Privacy policy

How we handle your data — under the revised Swiss Federal Act on Data Protection (revFADP) and, where it applies, the GDPR.

18 September 2026

Entwurf. Firmenangaben (Adresse, UID, MWST-Nummer) sind noch Platzhalter und müssen vor dem Verkauf an Dritte ersetzt und juristisch geprüft werden.

Controller

Pom Pom GmbH, Beispielstrasse 12, 8004 Zürich

Email: hallo@hockeytape.shop

What we process

Order data: name, delivery and billing address, email address, items ordered, amount and language.
Payment data: we never see your card details. They are processed solely by Stripe; we receive only a payment reference and its status.
Subscription data: the mix you chose, your paused months and the status of the subscription.
Server data: visiting the site produces technically necessary log data (IP address, timestamp, page requested).

There are no customer accounts. We neither ask for nor store a password.

Why we process it

To fulfil your order, ship it, answer your enquiries and meet our statutory retention obligations. The legal basis is performance of the contract together with our legitimate interest in running the shop securely.

We send no marketing newsletters and sell no data.

Who we share it with

We use the following processors. Each receives only the data it needs for its task.

Vercel Inc. (USA) — hosting and delivery of the website.
Neon (EU) — database holding orders and subscriptions.
Stripe Inc. (USA/Ireland) — payment processing and subscription management.
Resend (EU, region eu-west-1) — sending order and shipping emails.
Swiss Post — parcel delivery; receives name and delivery address.

Transfers to the USA rely on the standard contractual clauses or on an adequacy decision.

Cookies

We use no advertising or analytics cookies. We store only what is technically necessary in your browser: your language choice and the contents of your cart. That data never leaves your browser.

Retention

Order and invoice data is kept for ten years, as the Swiss Code of Obligations requires. Email enquiries are deleted once resolved, unless a retention obligation applies.

Your rights

You have the right to access, rectification, erasure and data portability, and the right to object to processing. An email to us is enough.

You may also complain to the Federal Data Protection and Information Commissioner (FDPIC).

Security

The site is served over HTTPS only. Payments are encrypted and handled by Stripe.