The party responsible for processing your personal data is:

SOFTS — Fiona Fisher
Geere 20
8572 Guntershausen bei Berg
Switzerland
Email: hello@softscollective.com

Our online store is hosted by Shopify. Shopify processes personal data to provide the store, checkout, payment and related commerce services. Depending on the processing activity, Shopify may act as our service provider or process data for its own legally defined purposes.

When you place an order or visit our website, we collect the following data:

• Contact details — name, email address, phone number
• Delivery address — street, postal code, city, country
• Payment data — payment method (full card details are processed directly by Shopify Payments)
• Order data — items purchased, order number, order history
• Usage data — IP address, browser type, pages visited, time spent
• Marketing preferences — whether and when you subscribed to or unsubscribed from our newsletter

We process personal data for the following purposes:

• Processing and shipping your order
• Communication regarding your order (confirmation, shipping info, returns)
• Compliance with legal retention obligations (e.g. accounting)
• Improving our website and shopping experience
• Sending newsletters and offers when you have given your consent
• Preventing fraud and maintaining the security of our store

Where the GDPR applies, processing is based, depending on the purpose, on performance of a contract, compliance with legal obligations, our legitimate interests in operating a secure and functional store, or your consent. We will not send newsletters or marketing emails without your consent, and you can withdraw that consent at any time using the unsubscribe link in every marketing email.

Your data is shared with service providers only to the extent necessary to operate the store, fulfil orders, provide support and deliver services you have requested:

• Shopify — platform operator (data storage, payment processing)
• Swiss Post (Die Schweizerische Post) — shipping provider for Swiss orders (name and delivery address)
• DHL — shipping provider for German orders (name and delivery address)
• UPS — shipping provider for orders to the rest of Europe and the UK (name and delivery address)
• Shopify Payments — payment processing
• Email and marketing providers — only where used to manage subscriptions and send messages you requested

We do not sell your contact details. Any optional analytics or advertising processing is governed by the privacy choices available in the store and the information provided there.

Shopify and other service providers may process personal data in Switzerland, the European Economic Area, Canada, the United States or other countries in which they or their service providers operate. Where data is transferred to a country without an officially recognised adequate level of data protection, appropriate safeguards are used where required, such as recognised standard contractual clauses.

We retain order, payment and accounting records for as long as required by applicable statutory retention obligations, generally up to 10 years. Customer service correspondence is retained only as long as needed to resolve the request and document relevant transactions. Newsletter data is retained until you unsubscribe or withdraw your consent, unless a longer period is necessary to document compliance with legal obligations. Technical and usage data is kept only for the period required for security, operation and the stated analytical purpose.

Our website uses cookies — small text files stored on your device. We use the following cookies:

• Essential cookies — for the shopping cart, session, and basic store functionality (no consent required)
• Analytics cookies — Shopify Analytics, to understand how visitors use our site (only with your consent)

You can disable cookies in your browser settings at any time. This may affect the functionality of the store.

You have the following rights regarding your personal data:

• Access — you can request information about what data we hold about you
• Correction — incorrect data will be corrected upon request
• Deletion — you can request deletion of your data, unless legal retention obligations apply
• Objection — you can object to the processing of your data
• Portability — you can receive your data in a common format
• Withdrawal of consent — you can withdraw consent at any time for future processing

These rights apply subject to the conditions and limitations of the law applicable to you. To exercise them, contact us by email. You may also lodge a complaint with the competent data protection authority.

For privacy-related questions, reach us here: