Privacy Policy

1. Data Controller
EPIC BEAUTY
An offer by Monolith Shop GmbH
Arbonerstrasse 41
CH-8580 Amriswil
Switzerland
Email: info@epicbeauty-shop.com

2. General Information on Data Processing
The protection of your personal data is important to us. We process your data exclusively in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP).

3. Data Collection on Our Website
When you visit our website, technical data is automatically collected (e.g. IP address, date and time, browser type, operating system, referrer URL). This data is used to ensure the smooth operation and security of our website.

If you contact us (e.g. via email or form), we store your information to process your request.

4. Orders & Contract Processing
To process orders, we collect and process the following data: name, address, email address, payment information and order details. This processing is necessary for the performance of the purchase contract.

5. Hosting & Shop System (Shopify)
Our website is hosted by Shopify Inc. Shopify provides the e-commerce platform and processes personal data on our behalf. Data transfers to third countries may occur and are carried out on the basis of appropriate safeguards (e.g. standard contractual clauses).

6. Payment Providers
For payment processing, we use external service providers such as PayPal and Shopify Payments (including credit card, Apple Pay, Google Pay and UnionPay). These providers process data independently. Their respective privacy policies apply.

7. Shipping Providers
To deliver your order, we share the necessary data with shipping service providers.

8. Cookies
Our website uses cookies to improve user experience and provide certain functionalities. You can manage your cookie preferences at any time via the cookie banner.

9. Analytics Tools
We use Google Analytics to analyze website usage. This is only done with your consent. Your IP address is anonymized before processing.

10. Email Marketing (Klaviyo)
We use Klaviyo Inc., USA, to send newsletters. If you subscribe, we store your email address and any additional information you voluntarily provide. Klaviyo allows us to analyze open and click rates. Processing is based on your consent. You can unsubscribe at any time.

11. Social Media (Instagram)
Our website may include content from Instagram. The provider is Meta Platforms Ireland Ltd. When visiting such content, data may be transferred to Instagram.

12. Data Retention
We store personal data only for as long as necessary for the respective purposes or as required by statutory retention periods.

13. Your Rights
You have the right to access, rectify, delete, restrict processing, data portability, and withdraw your consent at any time. You also have the right to lodge a complaint with a supervisory authority.

14. Data Security
We implement appropriate technical and organizational measures to protect your data.

15. Changes
We reserve the right to update this Privacy Policy at any time.