Privacy policy

Last updated: 31 July 2025

1. Scope

This privacy policy applies to users outside Switzerland and the European Union (including Norway).

2. Data Controller

Studio3000 GmbH – Tuftinglove
Bachstrasse 33, 5034 Suhr, Switzerland
help@tuftinglove.com · +41 62 552 01 70

3. What data we process & why

Data Category Purpose Legal Basis / Legitimation
Contact details, orders, payments Contract fulfillment, shipping, accounting Contract / legal obligation
Workshop data Course organization Contract
Email & chat (Willdesk) Support and service quality Legitimate interest
Cookies, analytics (Google Analytics, Shopify Analytics) Shop operation, statistics, marketing Consent / legitimate interest

4. Disclosure to service providers

  • Shop system & hosting: Shopify Inc. (Canada, EU standard contractual clauses)
  • Payment providers: Shopify Payments, Klarna, PayPal, Twint
  • Shipping providers: DHL, Swiss Post, UPS
  • Customer service & chat: Willdesk (ISO 27001 compliant)
  • Marketing & analytics: Google LLC, Meta Platforms, TikTok Ltd.
  • Reviews: Loox (Israel, EU standard contractual clauses), Google Reviews
  • Newsletter: Shopify Email

5. International data transfers

Data are transferred only based on EU standard contractual clauses or adequacy decisions by the EU Commission.

6. Data retention periods

Data Duration
Invoice & order data 10 years (legal obligation)
Newsletter data Until revoked
Workshop data 2 years
Support chats 3 years
Analytics & log data 6–12 months

7. Your rights

  • Access to your personal data
  • Correction or deletion of your data
  • Data portability/transfer to other providers
  • Objection to processing (e.g. direct marketing)
  • Withdrawal of consent at any time

You can always contact us at help@tuftinglove.com to exercise your rights.

8. Security & technology

  • Encrypted data transfer (TLS/SSL)
  • Regular organizational and technical protective measures
  • Access restrictions and controls

Special notes for UK customers

  • Data protection based on UK GDPR and Data Protection Act 2018
  • Supervisory authority: Information Commissioner's Office (ICO)
  • Complaint options: ico.org.uk or phone 0303 123 1113
  • Age of consent for children: 13 years
  • Your rights include access, correction, deletion, transfer, objection, and withdrawal

9. Contact for questions

If you have any questions about the processing of your data, please contact us:
help@tuftinglove.com

Thank you very much for your trust! We are happy to welcome you to Tuftinglove.
Your Tuftinglove team