Effective as of: 11.12.2026

Protecting your personal data is important to us. In this Privacy Policy, we inform you about which personal data we collect, how we use it, and what rights you have.

1. Data Controller

Elaha Studio
Owner: Fiorito
Switzerland
E-mail: info@elahastudio.com
Instagram: @elahastudio

2. Collection and Processing of Personal Data

We collect personal data only to the extent necessary to provide our services.

This includes in particular:

• First and last name
• E-mail address
• Shipping and billing address
• Order information
• Payment information (via payment providers)
• Message content (e.g. via Instagram or e-mail)

This data is provided voluntarily by you, for example when placing an order, subscribing to our newsletter, or contacting us.

3. Purpose of Data Processing

We use your data exclusively for the following purposes:

• Processing and shipping orders
• Handling custom-made inquiries
• Customer communication
• Sending our newsletter (only with your consent)
• Fulfilling legal obligations (e.g. accounting)

Your data will not be shared with third parties for marketing purposes.

4. Newsletter

If you subscribe to our newsletter, we use your e-mail address to inform you about new products, offers, and updates.

Subscription is voluntary and generally follows a double opt-in procedure.

You can unsubscribe at any time via the unsubscribe link in the newsletter or by contacting us via e-mail.

We use Shopify’s integrated email function or comparable services to send newsletters.

5. Sharing of Data with Third Parties

Your personal data is only shared if necessary for the fulfillment of the contract, in particular with:

• Shopify Inc. (operation of our online shop)
• Payment providers (e.g. credit card providers, Klarna)
• Shipping service providers (Swiss Post)

Our online shop is operated via Shopify. Shopify processes data on our behalf and may store data outside Switzerland.

Further information about Shopify’s data processing can be found here:
https://www.shopify.com/legal/privacy

These service providers process your data exclusively within the scope of their respective services.

6. Instagram

If you contact us via Instagram (Direct Message), the data you provide will be used to process your inquiry.

Instagram’s (Meta’s) privacy policies also apply.

7. Cookies

Our website uses cookies to enable and improve the use of the website.

You can disable cookies at any time in your browser settings.

8. Data Retention

We store personal data only for as long as necessary for the respective purposes or as required by legal retention obligations.

9. Your Rights

You have the right at any time to:

• Obtain information about your stored data
• Request correction of incorrect data
• Request deletion of your data, unless legal obligations prevent this

You can submit requests at any time by contacting us via e-mail.

10. Data Security

We implement appropriate technical and organizational measures to protect your data against loss, misuse, or unauthorized access.

11. Changes

We reserve the right to amend this Privacy Policy if necessary. The current version published on our website shall apply.