Privacy policy

Last updated: 31 October 2026

This policy explains which personal data SQUISHOPIA processes, why, who it is shared with and what your rights are. It applies to the SQUISHOPIA website and online shop. It complies with the Swiss Federal Act on Data Protection (FADP/nLPD) and, for customers in the European Union, the General Data Protection Regulation (GDPR).

1. Controller

Adam Adribax — Never Rain Again Agency (sole proprietorship), 1290 Versoix, Switzerland

Email: squishopia@gmail.com

For any question about your data, write to squishopia@gmail.com.

2. Data we process

When you place an order

• first and last name, delivery address, country, email, phone (optional);
• order contents, amounts, currency, payment and delivery status;
• any message left with the order.

When you create an account

• email, first name (optional), password (stored only in encrypted form), saved addresses, order history, wishlist;
• a 6-digit verification code is sent by email to activate the account.

Payment

• Payment is processed by our certified payment provider (Stripe). We never receive your card number. We only receive the payment confirmation, the amount and the method used.

Newsletter (optional)

• your email and language, only if you subscribe. You can unsubscribe in one click from every email.

SQUISHOPIA assistant (chat)

• the messages you write in the assistant and, if you ask for it, your order number and email to find your order. If you contact the team from the assistant, your request is saved as a support request.

Contact form and support

• your name, email, message and any following exchanges.

Audience measurement (only with your consent)

• pages viewed, products viewed, country, device type, with a pseudonymous identifier calculated from the IP address and browser using a key that changes every day. The IP address itself is not stored. Nothing is sent if you refuse.

Necessary technical data

• cookies and browser storage needed for the site to work (cart, language, currency, login, cookie choice) — see our Cookie policy.

3. Why we use your data (purposes and legal bases)

• Process and deliver your order, keep you informed, handle returns and complaints — performance of a contract (Art. 6(1)(b))
• Manage your customer account and the member discount — performance of a contract (Art. 6(1)(b))
• Answer your questions (assistant, contact, support) — contract / pre-contractual steps (Art. 6(1)(b)) and legitimate interest (Art. 6(1)(f))
• Accounting and legal obligations (invoices, retention) — legal obligation (Art. 6(1)(c))
• Newsletter — consent (Art. 6(1)(a))
• Audience measurement and any marketing tools — consent (Art. 6(1)(a))
• Site security, fraud and abuse prevention — legitimate interest (Art. 6(1)(f))

In Switzerland, this processing follows the FADP principles (lawfulness, good faith, proportionality, purpose limitation, transparency).

4. Who we share your data with

We never sell your data. We only share it with the providers we need:

• Payment provider (Stripe): to process the payment.
• Product suppliers: our squishies are shipped directly by our partner suppliers (notably through the AliExpress platform). To do so, we send them the recipient's name, delivery address and, if needed, phone number, together with the items to ship. These suppliers are mainly located in China.
• Carriers: they receive the delivery details from the suppliers.
• Email service (Resend): for order, account and newsletter emails.
• Hosting and storage of the website and database.
• AI assistant: messages written in the assistant are processed by the provider of the artificial intelligence model (Anthropic) to generate the answer. Please do not write sensitive data in it.
• Marketing tools (e.g. Google, Meta, TikTok): only if you accept them in the cookie window and only if they are enabled on the site.
• Authorities: where required by law.

5. Transfers outside Switzerland and the EU

Some providers are located outside Switzerland and the European Economic Area (notably in the United States and China), in countries that do not always offer a level of protection considered equivalent.

• For technical providers (payment, email, AI, hosting), we use recognised providers that apply contractual safeguards (standard contractual clauses) or, where applicable, are certified under the applicable data protection framework.
• Sending your address to the suppliers who ship your order is necessary to perform the contract you conclude with us (Art. 17(1)(b) FADP; Art. 49(1)(b) GDPR). Without it, we could not deliver to you.

6. Retention

• Orders and invoices: 10 years (Swiss accounting obligation).
• Customer account: as long as the account exists. You can ask for its deletion at any time; order data is kept for accounting.
• Newsletter: until you unsubscribe.
• Support requests and assistant conversations: as long as needed to handle the request and any complaint. You can ask for their deletion at any time.
• Audience measurement: 13 months maximum, pseudonymous, then deleted automatically.
• Cookie choice: 6 months, then we ask again.

7. Your rights

At any time, you can:

• access your data and get a copy;
• have it corrected if it is inaccurate;
• ask for its deletion (except where we must keep it by law);
• object to processing or ask for its restriction;
• ask for data portability;
• withdraw your consent (newsletter, cookies) at any time, without affecting what was done before.

To exercise your rights, write to squishopia@gmail.com. We normally answer within 30 days. We may ask for proof of identity.

You can also lodge a complaint with a data protection authority:

• in Switzerland: the Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch;
• in the EU: the data protection authority of your country of residence.

8. Security

We protect your data with appropriate technical and organisational measures: encrypted connection (HTTPS), encrypted passwords, protected admin access, payment processed only by the certified provider.

9. Children

The shop is intended for adults and people aged 14 and over. People under 16 must ask a parent's permission before creating an account or placing an order.

10. Changes

We may update this policy. The date at the top of the page shows the latest version. In case of an important change, we will say so on the site.