Privacy policy
Last updated 2 October 2026
This policy explains what personal data we collect when you visit amelia-art.com or buy from us, why, and who we share it with. We follow the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR).
1. Who is responsible
Geneva Webstudio, Rue de la Prairie 17, 1202 Genève, Switzerland. Email: shop@amelia-art.com. Write to this address for any question about your data.
2. Data we process
- When you order: your name, delivery and billing address, email, phone number if you give it, the items you order and payment status. Card details are handled by the payment provider; we never receive them.
- Your account: if you sign in to see your orders, your email and order history, managed by Shopify's customer accounts.
- When you write to us: your message and contact details.
- When you browse: our hosting providers keep technical logs (IP address, browser, pages requested) for security and to keep the site running. Your bag and wishlist are saved only in your own browser (local storage) and are not sent to us until you check out.
At checkout, which Shopify runs for us, Shopify uses cookies needed for the checkout to work, checks orders for fraud, and offers Shop Pay. If you choose Shop Pay, Shopify processes your data under its own privacy policy (shopify.com/legal/privacy).
We do not use advertising or analytics cookies on amelia-art.com, and we do not sell your data. If this changes, we will update this policy and ask for your consent where required.
3. Why we use it
- To accept, produce, deliver and support your order, process returns and send order and shipping emails (contract).
- To keep accounting records as the law requires (legal obligation). Order records are kept for ten years.
- To answer your messages and keep the shop secure (legitimate interest).
4. Who we share it with
We share only what each service needs to do its job:
| Service | What for | Where |
|---|---|---|
| Shopify | Shop system, checkout, payments, customer accounts, order emails | Canada, Ireland, USA |
| PayPal | Payment, if you choose PayPal | Luxembourg, USA |
| Gelato | Printing and shipping your canvas (name, delivery address, contact details) | Norway; production partners near your delivery address (e.g. Germany, USA, Canada, Australia) |
| Delivery companies | Delivering your parcel | The country of production and your country |
| Google Firebase | Hosting this website | USA, EU |
| Cloudflare and GitHub | Passing new orders to our print partner automatically | USA, EU |
| Spacemail (Spaceship) and Resend | Our mailbox and sending email | USA, EU |
| Google (Gmail) | Reading and answering your messages | EU, USA |
Some of these providers process data in countries without data protection equivalent to Switzerland's, such as the USA. In that case we rely on the Swiss-US Data Privacy Framework where the provider is certified, or on the EU Standard Contractual Clauses recognised by the Swiss Federal Data Protection and Information Commissioner.
5. How long we keep it
Order and accounting records: ten years, as Swiss law requires. Messages: as long as needed to answer them, at most two years. Server logs: a few weeks.
6. Your rights
You can ask what data we hold about you, have it corrected or deleted, receive it in a common format, and object to its use, within the limits of the law (for example, we must keep accounting records). Write to shop@amelia-art.com. You may also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch) or, in the EU, to your local data protection authority.
7. Changes
We update this policy when our services change. The current version is always on this page.