Privacy Policy
CLYRA operates this store and website, including all related information, content, features, tools, products and services (the "Services"). CLYRA is powered by Shopify. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase using the Services or otherwise communicate with us.
Personal Information We Collect or Process
Depending on how you use the Services we process contact details (name, billing and shipping address, phone number, email), financial information, account information, transaction information, your communications with us, and device and usage information such as IP address, browser and interactions with the Services.
Personal Information Sources
We collect information directly from you, automatically through the Services and cookies, from our service providers, and from our partners or other third parties.
What This Website Stores on Your Device
On its own this website sets no cookies. It keeps four entries in your browser’s local storage: your cart (discarded after 14 days, holding neither prices nor payment details), the confirmation of your age for the Night line, whether you have set Day or Night, and your cookie choice. The first three are ones the shop could not work without; the fourth records what you decided so that we do not ask again. It expires after twelve months, after which we ask again. All four stay on your device and are never transmitted to us. The only cookies set here are those of Google Analytics and the Meta and TikTok pixels, and only after you have confirmed you are 18 — see the next sections. You can delete all of it at any time through your browser settings.
Analytics
We use Vercel Analytics and Vercel Speed Insights to measure how often each page is opened and how quickly it loads. Both work without cookies and without an identifier: Vercel derives the visitor count server-side from a hash that rotates daily and builds no profile capable of recognising you beyond that day. What is processed is your IP address, the page opened, the referring page, and coarse device and country information. The basis is our legitimate interest in understanding which pages are used. In addition, we use Google Analytics from Google Ireland Limited in consent mode. The Google tag is loaded on every visit; until you have confirmed you are 18, or if you have objected to analytics, it sets no cookies and only sends pings without an identifier (the page opened, your truncated IP address, browser and device details), from which Google merely models visits. Once you have confirmed, Google Analytics sets the cookies _ga and _ga_LRE9HN9G37 holding a random identifier (lasting up to two years) and records which pages you open, which products you look at, what you add to the cart and when you head for the checkout, along with your truncated IP address and details about your browser, device and approximate location. Google may also process this data in the USA, relying on the Swiss-U.S. and EU-U.S. Data Privacy Framework and the Standard Contractual Clauses. You can object at any time through “Manage cookies” in the footer — Google Analytics then sets no further cookies, the ones already set are deleted, and only pings without an identifier are sent to Google.
Advertising: Meta Pixel
Once you have confirmed you are 18, this website loads the Meta Pixel from Meta Platforms Ireland Limited, unless you have objected. It sets the cookies _fbp and _fbc holding a random identifier and reports to Meta which pages you open, which products you look at, what you add to the cart and when you head for the checkout — along with your IP address and details about your browser and device. This is how we measure which ads on Facebook and Instagram actually lead to an order, and how we can show you ads there. Meta also processes this data for its own purposes and in the United States; that transfer relies on the EU-US Data Privacy Framework. Product views and cart events are additionally sent to Meta from our own server, so that the measurement does not depend on whether your browser blocks the pixel; they are the same events, transmitted twice and reconciled by Meta. What happens after that, during the order itself, is recorded by Shopify and reported to Meta by Shopify; its own disclosures apply there. If you have objected, the pixel is not loaded, no cookie is set, and nothing is transmitted server-side either. You can change your decision at any time through “Manage cookies” in the footer or at the foot of this page. The basis is our legitimate interest in measuring which advertising works. You can object at any time through “Manage cookies” in the footer or at the foot of this page — the processing then stops and the cookies already set are deleted.
Your choice at the checkout
The checkout runs at Shopify under its own address and cannot read the choice stored on this website. We therefore pass it on through Shopify’s Customer Privacy API, so that the checkout and the services Shopify operates follow it too. If you decline marketing, that counts there as an objection to your data being shared with third parties as well.
Advertising: TikTok Pixel
Under the same conditions, this website loads the TikTok Pixel from TikTok Technology Limited. It sets the cookie _ttp holding a random identifier and reports to TikTok which pages you open, which products you look at, what you add to the cart and when you head for the checkout — along with your IP address and details about your browser and device. This is how we measure which ads on TikTok actually lead to an order. We also send the same events — and for an order additionally its value, the products and your email address and phone number, the latter two only as an irreversible hash — directly from our server to TikTok (Events API), so that measurement does not fail because of ad blockers. TikTok also processes this data for its own purposes and outside Switzerland and the EEA, relying on the Standard Contractual Clauses. If you have objected, the pixel is not loaded and no cookie is set. The basis is our legitimate interest; you can object at any time through “Manage cookies” in the footer or at the foot of this page — the processing then stops and the cookie already set is deleted.
Fonts and Checkout
The site’s typeface is loaded from Adobe Fonts (Typekit, use.typekit.net and p.typekit.net), which discloses your IP address to Adobe — technically unavoidable while the font is served from there. The purchase itself does not happen on this website: the cart hands off to Shopify’s checkout, which runs under its own address and sets its own cookies. Shopify’s own disclosures apply there.
How We Use Your Personal Information
We use your information to provide, tailor and improve the Services, process orders and payments, for marketing and advertising, for security and fraud prevention, to communicate with you, and to comply with legal obligations.
How We Disclose Personal Information
We disclose information to Shopify, vendors performing services on our behalf (IT, payment processing, analytics, customer support, storage, fulfillment and shipping), business and marketing partners, our affiliates, and in connection with business transactions or legal obligations.
Relationship with Shopify
The Services are hosted by Shopify, which collects and processes information about your access to and use of the Services in order to provide and improve them. Information may be transferred to countries other than where you reside. For more information see the Shopify Consumer Privacy Policy.
Third Party Websites and Links
The Services may link to websites operated by third parties. We are not responsible for their privacy or security practices. Please review their policies and terms.
Children's Data
The Services are not intended for children and we do not knowingly collect information about children under the age of majority. Parents or guardians may request deletion using the contact details below.
Security and Retention of Your Information
No security measure is perfect. Please do not use unsecure channels to send us confidential information. Retention depends on whether we need the information for your account, to provide the Services, to comply with legal obligations, or to enforce contracts and policies.
Your Rights and Choices
Depending on where you live you may have rights of access, deletion, correction and portability, and you can unsubscribe from marketing emails at any time. In the UK and EEA you may also object to or restrict processing and withdraw consent. We will not discriminate against you for exercising these rights.
Complaints
If you have complaints about how we process your information, contact us using the details below. Depending on where you live you may appeal our decision or lodge a complaint with your local data protection authority.
International Transfers
We may transfer, store and process your information outside the country you live in. For transfers out of the EEA or UK we rely on recognised mechanisms such as Standard Contractual Clauses, unless an adequacy decision applies.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time, including to reflect changes to our practices or for operational, legal or regulatory reasons. The revised version will be posted here with an updated date.
Contact
For questions about our privacy practices or to exercise your rights, contact us at luis.altisent@clyra.ch or CLYRA GmbH, Zeppelinstrasse 74, 8057 Zurich, Switzerland. We are the data controller of your personal information under applicable data protection laws.
