This Privacy Policy explains how Craftgems OÜ, trading as Ardor Rituals (“we”, “us”, or “our”), collects, uses, and protects your personal data when you visit our website, place an order, book a consultation, or use the Ardor Rituals mobile application. We are the data controller responsible for your personal data.
1. Who we are
- Legal entity: Craftgems OÜ (a private limited company registered in Estonia)
- Registry code: 17004098
- VAT number: EE102839302
- Registered address: Ahtri tn 12, Kesklinna linnaosa, Tallinn, Harju maakond, 15551, Estonia
- Contact: contact@ardorituals.com
2. Information we collect
We collect the following categories of personal data:
- Identity & contact data — your name, email address, and (where provided) phone number and delivery address.
- Consultation & personalization data — information you provide for personalized talismans and consultations, which may include your date of birth and the intentions or focus areas you share with us.
- Order & payment data — products purchased, order history, gift card and promo-code usage. Card payments are processed securely by our payment provider; we do not store full card numbers.
- Communications — messages, inquiries, and support requests you send us.
- Technical & usage data — IP address, device and browser information, pages viewed, and interactions with our website, collected via cookies and similar technologies (see Section 8).
3. How we use your data
- To process and fulfil your orders and deliver our products and services.
- To create and personalize your talismans, consultations, and app experience.
- To manage your account and access to the Ardor Rituals mobile app.
- To respond to your inquiries and provide customer support.
- To improve our website and services, and to measure and analyze performance.
- To send you marketing communications where you have consented, and to comply with our legal obligations.
4. Legal bases for processing (GDPR)
We rely on the following legal bases under the EU General Data Protection Regulation:
- Performance of a contract — to process orders, deliver products, and provide services you request.
- Consent — for marketing communications and non-essential cookies/analytics. You may withdraw consent at any time.
- Legitimate interests — to operate, secure, and improve our business, where not overridden by your rights.
- Legal obligation — to meet accounting, tax, and consumer law requirements.
5. Sharing your data
We do not sell your personal data. We share it only with trusted service providers (processors) who help us operate, including:
- Stripe — payment processing.
- Google Analytics — website analytics.
- Microsoft Clarity — usage analytics, including session recordings and heatmaps.
- Meta (Facebook) Pixel — advertising measurement and audience analytics.
- Hosting, email, and infrastructure providers necessary to run our website, app, and communications.
We may also disclose data where required by law or to protect our legal rights.
6. International transfers
Some of our providers are located outside the European Economic Area (EEA). Where data is transferred outside the EEA, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.
7. Data retention
We keep your personal data only for as long as necessary for the purposes described in this policy, including to satisfy legal, accounting, or reporting requirements. Order and invoice records are retained for the period required by Estonian accounting law.
8. Cookies & analytics
We use essential cookies to operate the website and, with your consent, analytics and advertising cookies (Google Analytics, Microsoft Clarity, Meta Pixel) to understand how our site is used and to improve it. You can control cookies through your browser settings and, where offered, our cookie controls.
9. Your rights
Under the GDPR, you have the right to:
- access the personal data we hold about you;
- request correction of inaccurate data;
- request erasure of your data;
- restrict or object to processing;
- data portability;
- withdraw consent at any time; and
- lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee).
To exercise any of these rights, contact us at contact@ardorituals.com.
10. Children
Our products and services are not directed at children under 16, and we do not knowingly collect their personal data.
11. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date above reflects the most recent revision. Material changes will be communicated where appropriate.
12. Contact us
For any privacy questions or requests, contact Craftgems OÜ at contact@ardorituals.com or by post at Ahtri tn 12, 15551 Tallinn, Estonia.