Privacy
This page explains which personal data ALMA processes, why, who else is involved and what your rights are – under the Swiss Federal Act on Data Protection (FADP). Last updated: October 2026.
Who is responsible
Andrea Barreiros Lamela · ALMA Image Consulting
Schulstrasse 96
8952 Schlieren
Switzerland
hello@almaimage.ch
Orders in the shop
When you buy a piece, I process your name, email address, phone number, delivery address, the pieces you bought and the amount. I need this to handle your order, send you the confirmation, ship the piece or arrange the pick-up, and keep my accounts.
Payment
Payments are handled by Stripe (Stripe Payments Europe Ltd., Ireland), by card or TWINT. You enter your payment details directly with Stripe; no card or account data is stored on this website. Stripe sets cookies on its own payment page to prevent fraud. So that nobody can block the shop by reserving pieces without paying, when you start a purchase the website keeps an encrypted fingerprint of your connection for 35 minutes, from which your IP address cannot be read, and then deletes it.
Price offers
When you make an offer on a piece, I process your name, email address, your phone number if you give it, and the amount, so I can reply and, if accepted, send you a personal purchase link.
Contact form
When you write to me through the form, your details (name, email address, message) are stored and forwarded to me by email so I can reply. They are not used for anything else.
Newsletter
If you sign up for updates, I store your email address and language to tell you about new pieces, sales and private drops (one or two emails a month at most). You can unsubscribe at any time with the link in every email or a short message to me.
Selling on consignment
If you give me pieces to sell, I process your contact details, the details of your pieces, the sales and the information I need to pay you out.
Booking appointments
Styling appointments are booked through Acuity Scheduling (Squarespace, USA), which is embedded on the booking page. What you enter there goes directly to Acuity; any payment for the appointment runs through their payment provider.
Visitor statistics
To know what works (Instagram, Google, shared links …), the website notes where a visit came from and adds it to that source’s daily count. It stores neither who you are nor your IP address: only the name of the source, which your browser keeps for 30 days to link a later purchase. In the same way it counts, per day, how often each piece is opened or added to the bag, without storing by whom. Cloudflare Web Analytics also counts visits, without cookies.
Cookies and local storage
This website sets no advertising or tracking cookies. Your browser storage only keeps your selection (the cart) the source of your visit (30 days) and, while the tab is open, which pieces have already been counted. You can delete all of it in your browser at any time.
Reviews
The Google reviews on this website are fetched once when the website is built and included as plain text, so visiting it does not connect you to Google. The fonts are also served by this website itself, not by Google.
Service providers and transfers abroad
To run the website I work with providers who process data on my behalf under a data processing agreement: Vercel Inc. (hosting, USA), Supabase Pte. Ltd. (database, Singapore; data stored on servers in Frankfurt, Germany), Resend (Plus Five Five, Inc.; emails sent from Ireland, account data in the USA), Cloudflare, Inc. (visitor statistics without personal data, USA), Stripe Payments Europe Ltd. (payments, Ireland; with onward transfer to Stripe, LLC, USA) and Squarespace Ireland Ltd. (Acuity Scheduling, bookings; with onward transfer to Squarespace, Inc., USA). Germany and Ireland have adequate data protection according to the Swiss Federal Council. Vercel, Cloudflare, Stripe, LLC and Squarespace, Inc. are certified under the Swiss-U.S. Data Privacy Framework. For Supabase and Resend, the EU standard contractual clauses apply with the Swiss adaptations recognised by the FDPIC. Your data is never sold or passed on to third parties for advertising.
How long data is kept
Order and accounting records are kept for as long as the law requires for bookkeeping (usually 10 years). Messages and offers are deleted once they are no longer needed, at the latest after two years. Your newsletter address is kept until you unsubscribe.
Your rights
You can ask at any time what data I hold about you, have it corrected or deleted, object to its processing and ask for a copy – an email to me is enough. If you believe I am not handling your data correctly, you can complain to the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch).