Privacy policy

Last updated: 15 November 2026

This privacy policy explains what personal data Afters Abroad collects when you visit aftersabroad.com, order from us or contact us, what we do with it, and which rights you have. It is written to meet the Swiss Federal Act on Data Protection (FADP) and, where it applies to you, the EU General Data Protection Regulation (GDPR) and the UK GDPR.

1. Who is responsible

The controller of your personal data is:

Afters Abroad
Bergacher 6
3325 Hettiswil
Switzerland
Email: hello@aftersabroad.com

For any question about your data or to use your rights, write to that address.

2. What data we collect

  • Order data: name, billing and delivery address, email address, phone number if you give it, the items you order, and payment status. Your full card details are handled by the payment provider and never reach us.
  • Account data: if you create a customer account, your login email and order history.
  • Messages: what you send us by email or through forms on the site.
  • Newsletter data: your email address and whether you opened or clicked an email, if you signed up.
  • Technical data: IP address, device and browser type, pages viewed, time of visit, referring page, and the country you are browsing from.
  • Cookie data: see section 7.

We do not knowingly collect special categories of data such as health data, and we do not create profiles that have a legal effect on you.

3. Why we use it and on what legal basis

  • To process and deliver your order, take payment and handle problems with it. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
  • To answer your questions. Legal basis: performance of a contract or our legitimate interest in replying to you (Art. 6(1)(b) and (f) GDPR).
  • To send our newsletter, only if you signed up. Legal basis: your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time through the link in every email.
  • To run, secure and improve the shop, prevent fraud, and show you the right country, currency and language. Legal basis: our legitimate interest in a safe, working shop (Art. 6(1)(f) GDPR).
  • To use cookies that are not strictly necessary, such as analytics or marketing cookies. Legal basis: your consent where the law requires it (Art. 6(1)(a) GDPR).
  • To meet legal duties, such as bookkeeping and tax rules. Legal basis: legal obligation (Art. 6(1)(c) GDPR).

You need to give us the order data marked as required at checkout. Without it we cannot make and deliver your order.

4. Who receives your data

We share personal data only with service providers that need it to do their job for us:

  • Shopify (Shopify International Limited, Ireland, and Shopify Inc., Canada) hosts our shop, stores order and customer data and runs the checkout. See shopify.com/legal/privacy.
  • Payment providers, for example Shopify Payments, Shop Pay, PayPal, Apple Pay, Google Pay and your card issuer. They process your payment under their own privacy policies.
  • Production and logistics partners who make your piece and hand it to the carrier. They receive your name, delivery address, contact details for delivery and the items ordered. Depending on your location, the workshop that makes your order can be inside or outside your own country.
  • Carriers and postal services that deliver your parcel.
  • Email and communication providers that send order emails and, if you signed up, our newsletter.
  • Google Fonts (Google Ireland Limited and Google LLC, USA). Our site loads fonts from Google servers. When a page loads, your browser connects to Google and your IP address is transmitted.
  • Authorities, courts or advisers, where the law requires it or where we need to defend our rights.

We do not sell your personal data.

5. Transfers to other countries

We are based in Switzerland. Some of our providers process data in other countries, including EU and EEA member states, the United Kingdom, Canada and the United States. Where a country does not offer a level of data protection recognised as adequate by Switzerland or the EU, the transfer is covered by suitable safeguards, usually the standard contractual clauses approved by the European Commission and recognised by the Swiss Federal Data Protection and Information Commissioner, or by a recognised framework such as the Data Privacy Framework. A transfer can also be necessary to fulfil your order, for example when your piece is made and shipped in or near your country. You can ask us for more detail on these safeguards.

6. How long we keep it

  • Order and invoice data: 10 years, as required by Swiss bookkeeping law.
  • Customer account data: until you ask us to delete your account, unless we must keep it longer by law.
  • Messages: as long as needed to handle your request, normally no longer than 2 years.
  • Newsletter data: until you unsubscribe.
  • Technical and cookie data: as long as needed for the purpose, usually between one session and 24 months depending on the cookie.

7. Cookies and similar technologies

Our shop uses cookies. Some are strictly necessary: they keep your bag, your checkout, your login and your country and currency choice working. Others help us understand how the shop is used or measure marketing. Where the law requires it, those are only set after you agree in the cookie banner, and you can change or withdraw your choice at any time. You can also block or delete cookies in your browser settings. Parts of the shop may not work properly without the necessary cookies. Shopify lists the cookies its platform sets at shopify.com/legal/cookies.

8. Your rights

Depending on the law that applies to you, you have the right to:

  • know whether we process data about you and get a copy of it (access),
  • have wrong or incomplete data corrected,
  • have your data deleted, where we have no legal reason to keep it,
  • have the processing restricted,
  • receive the data you gave us in a common electronic format or have it passed to someone else (portability),
  • object to processing that is based on our legitimate interests, and at any time to direct marketing,
  • withdraw a consent you gave, with effect for the future,
  • not be subject to a decision based only on automated processing that has legal effects on you. We do not make such decisions.

To use any of these rights, write to hello@aftersabroad.com. We answer within one month. We may ask you to confirm your identity first. Using your rights is free.

You also have the right to complain to a data protection authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC), edoeb.admin.ch. If you live in the EU or EEA, you can contact the authority in your country of residence. In the United Kingdom it is the Information Commissioner's Office.

9. Security

The shop is served over an encrypted connection. Access to order and customer data is limited to the people and providers who need it. No system is perfectly secure, so please also keep your own account password safe.

10. Children

Our shop is not aimed at children under 16. If you believe a child has given us personal data, write to us and we will delete it.

11. Changes to this policy

We may update this policy when our shop, our providers or the law change. The current version is always on this page with the date at the top.