Privacy Policy
Last updated 6 October 2026.
This policy explains what personal data Frost & Facets collects, why, and what you can do about it. Frost & Facets is the data controller and is registered in Switzerland.
What we collect
- Order data: your name, delivery address, billing address, email address and phone number, collected when you place an order so that we can fulfil and deliver it.
- Account data: your email address and password hash, if you choose to create an account.
- Payment data: processed by our payment providers. We never see or store your full card number.
- Device and usage data: IP address, browser type, pages viewed and referring site, collected automatically through cookies for analytics and fraud prevention.
- Correspondence: anything you send us by email, kept so that we have a record of your enquiry.
Why we use it
- To process, fulfil and deliver your order, and to handle returns. Legal basis: performance of a contract.
- To answer your enquiries and provide support. Legal basis: performance of a contract or legitimate interest.
- To detect and prevent fraud and abuse. Legal basis: legitimate interest.
- To comply with tax, accounting and consumer law obligations. Legal basis: legal obligation.
- To send marketing email, only where you have opted in. Legal basis: consent, which you can withdraw at any time.
We do not sell your personal data and we do not share it with third parties for their own marketing purposes.
Who we share it with
We share data only with processors who need it to run the store:
- Shopify, which hosts this store and processes orders on our behalf.
- Payment providers, which process your payment and carry out fraud screening.
- Shipping carriers and fulfilment partners, which receive your name, address and phone number in order to deliver your parcel.
- Email and analytics providers, which process your email address and usage data on our instruction.
Some of these providers operate outside Switzerland and the European Economic Area. Where that is the case, transfers are made under Standard Contractual Clauses or an equivalent safeguard.
How long we keep it
Order and invoice records are retained for 10 years to meet Swiss accounting requirements. Account data is retained until you ask us to delete the account. Marketing consent records are retained until you unsubscribe plus two years. Analytics data is retained for 26 months.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or transfer it to another provider. You can object to processing based on legitimate interest, and you can withdraw marketing consent at any time using the unsubscribe link in any email.
Email frostandfacets@gmail.com to exercise any of these rights. We will respond within 30 days. We may ask you to confirm your identity first so that we do not disclose your data to someone else.
If you are in the European Economic Area or the United Kingdom you also have the right to complain to your national data protection authority. If you are in Switzerland you may complain to the Federal Data Protection and Information Commissioner.
Cookies
This store uses cookies that are strictly necessary for the cart, checkout and security to function, and analytics cookies that help us understand which pages are used. You can block or delete cookies in your browser settings, though the cart and checkout will not work correctly without the necessary ones.
Children
This store is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has provided us with personal data, email us and we will delete it.
Changes
If we change this policy we will update the date at the top. Material changes affecting how we use your data will be notified by email where we hold your address.
Contact
Frost & Facets, registered in Switzerland. Email frostandfacets@gmail.com.