Privacy policy

Privacy Policy – Karukhaya by Wagner

Last updated: 27.8.2026

1. Introduction

Karukhaya by Wagner ("we", "us", "our") operates this online shop and the associated website, including all related information, content, features, tools, products, and services, in order to provide you, as our customer, with a curated shopping experience (the "Services"). Our shop runs technically on the Shopify platform.

This Privacy Policy describes how we collect, use, and disclose your personal data when you visit or use our Services, make a purchase or other transaction, or otherwise communicate with us.

This Policy is based primarily on the revised Swiss Federal Act on Data Protection (revFADP). To the extent you are located in the European Union, the European Economic Area (EEA), or the United Kingdom, the corresponding provisions of the GDPR or UK GDPR shall additionally apply.

Please read this Privacy Policy carefully. By using our Services, you confirm that you have read this Policy and acknowledge the collection, use, and disclosure of your data as described herein.

2. Data Controller

The party responsible for processing your personal data within the meaning of the revFADP (and, where applicable, as "controller" within the meaning of the GDPR) is:

Karukhaya by Wagner
Stationsstrasse 9
8542 Wiesendangen
Switzerland
UID: CHE-237.076.702
Email: fabian@karukhaya.com

3. What Personal Data We Process

By "personal data," we mean information that relates to you or that can reasonably be linked to you. This does not include anonymized data or data collected anonymously. Depending on how you interact with our Services, we process the following categories of personal data:

  • Contact details: name, address, billing address, shipping address, phone number, email address
  • Financial information: payment method and transaction data (credit card, TWINT, payment confirmations, and other payment details)
  • Account information: username, password, security questions, settings and preferences
  • Transaction data: items viewed, added to the cart, or placed on a wish list, as well as purchases, returns, exchanges, or cancellations
  • Communication data: the content of your messages to us, e.g. in customer inquiries
  • Device information: details about your device, browser, or network connection, IP address, and other unique identifiers
  • Usage data: information regarding your interaction with our Services, including how and when you use them

4. Sources of Data

We collect personal data from the following sources:

  • Directly from you, e.g. when creating an account, visiting or using our Services, or communicating with us
  • Automatically through the Services, e.g. via your device when visiting our website, as well as through cookies and similar technologies
  • From our service providers, in particular Shopify and other technical service providers acting on our behalf
  • From partners or other third parties

5. Purpose of Processing

We process your personal data for the following purposes:

Providing and improving our Services. We use your data to fulfil our contract with you, process payments, execute orders, save your preferences, send account-related notifications, facilitate returns, and provide you with the best possible shopping experience.

Marketing and advertising. Provided you have consented or this is legally permitted, we use your data for marketing purposes, e.g. for email newsletters or advertising tailored to your previous interactions with our shop.

Security and fraud prevention. To authenticate your account, secure the payment and shopping process, and detect and prevent fraudulent or unlawful activity.

Communicating with you. For customer support and to maintain our business relationship with you.

Legal reasons. To comply with applicable law, including requests from authorities or courts.

6. Disclosure to Third Parties and Relationship with Shopify

Our shop is technically operated via Shopify. Information you submit is transferred to Shopify and to other service providers, some of whom are based outside Switzerland (including in the United States). In doing so, Shopify also processes personal data to provide and improve the underlying platform. Further information can be found in the Shopify Consumer Privacy Policy (privacy.shopify.com).

We may also disclose your personal data:

  • To service providers acting on our behalf (e.g. payment processing, shipping/fulfilment, IT, customer support)
  • To business and marketing partners, where legally permitted
  • Where you request or direct us to do so (e.g. shipping to an address you provide)
  • In connection with a business transaction (e.g. the sale or restructuring of our company)
  • To comply with legal obligations or to enforce our rights

7. Links to Third-Party Websites

Our Services may contain links to websites or platforms that we do not operate. We assume no responsibility for the privacy practices of such third parties and recommend reviewing their privacy policies separately.

8. Children's Data

Our Services are not directed at children. We do not knowingly collect personal data from children below the age of majority applicable in your jurisdiction. If you are a parent or legal guardian and become aware that your child has provided us with personal data, please contact us using the contact details below to request its deletion.

9. Security and Retention of Your Data

We take appropriate technical and organizational measures to protect your personal data. However, no transmission or storage method is completely secure, and we therefore cannot guarantee absolute security.

We retain your personal data for as long as necessary for the respective purposes:

  • Order and invoice data: at least 10 years, in accordance with the record-keeping obligations under Swiss commercial law (Swiss Code of Obligations)
  • Account data: for as long as your account with us exists
  • Marketing data: until you withdraw your consent

10. Your Rights

Under the revFADP, you have, in particular, the following rights regarding your personal data:

  • Right of access: you may request information about which personal data we process about you
  • Right of rectification: you may request correction of inaccurate data
  • Right of erasure: you may request deletion of your data, provided no statutory retention obligation applies
  • Right to data portability: in certain cases, you may request that we provide your data in a commonly used format
  • Right to object: you may object to the processing of your data for certain purposes, in particular direct marketing

If you are located in the EU, the EEA, or the United Kingdom, you additionally have the right to request restriction of processing and to withdraw any consent given.

To exercise these rights, please contact us using the contact details below. We may require identity verification before processing your request.

11. Right to Lodge a Complaint

If you believe that the processing of your personal data violates the revFADP, you may contact us or file a complaint with the Federal Data Protection and Information Commissioner (FDPIC):

Feldeggweg 1, 3003 Bern, Switzerland
www.edoeb.admin.ch

Individuals residing in the EU/EEA may additionally contact the competent national data protection authority.

12. International Data Transfers

Your personal data may be transferred to, stored, and processed in countries outside Switzerland, in particular in the United States (the location of Shopify Inc.).

Where such a transfer is made to a country without a level of data protection recognized as adequate by the Swiss Federal Council, we ensure that appropriate safeguards are in place — in particular through the conclusion of the FDPIC's standard contractual clauses or recognized equivalent clauses, or through other mechanisms permitted under the revFADP.

For transfers from the EU/EEA or the United Kingdom, we rely on the European Commission's Standard Contractual Clauses or equivalent contractual arrangements recognized by the competent UK authority, unless the transfer is made to a country with a recognized adequate level of protection.

13. Data Breach Notification

Should a data security breach occur that is likely to result in a high risk to your personality rights or fundamental rights, we will, where legally required, report this to the FDPIC and, where necessary, to the affected individuals.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The current version will be published on this website, indicating the date of the last update.

15. Contact

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

Karukhaya by Wagner
Stationsstrasse 9, 8542 Wiesendangen, Switzerland
Email: fabian@karukhaya.com