Privacy policy

Privacy Policy
Last updated: [April 10, 2026]

This Privacy Policy explains how Bubele (“we”, “us”, “our”) collects and processes personal data when you visit our website, place an order, book or attend a course, contact us, or otherwise interact with us.

We operate an online store and related services for handmade jewelry experiences, including DIY Art Clay Silver kits, jewelry products, and creative courses/workshops.

If you have any questions about this Privacy Policy or how we process your personal data, you can contact us at:

Bubele
Mühlackerstrasse 110
8046 Zürich
Switzerland
Email: denis.buckingham.db@gmail.com

For the purposes of applicable data protection law, we are the controller of your personal data unless stated otherwise in this Privacy Policy.

1. What personal data we collect

Depending on how you use our website and services, we may collect the following categories of personal data:

Information you provide directly

  • Name
  • Billing and shipping address
  • Email address
  • Telephone number
  • Order details
  • Messages you send to us
  • Information you provide when booking a course, requesting support, or submitting a custom inquiry

Order and transaction data

  • Products or services ordered
  • Order value, currency, payment status, and transaction details
  • Returns, cancellations, refunds, and exchanges
  • Delivery and fulfillment information

Course and event-related data

  • Course booking details
  • Attendance information
  • Information relevant to running a course or workshop, such as scheduling or communication history
  • Any information you voluntarily provide in connection with your participation

Technical and usage data

  • IP address
  • Browser type
  • Device information
  • Pages viewed
  • Referring website
  • Approximate location derived from IP
  • Interactions with our website, such as viewed products, cart activity, and navigation behavior

Marketing-related data

  • Whether you open or click marketing emails
  • Interactions with ads or campaigns, where applicable

We do not intentionally collect sensitive personal data unless it is necessary for a specific service you request and permitted by law.

2. How we collect personal data

We collect personal data:

  • directly from you, when you place an order, fill in a form, contact us, subscribe to emails, or book a course;
  • automatically, through your use of our website, including through cookies and similar technologies;
  • from service providers who help us operate our website, process payments, fulfill orders, manage bookings, or send communications;
  • from third-party platforms, but only where you choose to interact with us through them.

3. Why we process your personal data

We process personal data for the following purposes:

To provide our products and services

  • to process and fulfill orders;
  • to ship products;
  • to manage returns, refunds, and exchanges;
  • to process course bookings and provide course-related services;
  • to communicate with you about your order, booking, or inquiry.

To operate and improve our website and services

  • to maintain and improve our store, website performance, product offering, and user experience;
  • to understand how visitors use the website;
  • to troubleshoot technical issues and protect the security of our website.

To process payments and prevent fraud

  • to verify transactions;
  • to detect and prevent fraud, abuse, chargebacks, and unauthorized activity.

To communicate with you

  • to answer questions and provide customer support;
  • to send service-related communications, such as order confirmations, booking confirmations, shipping updates, and important account or policy notices.

For marketing, where permitted

  • to send newsletters or promotional emails if you subscribe or if otherwise permitted by law;
  • to measure the effectiveness of marketing campaigns;
  • to show relevant ads, only if and to the extent we use advertising or tracking tools.

To comply with legal obligations

  • to keep accounting and tax records;
  • to comply with legal, regulatory, and law-enforcement requests;
  • to establish, exercise, or defend legal claims.

4. Legal bases for processing

If Swiss data protection law applies, we process personal data where we have a legitimate business purpose, where processing is necessary to perform a contract with you, where you have given consent, or where processing is required to comply with legal obligations. If EEA or UK data protection law applies, these same grounds correspond to our legal bases under applicable law.

5. Shopify

Our online store is hosted by Shopify. When you visit our store, place an order, or otherwise use our website, Shopify processes personal data to provide and support the store infrastructure. Shopify may also process personal data for security, fraud prevention, performance, and platform-related purposes.

You can learn more about how Shopify processes personal data in Shopify’s consumer privacy materials.

6. Payments

Payments are processed by Shopify and/or the payment providers enabled in our checkout. We do not receive or store your full payment card details.

The payment provider may process your payment data, billing details, transaction amount, and fraud-prevention information for the purpose of completing the transaction and complying with legal obligations.

  • Shopify Payments

7. Shipping and fulfillment

If you place a physical order, we share the information necessary to fulfill and deliver the order with shipping, logistics, and fulfillment providers, such as your name, delivery address, and order details.

8. Courses, bookings, and events

If you book a course, workshop, or event through our website or by contacting us, we process the information necessary to manage your booking, communicate with you, and provide the course.

If you use a third-party booking, calendar, ticketing, or video platform, personal data may also be processed by that provider. Add the name of the provider here if applicable.

9. Marketing and newsletters

If you sign up for our newsletter or otherwise consent to receive marketing, we may send you updates about products, launches, events, workshops, and promotions.

You can unsubscribe at any time by using the unsubscribe link in the email or by contacting us.

If you use email marketing tools such as Shopify Email, Klaviyo, or Mailchimp, add them here only if true.

10. Cookies and similar technologies

We use cookies and similar technologies to operate our website, remember preferences, understand website traffic, improve functionality, and, where applicable, support analytics and marketing. Swiss guidance specifically addresses processing through cookies and similar technologies, so your disclosures here should match what you actually use.

Depending on your settings and the tools installed on our site, cookies may be used for:

  • essential website functions;
  • remembering your cart or preferences;
  • analytics and website performance;
  • marketing and advertising, if enabled.

You can manage certain privacy preferences through our website tools or your browser settings. Shopify also provides merchant privacy settings and cookie-banner related controls in the admin.

11. Analytics and advertising

We may use analytics tools to understand how visitors use our website and to improve our products and services.

We may also use advertising or retargeting tools only if enabled on our site.

Only keep the following sentence if it is true:
We use tools such as [Google Analytics / Meta Pixel / Pinterest / TikTok / Shopify marketing features] to measure traffic, understand campaign performance, and, where permitted, show relevant marketing.

If you do not use advertising pixels or retargeting, delete all references to targeted advertising and cross-site tracking.

12. Who we share personal data with

We may share personal data only to the extent reasonably necessary with:

  • Shopify and Shopify-related infrastructure providers;
  • payment processors;
  • shipping and fulfillment providers;
  • booking, scheduling, email, analytics, customer support, and technical service providers;
  • professional advisers, if necessary;
  • authorities or courts, where legally required;
  • a buyer or successor in the event of a business transfer, if ever applicable.

We do not sell personal data in the ordinary sense of selling customer lists for money.

13. International transfers

Some of our service providers may process personal data outside Switzerland. If personal data is transferred abroad, we take steps required by applicable law to ensure an adequate level of protection, including contractual safeguards where appropriate. Fedlex and Swiss rules require proportionate protections for personal data, and Shopify notes that merchant data can be processed internationally within its infrastructure.

14. Retention

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy, including to:

  • fulfill orders and provide services;
  • maintain business and tax records;
  • resolve disputes;
  • enforce agreements;
  • comply with legal obligations.

The FDPIC notes that retention periods should be defined in light of the purpose and applicable legal obligations; there is no single universal retention period under Swiss law.

15. Security

We use reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. However, no internet transmission or storage system is completely secure.

16. Your rights

Depending on the law that applies to you and your location, you may have rights including:

  • the right to request information about your personal data;
  • the right to request correction of inaccurate data;
  • the right to request deletion, where applicable;
  • the right to object to or restrict certain processing, where applicable;
  • the right to withdraw consent, where processing is based on consent;
  • the right to complain to a competent supervisory authority.

To exercise any of these rights, please contact us at: denis.buckingham.db@gmail.com

If your request concerns data processed by Shopify for Shopify’s own purposes, Shopify may handle that request directly in accordance with its own privacy documentation.

17. Children

Our website and services are not directed to children. We do not knowingly collect personal data from children in a way that requires separate consent under applicable law.

18. Third-party links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. Please review their privacy notices separately.

19. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, providers, or legal obligations. The updated version will be posted on this page with a revised “Last updated” date.

20. Contact

If you have questions about this Privacy Policy or about how we process personal data, please contact:

Bubele
Mühlackerstrasse 110
8046 Zürich
Switzerland
Email: denis.buckingham.db@gmail.com