Privacy Policy
Data controller
Kartso Shangrila tibet-markets.ch
Niederdorfstrasse 39, 8001 Zürich, Switzerland
Email: info@tibet-markets.ch
Phone: +41 44 251 04 14
Principles
This privacy policy explains how we process personal data when you visit our website, place an order with us or contact us. We comply with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR). We process data to perform contracts, to comply with legal obligations, on the basis of our legitimate interests (e.g. the secure operation of our shop) or with your consent.
Visiting the website and contacting us
When you visit our website, technical data such as your IP address, the date, the time and your browser are processed automatically so that the website works securely. If you contact us, we process the details you provide in order to respond to your request. To protect against spam, we use hCaptcha (Intuition Machines, Inc.), Shopify's spam protection, on forms.
Orders and customer account
For orders, we process your contact, delivery and payment details as well as the items ordered. We need them to process your order and retain them in accordance with our legal obligations. If you open a customer account, we also store your account data; you can have the account deleted at any time. To write to you in your language and to improve our offering, we analyse your order history.
Payment and shipping
We process payments via Shopify Payments (Stripe), PayPal, Klarna and TWINT. These providers receive the data required for the payment; Klarna may carry out a credit check in this context. We do not receive your full card details. You can also pay by bank transfer or when collecting your order in our shop. We ship with Swiss Post; for international shipments, its partner companies and the customs authorities also receive the necessary information.
Newsletter, reminders and reviews
For the newsletter, we need your email address and your consent. You can provide your date of birth on a voluntary basis; we only use it to send you a birthday greeting by email with a discount code. We measure whether newsletters are opened and links are clicked. You can unsubscribe at any time via the link in every email.
If you view items, add them to your cart or start checkout without placing an order, we may send you a reminder by email. For this purpose, we record which products you view and add to your cart. Once you place an order, you will no longer receive reminders; you can unsubscribe at any time via the link in the email.
After an order, we may ask you by email to review the product. Only the name you provide is published, not your email address.
Cookies, analytics and advertising
We always set necessary cookies, for example for the shopping cart. We only set cookies for analytics and advertising with your consent in the cookie banner. You can withdraw your consent at any time by deleting the cookies in your browser (the cookie banner will then appear again) or by contacting us by email.
With your consent, we use Google Analytics and Google Ads (Google Ireland Limited) as well as the Meta Pixel and the Conversions API (Meta Platforms Ireland Limited). In this way, we measure the use of our website and the success of our advertising and show relevant ads.
Embedded content and social media
A map from Google Maps and our Instagram feed are embedded on our website. When they load, your IP address and technical data are transmitted to Google or Meta respectively. Links to our social media profiles only transmit data once you click on them.
Service providers and disclosure abroad
We work with service providers who process data on our behalf:
- Shopify (shop platform and email delivery)
- Infomaniak (email, Switzerland)
- the Shopify apps Judge.me, Order Printer Pro, Matrixify and Instafeed
- the AI assistant Claude by Anthropic
- bexio (accounting)
- our fiduciary
Some of these service providers also process data in the EU, Canada or the USA. We only transfer data to the USA to recipients certified under the Swiss-U.S. Data Privacy Framework or on the basis of standard contractual clauses.
Retention and security
We only retain data for as long as necessary or required by law, for example ten years for accounting records. We protect your data with appropriate security measures.
Your rights
You can request access to your data and its rectification, erasure or portability. You can object to the processing and withdraw your consent at any time. To do so, please write to us at info@tibet-markets.ch. You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) or, in the EEA, with your national data protection authority.
Changes
We may amend this privacy policy. The current version published on our website applies.
Last updated: October 2026