Privacy policy
1. Controller. SYSTEM SCHMID, David Valentin Schmid, Hauptstrasse 10, 8476 Unterstammheim, Switzerland, hi@sincecaps.com. This policy follows the Swiss Federal Act on Data Protection (revFADP). For customers in the EU/EEA, the GDPR applies where relevant.
2. What we process. Order data (name, shipping address, email, purchased items), payment data (processed by our payment providers, we never see full card numbers), newsletter subscription (email, only if you sign up), and technical logs (IP address, device information) for security and operation of the shop.
3. Why. To fulfil your order, produce and ship your cap, process payment, answer support requests, send the newsletter you asked for, and comply with legal obligations such as accounting.
4. Who we share data with. Shopify (shop platform and hosting), Printful (production and shipping of your order), payment providers, shipping carriers, Google (analytics, see section 7) and Meta (advertising measurement, see section 7). These providers process data partly outside Switzerland and the EU; safeguards such as recognised contractual clauses are in place. We do not sell personal data. Ever.
5. Retention. We keep data as long as needed for the purposes above and as long as statutory retention duties require (in Switzerland, generally 10 years for business records). Then it goes.
6. Cookies. The shop uses cookies necessary for its operation (cart, checkout, language), Shopify's basic analytics, and, where you consent, analytics and advertising cookies as described in section 7. In the EU/EEA, the UK and Switzerland, a cookie banner asks for your consent before non-essential cookies are set. You can change your decision at any time via the banner settings.
7. Analytics and advertising. We use Google Analytics 4 to understand how the shop is used, and Meta tools (Meta Pixel and Conversions API) to measure and improve our advertising on Instagram and Facebook. These tools receive technical data about your visit, such as pages viewed, device information and approximate location, and, in the case of a purchase, the order value and hashed contact data. These tools only run after your consent via the cookie banner, in Switzerland as well as in the EU/EEA and the UK. You can change your choice at any time via the banner settings or by writing to hi@sincecaps.com. Google and Meta may transfer data to the United States; both are certified under the Swiss-US and EU-US Data Privacy Frameworks.
8. Your rights. You can request access to your data, correction, deletion, and object to processing. Newsletter emails contain an unsubscribe link. Contact hi@sincecaps.com. EU/EEA customers may additionally complain to their supervisory authority.
9. Changes. We update this policy when the shop or the law changes. The current version is always here, on the record.