 24 months no longer qualify for marketing and are eligible for removal. Sending marketing is not treated as fresh consent or activity extending retention. Unsubscribed identifying records are eligible for removal after 24 months, while minimal suppression and permanent unsubscribe-verification hashes are kept to prevent accidental re-mailing. Automatic removal depends on the retention option and a working scheduled-task runner. If WP-Cron is disabled, an external runner is required; a scheduled task alone is not proof of deletion. These statements concern the new newsletter module, not a claim that all existing order, enquiry or backup data is already automatically erased.

Customisation information, including a birthday if provided

The newsletter has no birthday field. If you separately provide a birthday or similar raw personalisation detail for a genuinely custom piece, it is intended only for that agreed customisation, not profiling or marketing. The intended retention policy is to delete that raw customisation detail within 90 days after fulfilment, subject to any specifically explained legal obligation. No birthday-collection or universal birthday-deletion feature is claimed to be installed; before introducing such collection, the operator must implement and verify this limited-use and deletion workflow.

Service providers and your choices

Hosting, payment, carrier and email service providers may process the information necessary for their service. The final provider identities and any relevant international-transfer arrangements must be disclosed before launch, including any SMTP provider later selected by the operator. Do not assume a delivery guarantee merely because a mail transport accepted a message. Contact support to ask about access, correction or deletion, or use the newsletter unsubscribe link to stop marketing. Information that must be retained for a clearly identified obligation should be explained rather than silently promised to be deleted.

Email-consent and unsubscribe principles follow the supplied ICO email-marketing guidance and FTC CAN-SPAM principles. They do not replace the operator's responsibility to provide accurate final identity, provider and operational disclosures.