Privacy policy

Who is responsible

Ariashop runs this online shop and is responsible for the processing of your personal data described on this page.

For any question about your data, write to contact@ariashop.ch

What data we process

• Orders: your email address, name and shipping address, the items, the amounts and how you paid.
• Customer account (optional): your email address, your password (stored only in scrambled form), your language and the addresses you save.
• Visits: as on most websites, the server records technical information such as your IP address, the page requested and the time, for security and to keep the shop running.

Why we process it

We use your data to handle your order: to confirm it, receive your payment, ship your items and answer your questions. We email you about your order, for example when it is confirmed, paid and shipped.

We do not send newsletters or advertising, and we never sell your data.

Cookies

The shop only uses the cookies it needs to work: a session cookie that keeps your cart, your language and your login, and a security cookie that protects forms against misuse. They expire after a short time. There is no analytics, tracking or advertising.

Who receives your data

• Our hosting provider runs the servers that hold the shop and its database and send our emails. These servers may be located outside Switzerland, including in the USA.
• If you pay with PayPal, we send PayPal your name, your shipping address, the items and the amount of your order, so that you can pay and the payment is recorded with the address we ship to. PayPal processes this data under its own privacy statement. We never see your PayPal login or card details; we keep only PayPal’s reference for the payment.
• Swiss Post receives your name and address to deliver your parcel. For deliveries abroad, the customs declaration is shared with the customs authorities.

We do not pass your data to anyone else unless the law requires us to.

How we protect it

The shop is only reachable over an encrypted connection (HTTPS). Addresses are stored encrypted. Only Ariashop has access to the back office, which is protected by a password and a second factor.

How long we keep it

• Orders, including the shipping address, are deleted 12 months after they were placed.
• Accounts whose email address was never confirmed are deleted after 7 days.
• You can delete your account at any time in your account settings. Its personal data is then removed; orders you placed are kept until their 12 months are over.
• Backups are kept for 14 days.

Your rights

You can ask which data we hold about you, have it corrected or deleted, and object to its processing, within the limits of the Swiss Federal Act on Data Protection and, where it applies, the EU General Data Protection Regulation. You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EU, to the supervisory authority of your country.

To use your rights, write to contact@ariashop.ch