Privacy policy

Last updated: October 2026

1. Controller

The controller responsible for processing your personal data on IgnisLumina.ch is:
Mateusz Szafruga Handel & Dienstleistungen (sole proprietorship), operator of IgnisLumina.ch
Schutzengelstrasse 4A, 6340 Baar, Switzerland
UID: CHE-288.997.245
Email: info@ignislumina.ch · Phone/WhatsApp: +41 79 335 46 77

This privacy policy is based on the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies in an individual case, we base processing on the performance of a contract (Art. 6(1)(b) GDPR), legal obligations (lit. c), our legitimate interest in a secure and functioning shop (lit. f) or your consent (lit. a).

2. What data we process

  • Contact and order data: name, delivery and billing address, email address, phone number, items ordered, prices and order history.
  • Payment data: payment method, payment status and transaction details. Full card details are processed exclusively by the respective payment provider; we do not receive them.
  • Communication: the content of your enquiries by email, contact form or WhatsApp.
  • Customer account: if you open an account, your login details and account settings.
  • Technical and usage data: IP address, device and browser information, pages visited and times, cart actions.

3. Purposes of processing

  • Processing your order: conclusion of the contract, payment, delivery, returns, warranty and customer service.
  • Answering your enquiries and advising you.
  • Complying with legal obligations, in particular accounting and VAT.
  • Security of the shop and prevention of fraud and misuse.
  • With your consent: web analytics, measuring the effectiveness of our advertising, and the newsletter (see below).

We do not make automated individual decisions that have legal effects on you or significantly affect you.

4. Shop platform, payment and shipping

Shopify: Our shop runs on the Shopify platform (contracting party for merchants in Europe: Shopify International Limited, Ireland). Shopify processes shop, order and checkout data on our behalf. For certain features of its own (e.g. Shop Pay or the Shop app, if you use them), Shopify is itself responsible; more information is available at privacy.shopify.com.

Payment providers: Payments are handled by the payment providers you choose at checkout (e.g. Shopify Payments and its partners, or PayPal). They receive the data required for the payment and process some of it under their own responsibility.

Delivery: For delivery we pass your name, delivery address, phone number and email address to our supplier and the commissioned carrier so that the delivery can be scheduled and made.

5. Cookies and consent

We always set technically necessary cookies (e.g. for the cart, checkout, language setting and security), as the shop cannot work without them. We only use cookies and similar technologies for analytics and marketing if you agree in the cookie banner. You can change or withdraw your choice at any time via the “Cookie settings” link in the footer of every page. Withdrawal applies to the future.

6. Google Analytics 4

With your consent to analytics cookies, we use Google Analytics 4 (GA4), a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We measure visits and e-commerce events such as product views, cart actions and purchases in order to analyse and improve our shop.

Pseudonymous identifiers, technical information on device and browser, pages visited and product information are processed; for purchases, transaction value, currency and transaction ID may be transmitted. We do not transmit names, email addresses or addresses in our standard measurement. Pseudonymisation does not mean complete anonymity. Data is retained in GA4 for 14 months.

We currently do not use GA4 for remarketing or personalised advertising; Google Signals and enhanced conversions are not enabled. In addition to the cookie settings, you can use the browser add-on to opt out of Google Analytics.

7. Meta Pixel (Facebook and Instagram)

With your consent to marketing cookies, we use the Meta Pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. It allows us to measure whether our ads on Facebook and Instagram lead to visits and purchases in our shop, and to show ads to people who have visited our shop. In particular, your IP address, browser and device information, pages visited and events such as product views, cart actions and purchases are transmitted to Meta. If you are logged in to Facebook or Instagram, Meta may link this information to your account.

We and Meta are jointly responsible for the collection and transmission to Meta; Meta alone is responsible for further processing. More information is available in Meta’s privacy policy. Without your consent, the Meta Pixel is not used for these purposes.

8. Google services for product data and advertising

We transmit product data (e.g. name, price, availability, images) to Google so that our products can appear in Google services; no personal data of our customers is transmitted in the process. If we advertise via Google, we measure its success only with your consent to marketing cookies.

9. Contact by email, contact form and WhatsApp

When you contact us, we process your details in order to answer your enquiry. For WhatsApp, Meta’s privacy terms (WhatsApp Ireland Limited) also apply. If you do not want this, please write to us by email.

10. Newsletter

If you subscribe to our newsletter, we use your email address to send you information about new models and offers. You can unsubscribe at any time via the link in every email.

10a. Reviews, chat and shop administration

Reviews: After an order we may ask you by email to leave a review. For this we use Judge.me (Judge.me Ltd, London, United Kingdom), which processes your name, email address, the product ordered and your review on our behalf. Published reviews show your first name or initials. You can object to review requests at any time and have a review deleted.

Chat: If you write to us via the chat in our shop (Shopify Inbox), Shopify processes the messages on our behalf (see section 4).

Shopping via AI assistants: If you discover our products via AI assistants (e.g. ChatGPT or Microsoft Copilot) or order there, the privacy terms of their providers also apply to their processing; we handle the order and payment via Shopify.

Shop administration: To manage the shop (e.g. products, prices, analyses) we also use AI-supported tools (Claude by Anthropic and ChatGPT by OpenAI). In individual cases these may access order data; such data is processed only for managing the shop and is not used for advertising.

11. Fonts

The fonts used on this website are loaded from our own shop server. No data is transmitted to Google or other font providers.

12. Processing abroad

We use service providers who also process personal data outside Switzerland:

  • Shopify (shop hosting, checkout, order processing): Canada, Ireland, USA
  • Payment providers (e.g. Shopify Payments and its partners, PayPal): EU (incl. Ireland, Luxembourg) and USA
  • Our supplier and the carrier (shipping and delivery): Poland (EU)
  • Google, if you consent to analytics or marketing cookies: Ireland and USA
  • Meta Platforms, if you consent to marketing cookies or contact us via WhatsApp: Ireland and USA
  • Judge.me (reviews): United Kingdom; some of Judge.me’s service providers also in other countries
  • Anthropic and OpenAI (AI tools for shop administration): USA
  • Providers of AI assistants (e.g. OpenAI, Microsoft), if you shop through them: USA

In the assessment of the Swiss Federal Council, the EU states, the United Kingdom and Canada provide an adequate level of data protection. For transfers to the USA we rely on the Swiss-U.S. Data Privacy Framework where the recipient is certified, and otherwise on the European Commission’s standard contractual clauses as recognised by the Federal Data Protection and Information Commissioner (FDPIC).

13. Retention

We keep personal data only as long as necessary for the purposes stated. We retain order and invoice data for the statutory retention period of ten years (Art. 958f of the Swiss Code of Obligations). Enquiries without an order are deleted once they have been dealt with and no retention obligation applies. Analytics data in GA4 is deleted after 14 months.

14. Data security

Our shop is encrypted throughout (HTTPS). We and our service providers take appropriate technical and organisational measures to protect your data against loss and unauthorised access. However, no one can guarantee absolute security for transmission over the internet.

15. Your rights

Under the FADP you have in particular the right to access your personal data, to have incorrect data corrected, to erasure, to object to certain processing, and to receive or transfer your data in a common electronic format. You can withdraw any consent given at any time with effect for the future. Where the GDPR applies, you have the corresponding rights under Art. 15–21 GDPR.

An email to info@ignislumina.ch is sufficient for requests. We may ask for proof of identity before providing information. You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch; where the GDPR applies, also with the data protection authority of your country of residence.

16. Minors

Our offer is aimed at adults. We do not knowingly process personal data of children. If, as a parent, you become aware that a child has sent us data, please contact us and we will delete it.

17. Changes

We may amend this privacy policy, for example when we use new services or the legal situation changes. The version published on this website applies.