Privacy
Privacy
What this site collects, why, and who sees it.
Last updated 12 November 2026.
Who we are
This notice covers parishes.crossandcrownjewelry.com, the Cross & Crown parish partner site. Cross & Crown, 119 W Garro St, Plymouth, IN 46563. For any question or request about your details, write to info@crossandcrownjewelry.com. Shopping at crossandcrownjewelry.com is covered by the store's own policies, not this notice.
What we collect, and why
- The application form: the parish's name, city, state and diocese; your name, role, email address and phone number; the code you'd like; and your message. We use them to review the application, confirm it with the pastor or parish office, set up the parish's code and write to you about the partnership.
- The contact form: your name, email address, parish and message, so that we can answer you. Messages are kept on this site and forwarded to our inbox.
- Parish accounts: the name and email address of each person at a partner parish who signs in. Passwords are stored only as a one-way hash (scrypt), never as the password itself. Set-password and reset links are also stored only as hashes, and they expire. We record when each person last signed in.
- Security records: when someone signs in, fails to sign in or asks for a password reset, we record the time, the email address entered and the internet (IP) address it came from, to protect accounts from misuse. Like most websites, our server also keeps technical logs of requests.
- Paying the parish: the name payments are made out to, how the parish is paid, and the W-9 the parish sends us, which we keep for tax records. We never ask for or store bank details; where a payment service is used, it collects them itself.
- Parish contact details: to invite parishes to the program, we keep the details parishes publish themselves, such as the office address, phone number, email address, website and the pastor's name. Reply "remove" to any email from us and we won't write again.
Parishioners' privacy
When parishioners shop with a parish code, their personal details are never shared with the parish. The parish's dashboard and statements show order numbers, dates and amounts only: never a customer's name, address, email address or phone number.
Who sees your details
Only Cross & Crown. We do not sell personal data, and we do not share it with advertisers. People with an account at a parish see that parish's dashboard and no other. We use a small number of service providers, such as our web host and email service, only to run this site and send its email.
Cookies
We set only the cookies this site needs: one that keeps you signed in, and short-lived ones that protect the sign-in forms. There are no advertising or analytics cookies, and our emails carry no tracking.
Keeping and deleting
We keep partnership records, including statements and payments, for as long as tax and accounting rules require. To see, correct or delete your details, write to info@crossandcrownjewelry.com. We will do so unless the law requires us to keep them.
Changes
If this notice changes, we will update this page and the date above.