Privacy Policy

When you contact us, book an appointment, or make a purchase, we may collect:

• —Name, phone number, and email address
• —Mailing address (for shipping or appraisal documents)
• —Purchase history and repair/job records
• —Appointment dates and preferences
• —Government-issued ID for high-value cash transactions as required by federal law (IRS Form 8300)

We collect only what we need to serve you. We do not collect payment card data (handled directly by our payment processor).

We use your information to:

• —Fulfill your order, repair, or custom design request
• —Send appointment confirmations and status updates on your piece
• —Issue invoices and process payments
• —Send marketing messages about events, promotions, and new arrivals (only with your explicit consent)
• —Comply with federal and Ohio legal requirements

If you provide your phone number and opt in to text messages, we may send you:

• —Job status updates (your repair or custom piece is ready)
• —Appointment confirmations and reminders
• —Payment reminders for outstanding balances
• —Marketing messages about events, promotions, and new arrivals (only with your explicit consent)

Message frequency varies. Message and data rates may apply.

Reply STOP to any text message from us. You can also call us at (614) 321-3550 to request removal. We process all opt-out requests immediately and will not send further messages to your number.

This website uses only session-level cookies necessary for cart functionality and appointment booking. We do not use tracking cookies, advertising cookies, or third-party analytics that identify you personally. No cookie consent banner is required because we do not set non-essential cookies.

We use the following third-party services to operate this site:

• —Cloudflare. website hosting, edge delivery, and DDoS protection. Traffic passes through Cloudflare's network.
• —Helcim. payment processing. Card data is handled directly by Helcim and never touches our servers.
• —Twilio. SMS delivery for appointment reminders and status updates.

We do not sell your data to any third party. These services receive only what is needed to perform their function.

Customer phone numbers and email addresses are encrypted at rest using AES-256-GCM. We do not sell, share, or rent your personal information to third parties. Staff access to your information is role-gated and logged.

We retain customer records for the duration of our business relationship. Financial transaction records are retained for 5 years as required by IRS regulations. You may request deletion of your personal data at any time by contacting us.

You have the right to:

• —Access the personal data we hold about you
• —Correct inaccurate information
• —Request deletion of your personal data (subject to legal retention requirements)
• —Opt out of marketing communications at any time
• —Receive a copy of your data in a portable format

To exercise any of these rights, contact us at info@krystydesigns.com. We will respond within 30 days. Ohio residents may also contact the Ohio Attorney General with concerns.