Privacy Policy

We respect your privacy and handle all personal data in accordance with the Swiss Data Protection Act (FADP) and, where applicable, the European General Data Protection Regulation (GDPR).

Controller: Lulu Amani by Kasper, Alexander Kasper Klarastrasse 2, 4600 Olten, Switzerland contact@luluamani.ch · +41 77 410 71 77

1. General

This statement explains what data we collect, the purposes for which we use it and the rights you have. Personal data is any information relating to an identifiable person.

2. What data we process

• Order data: name, delivery and billing address, email, phone number
• Payment data: processed exclusively by our payment provider (see section 4)
• Account details if you create a customer account
• Content from contact requests and newsletter sign-ups
• Technical data: IP address, browser type, time of access (server logs)
• Advertising click identifier: if you reach us via an ad, the platform appends an identifier to our page address. We store it only if you have consented to advertising purposes (see section 8)

3. Purposes of processing

We process your data to fulfil orders, to contact you, to meet legal obligations and to keep our shop secure and functional. We only process data where this is necessary for these purposes or where you have given your consent.

4. Payment processing

All payments are handled by our payment provider Stripe (Stripe Payments Europe, Ltd.). This applies to card payments, TWINT and prepayment by bank transfer. The data required for payment is transmitted directly to Stripe and processed there in line with their privacy terms. We do not store full card details ourselves.

5. Shipping

To deliver your order, we share the necessary address data with the contracted logistics partner (e.g. Swiss Post, DHL).

6. Hosting

Our shop runs on servers in Europe (Hetzner, located in Germany) and is deployed via Coolify. Server logs serve secure and stable operation and are stored only for a limited period.

7. Cookies and consent

We use technically necessary cookies and - only with your consent - analytics and marketing cookies. On your first visit you can choose in the cookie banner which categories to allow. Details are in our Cookie Policy.

8. Analytics and marketing

Cookieless reach measurement: to improve our shop, we measure page views with our own cookieless method. From your IP address and browser details we derive a daily-rotating, non-reversible hash to roughly distinguish visits; the IP address itself is not stored, and there is no cross-site tracking. Because no personal profiles are created, this measurement needs no consent.

Only with your consent do we additionally use:

• Google Analytics and Google Ads (Google Ireland Ltd.) for reach measurement and advertising
• Pixels from Meta (Instagram, Facebook) and TikTok to measure campaigns

Also only with your consent, we report certain events directly from our server to Meta Platforms Ireland Ltd. (known as the Conversions API) in order to measure the effect of our Instagram and Facebook advertising. What is transmitted: the event itself (page view, product view, item added to basket, checkout started, completed purchase including the amount), your IP address, details about your browser and - where present - the identifier of the ad click that brought you to us. On a purchase, additionally your email address, exclusively as a non-reversible hash value (SHA-256), so that Meta can attribute the purchase to an ad without receiving the address in plain text.

This transmission takes the same route as an advertising pixel, only from our server rather than from your browser. It does not take place at all unless you have consented, and it stops if you withdraw your consent. Meta is a joint controller for the further processing; this may involve a transfer to the USA, based on the EU standard contractual clauses and the EU-US Data Privacy Framework.

We use Google Search Console solely for the technical monitoring of our visibility; it does not set cookies on your device. You may withdraw your consent at any time with effect for the future - via the setting on our cookie policy.

9. Newsletter

If you subscribe to the newsletter, we process your email address to send it via our provider Resend. You can unsubscribe at any time using the link in each email.

10. Social media

We are present on Instagram and TikTok. When you visit our profiles, the privacy terms of the respective platform apply.

11. Retention

We store personal data only for as long as necessary for the stated purposes or as required by statutory retention periods (in particular ten years for business records).

12. Your rights

You have the right to access, rectification, erasure and restriction of the processing of your data, as well as the right to data portability. Please contact contact@luluamani.ch.

13. Data security

Transmission within the shop is encrypted via SSL/TLS. We take appropriate technical and organisational measures to protect your data.

14. Changes

We may update this privacy statement when legal requirements or our processing change. The version published here applies in each case.