Privacy policy
Privacy Policy
Last updated: July 2026
This Privacy Policy describes how noosh.studio ("we", "us", "our"), collects, uses, and discloses your Personal Information when you visit or make a purchase from www.noosh.studio (the "Site").
Who is responsible
noosh.studio is a Swiss sole proprietorship (Einzelfirma) operated by S. Dietsche. For any questions about this Privacy Policy or your data, you can reach us at hello@noosh.studio.
Collecting Personal Information
When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support.
Device information
- Examples of Personal Information collected: browser version, IP address, time zone, cookie information, pages and products viewed, search terms, and how you interact with the Site.
- Purpose of collection: to load the Site correctly, and to analyse Site usage so we can improve it.
- Source of collection: collected automatically via cookies, log files, and similar tracking technologies when you access the Site.
- Disclosure for a business purpose: shared with our processor Shopify, and with Google (Google Analytics) and Meta (Meta Pixel), see "Behavioural Advertising" below.
Order information
- Examples of Personal Information collected: name, billing address, shipping address, payment information, email address, and phone number.
- Purpose of collection: to fulfil our contract with you, process payment, arrange shipping, provide invoices and order confirmations, communicate with you, screen orders for fraud, and, where you have agreed, send you information about our products.
- Source of collection: collected directly from you.
- Disclosure for a business purpose: shared with our processor Shopify and our payment providers. Payment card details are processed directly by Shopify Payments and are never stored by us in full.
Customer support information
- Examples of Personal Information collected: your name, contact details, and the content of your correspondence with us.
- Purpose of collection: to provide customer support and process returns.
- Source of collection: collected directly from you.
- Disclosure for a business purpose: not shared with third parties beyond our processor Shopify, except where required by law.
Sharing Personal Information
We share your Personal Information with service providers to help us provide our services, as described above. For example:
- We use Shopify to power our online store. You can read more here: shopify.com/legal/privacy.
- We may share Personal Information to comply with applicable laws and regulations, to respond to a lawful request for information, or to otherwise protect our rights.
We do not sell Personal Information to third parties.
Behavioural Advertising
We use your Personal Information to show you advertisements or marketing we believe may be relevant to you. Specifically:
- We use Google Analytics to understand how visitors use the Site. Read more: policies.google.com/privacy. You can opt out here: tools.google.com/dlpage/gaoptout.
- We use Meta Pixel (Facebook/Instagram) to measure the effectiveness of our advertising and to show you relevant ads on Meta platforms. Read more: Meta's Privacy Policy.
For more on how targeted advertising works generally, see the Network Advertising Initiative: networkadvertising.org.
You can opt out of targeted advertising via:
- Meta/Facebook: facebook.com/settings/?tab=ads
- Google: google.com/settings/ads/anonymous
- The Digital Advertising Alliance's opt-out portal: optout.aboutads.info
Note: at the time of writing, Google Analytics and Meta Pixel are being integrated into the Site. This section will remain accurate once they are live.
Switzerland: your rights under the nDSG
As a Swiss business, we process your Personal Information in accordance with the Swiss Federal Act on Data Protection (nDSG/FADP). If you are located in Switzerland, you have the right to:
- request access to the Personal Information we hold about you,
- request correction of inaccurate data,
- request deletion of your data, subject to our legal retention obligations (see "Retention" below),
- object to certain processing of your data, and
- request that your data be transferred to another provider (data portability).
To exercise any of these rights, contact us at hello@noosh.studio.
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC/EDÖB): edoeb.admin.ch.
European Union: your rights under the GDPR
If you are a resident of the European Economic Area (EEA), we process your Personal Information under the following lawful bases:
- your consent;
- performance of our contract with you;
- compliance with our legal obligations; and
- our legitimate interests, where these do not override your fundamental rights.
You have the right to access, correct, delete, or port your Personal Information. To exercise these rights, contact us at hello@noosh.studio.
Your Personal Information is processed by our providers (including Shopify) and may be transferred outside of Switzerland and the EEA, including to Canada and the United States, using appropriate safeguards such as Standard Contractual Clauses. For details on Shopify's data transfer safeguards, see Shopify's GDPR Whitepaper.
Retention
We retain your order and transaction information for as long as necessary to provide our services and to comply with our legal obligations. Under Swiss commercial law (Art. 958f CO), we are required to retain business records, including invoices and order data, for 10 years, regardless of any deletion request.
Personal Information that is not subject to a legal retention obligation will be deleted or anonymised once it is no longer needed for the purpose it was collected for, or upon your request.
Automatic decision-making
We do not engage in fully automated decision-making that has a legal or otherwise significant effect on you.
Our processor Shopify uses limited automated processes to prevent fraud, which do not have a legal or otherwise significant effect on you. This includes:
- temporary blocking of IP addresses associated with repeated failed transactions (persists for a few hours), and
- temporary blocking of payment cards associated with blocked IP addresses (persists for a few days).
Cookies
A cookie is a small piece of information downloaded to your device when you visit our Site. We use cookies to make the Site function correctly and to understand how it is used.
Cookies necessary for the Site to function
| Name | Function |
|---|---|
_ab |
Used in connection with admin access |
_secure_session_id |
Used in connection with storefront navigation |
cart |
Used in connection with the shopping cart |
cart_sig |
Used in connection with checkout |
cart_ts |
Used in connection with checkout |
checkout_token |
Used in connection with checkout |
secret |
Used in connection with checkout |
secure_customer_sig |
Used in connection with customer login |
storefront_digest |
Used in connection with customer login |
_shopify_u |
Used to update customer account information |
Reporting, analytics and advertising cookies
| Name | Function |
|---|---|
_tracking_consent |
Tracking preferences |
_landing_page |
Tracks landing pages |
_orig_referrer |
Tracks landing pages |
_s, _shopify_s, _shopify_y, _y
|
Shopify analytics |
_shopify_sa_p, _shopify_sa_t
|
Shopify analytics relating to marketing and referrals |
Google Analytics cookies (e.g. _ga, _gid) |
Site usage analytics |
Meta Pixel cookie (_fbp) |
Advertising measurement on Meta platforms |
Most cookies we use are persistent and expire between 30 minutes and two years after being set. You can manage or block cookies through your browser settings; note that blocking cookies may affect how parts of the Site function.
A note for EU visitors: non-essential cookies, such as those used by Google Analytics and Meta Pixel, are only set with your consent where required by applicable law.
Do Not Track
Because there is no consistent industry standard for responding to "Do Not Track" browser signals, we do not currently alter our data practices in response to such signals.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes to our practices or for legal or operational reasons. The date at the top of this page indicates when it was last revised.
Contact
For questions about this Privacy Policy or to exercise your data protection rights, contact us at: hello@noosh.studio
If you are not satisfied with our response, Swiss residents can contact the Federal Data Protection and Information Commissioner (FDPIC): edoeb.admin.ch. EEA residents can contact their local data protection authority.