Data Protection

Data protection

Privacy Policy

The protection of your personal data is important to us. In this privacy policy, we inform you about which personal data is processed when using our website and our online shop, for what purposes this occurs, and what rights you have.

Responsible entity

The entity responsible for processing personal data is:

ALTA Beauty
Sole proprietorship
Langernweg 93
4665 Oftringen
Switzerland

Email: support@alta-beauty.com
Website: alta-beauty.com

What data we process

We may process particularly the following personal data:

First and last name
Billing and delivery address
Email address
Phone number, if provided
Order information
Payment information
Information about purchased products
IP address
Device and browser information
Usage data of our website
Communication with our customer service

Purpose of data processing

We process personal data particularly for the following purposes:

Provision and operation of our online shop
Processing and delivery of orders
Payment processing
Communication with customers
Customer service, returns, and complaints
Fraud prevention and security
Improvement of our website and our offerings
Fulfillment of legal obligations
Marketing and newsletters, provided consent is given or this is legally permitted

Orders and shipping

When you place an order, we use your information to process your order, deliver the products, and communicate about your order.

For delivery, necessary personal data may be shared with shipping service providers, fulfillment partners, or suppliers. This includes, in particular, name, delivery address, email address, phone number, and order data, as far as necessary for delivery.

Payment processing

Payments are processed through secure payment providers, such as Shopify Payments, PayPal, Shop Pay, Apple Pay, or Google Pay, if these are available at checkout.

ALTA Beauty does not store complete credit card or payment data. Payment processing is carried out by the respective payment providers according to their own privacy policies.

Shopify

Our online shop is operated through Shopify. Shopify provides the technical e-commerce platform through which we sell our products.

As part of the shop operation, personal data may be processed by Shopify and stored on Shopify's servers or those of connected service providers.

Cookies and similar technologies

Our website uses cookies and similar technologies. These may be necessary for the online shop to function correctly, for example, for the shopping cart, checkout, language settings, or security.

Furthermore, cookies and similar technologies may be used to analyze the use of our website, provide functions, and improve our offerings.

You can restrict or disable cookies in your browser. This may limit certain functions of the website.

Analysis and marketing

We may use analysis and marketing services to better understand the use of our website, improve our offerings, and display advertisements.

This may include, for example, IP address, device information, browser data, visited pages, purchasing behavior, or interactions with advertisements.

You will only receive newsletters or marketing emails if you have signed up for them or if this is legally permitted. You can unsubscribe at any time using the unsubscribe link in the email.

Data sharing with third parties

Personal data may be shared with the following recipients, as necessary for the stated purposes:

Shopify as the shop platform
Payment providers
Shipping service providers
Fulfillment partners and suppliers
IT and hosting service providers
Analysis and marketing providers
Authorities, if there is a legal obligation

Data will only be shared to the extent necessary for contract processing, operation of the shop, fulfillment of legal obligations, or based on legitimate interests.

Data transfer abroad

In the context of using Shopify, payment providers, shipping service providers, or other service providers, personal data may also be transmitted to countries outside of Switzerland or the European Economic Area.

We ensure that an adequate level of data protection or appropriate protective measures are in place, as legally required.

Retention period

We store personal data only as long as necessary for the stated purposes or as required by legal retention obligations.

Order, billing, and accounting data may be retained longer due to legal obligations.

Data security

We take appropriate technical and organizational measures to protect personal data from loss, misuse, unauthorized access, or unauthorized disclosure.

The transfer of sensitive data will be encrypted whenever possible.