Privacy Policy
This Privacy Policy explains how we collect and use personal data when you visit curate.ch or buy from us. It is intended to meet transparency duties under the revised Swiss Federal Act on Data Protection (“nFADP”, SR 235.1). Last updated: 8 May 2026.
1. Controller
The controller responsible for processing personal data in connection with this Shop is the legal entity named in our Impressum. For day-to-day privacy requests you may contact:
curatech.supportline@gmail.com
2. Categories of data
Depending on how you use the Shop, we may process: master and contact data (name, delivery address, email, phone), account and authentication data if you create a profile, order and payment metadata (items purchased, amounts, currency, fraud-prevention signals), technical usage data (IP address, device type, approximate region from IP, cookies and similar technologies), and communications you send to support.
3. Purposes & legal bases
We process data to perform contracts (process orders, payments, delivery, returns), to secure and improve the Shop (IT security, analytics where permitted, troubleshooting), to comply with legal obligations (tax, accounting, product-safety traceability), and—where allowed under Swiss law—for direct marketing about similar goods (you may opt out at any time via the unsubscribe link in emails).
Where we rely on consent (for example optional newsletters), you may withdraw consent without affecting processing that occurred before withdrawal.
4. Recipients & processors
We share data with service providers strictly as needed to operate the Shop. Typical categories include payment processors (for example Stripe), authentication and customer-account providers (for example Clerk), hosting and database providers, email delivery services, logistics partners, and IT support. They process data on documented instructions and may not use it for their own marketing.
If personal data is disclosed outside Switzerland, we apply the safeguards required under the nFADP (for example adequacy decisions, standard contractual clauses, or exceptions for contract performance).
5. Retention
We keep order and accounting records for as long as Swiss tax and commercial law requires (commonly up to ten years for VAT-relevant documents unless a shorter period applies).
Marketing data is kept until you unsubscribe or object, and technical logs are rotated on a rolling basis unless longer retention is justified for security investigations.
6. Cookies & similar technologies
We use cookies and similar technologies that are technically necessary for login, checkout, cart, and security, as well as—where you agree—analytics or preference cookies if we offer them in a consent banner.
You can control cookies through your browser settings; disabling strictly necessary cookies may prevent checkout from functioning.
7. Your rights
Under the nFADP you may have the right to access, rectification, erasure, restriction of processing, data portability (where technically feasible), objection to certain processing, and withdrawal of consent. You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, Switzerland (www.edoeb.admin.ch).
8. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or alteration. No online transmission is completely risk-free; please use strong passwords and protect your devices.
9. Changes
We may update this Privacy Policy when our processing changes or law evolves. Material changes will be posted here with a new “last updated” date.