Privacy policy

Privacy policy
Last updated: 20 October 2026

1. Controller
The controller is João Ribeiro, WiseCartShop, Route Principale 100, 1642 Sorens, Switzerland, shopsixshop@outlook.com. This policy is based on the Swiss Federal Act on Data Protection (FADP) and, for visitors and customers in the European Union and the EEA, on the General Data Protection Regulation (GDPR).

2. Data we collect
- Contact and delivery data: name, address, email, phone number (if provided).
- Order data: products, amounts, order history, communications with us.
- Payment data: processed directly by the payment providers; we do not store full card details.
- Technical data: IP address, browser, device, pages visited, collected through cookies.

3. Purposes and legal bases
- Processing and delivering orders, returns, refunds and customer service: performance of the contract (art. 6(1)(b) GDPR).
- Accounting and tax obligations: legal obligation (art. 6(1)(c) GDPR).
- Fraud prevention, website security and improvement: our legitimate interests (art. 6(1)(f) GDPR).
- Analytics and advertising cookies, newsletter: your consent (art. 6(1)(a) GDPR), which you may withdraw at any time.

4. Recipients
To fulfil your order, we share the necessary data with:
- Shopify (store hosting and order processing), located in Canada, Ireland and the United States;
- our payment providers (Shopify Payments / Stripe, PayPal and other methods offered at checkout);
- AutoDS (order management software);
- our suppliers and their carriers, mainly in China, who receive your name, delivery address and, where needed, phone number to ship your parcel.

5. Transfers abroad
Some recipients are located in countries that do not offer a level of data protection equivalent to Switzerland or the EU, in particular the United States and China. Transfers to the United States rely on the EU-US and Swiss-US Data Privacy Framework where the recipient is certified, or on standard contractual clauses. Transfers to our suppliers and carriers in China are necessary for the performance of the contract with you (art. 17(1)(b) FADP, art. 49(1)(b) GDPR).

6. Cookies
We use cookies that are necessary for the website to work (cart, checkout, security). For visitors from the European Union, analytics or advertising cookies are only used with your consent, which you give or refuse through the cookie banner and can change at any time. For visitors from Switzerland and Monaco, these cookies may be used without prior consent; you can object at any time by blocking or deleting cookies in your browser settings or by emailing us.

7. Retention
We keep your data as long as needed for the purposes above. Order and accounting records are kept for 10 years, as required by Swiss law.

8. Your rights
You may request access to your data, its correction or deletion, restrict or object to its processing, receive your data in a portable format and withdraw your consent at any time. Email shopsixshop@outlook.com. You may lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or with the supervisory authority of your country of residence, for example the CNIL (France), the Data Protection Authority (Belgium), the CNPD (Luxembourg) or the APDP (Monaco).

9. Changes
We may update this policy. The current version is always available on this page.