Privacy Policy

Privacy Policy

This Privacy Policy explains how Crystal Development processes personal data in connection with the website crystalstonepen.click and related personal development course services.

Terms of ServiceContact
Effective Date
As stated in this policy
Scope
All users of our services
Questions?
Contact
User Rights

Your Rights

Subject to applicable law, users may have rights to access their personal data, request correction of inaccurate information, request deletion, object to certain processing, and request restriction of processing. Where processing is based on consent, users may withdraw consent for future processing.

Available rights may vary depending on the legal basis and the user’s location.
Requests

How to Make a Request

To exercise a privacy right, users should provide enough information for us to identify the relevant data and assess the request. We may ask for additional details to verify identity or clarify the scope of the request. If a request cannot be fulfilled, we will explain the reason where permitted by law.

Requests are reviewed for identity, scope, and legal validity before a response is issued.
Data Retention

Data Retention

Retention periods depend on the type of data, the purpose for which it was collected, and any legal or accounting obligations that apply. When data is no longer needed, we delete it, anonymize it, or retain it only as required for dispute handling, security, or compliance.

We keep data only for as long as needed for the stated purpose or for legal and operational reasons.
Policy Updates

Policy Changes

When we make material changes, we will update the policy on the website and may provide additional notice where appropriate. The date of the latest revision should be reviewed periodically by users.

We may revise this policy to reflect legal, technical, or operational changes.
GDPR
Regulation

GDPR Overview

For GDPR purposes, Crystal Development acts as a controller for the personal data it determines the purposes and means of processing. We rely on lawful bases such as consent, performance of a contract, compliance with legal obligations, and legitimate interests where appropriate.

Regulation
Where the GDPR applies, it governs our processing of personal data of individuals located in the European Economic Area in connection with this website and related services.
Regulation General Data Protection Regulation (GDPR) - EUR-Lex
Supervisory Authority Comissão Nacional de Proteção de Dados (CNPD)
This section is intended for users whose data is protected by the GDPR.
GDPR Rights Protected

GDPR Rights

Where the GDPR applies, individuals may have the right to access, rectify, erase, restrict, or object to processing, and to request data portability in appropriate cases. Where processing is based on consent, consent may be withdrawn at any time without affecting prior processing. Individuals may also lodge a complaint with a competent supervisory authority.

The rights described below apply subject to the conditions and limits set by law.
Privacy Contact

Contact Information

Privacy email
help@crystalstonepen.click
Telephone
+351 912 350 815
Mailing address
Rua Doutor Francisco Vieira e Brito 78, 4830 Póvoa de Lanhoso
Privacy inquiries
Contact Page

Use the contact details below for questions about this policy or the handling of personal data.

Contact Page
Data category

Data We Collect

We may process identifiers and contact details, account or course registration information, payment-related records where applicable, communications sent to us, technical data such as device and browser information, and usage data showing how the site and course materials are accessed. We do not seek to collect special categories of personal data unless a user chooses to provide such information in a message or form.

The categories collected depend on how the site is used and which services are requested.
Collection source

How We Collect Data

We collect personal data when users submit forms, create an account, enroll in or inquire about courses, communicate with us, or otherwise interact with the website. We also receive limited technical data automatically through the operation of the site, including through cookies and similar technologies, and may receive information from payment, hosting, analytics, or security providers as part of service delivery.

Information may come directly from users, from site interactions, or from service providers acting on our behalf.
Cookie type

Types of Cookies

The site may use essential cookies needed for security, navigation, and core functionality. It may also use preference cookies to remember settings and analytics cookies to understand general site use and improve course-related content. Cookies may be session-based or persistent, depending on their purpose and lifespan.

We use cookies that support site operation, remember preferences, and measure basic performance.
User control

Cookie Controls

We use standard cookie controls to manage non-essential cookies where required. Users can block or delete cookies through browser settings, and some browsers allow preferences to be set for specific sites. If cookies are disabled, certain features may not function as intended.

Cookie preferences can usually be adjusted in the browser and, where available, through site controls.
01

Purposes of Processing

We use personal data to provide and administer course access, respond to inquiries, manage accounts and transactions, maintain site security, monitor performance, improve content and user experience, comply with legal obligations, and handle disputes or enforcement matters. Where required, we also use data to manage consent choices and cookie settings.

Processing is limited to purposes that are relevant to operating the website and delivering the services.
02

Service Providers

We may share personal data with hosting, analytics, payment, communication, security, and other operational providers that support the website and course services. These parties act under instructions or contractual arrangements intended to limit use of the data to the services they provide.

Service providers receive only the information needed to perform their assigned functions.
03

Legal Disclosure

We may disclose personal data where required to comply with law, lawful requests, court orders, or regulatory obligations. We may also share information when necessary to establish, exercise, or defend legal claims, or to protect the rights, property, or safety of Crystal Development, users, or others.

Disclosure may be necessary to meet legal duties or to protect rights and security.