Privacy policy
Effective date: July 17, 2026
This Privacy Policy describes how **Rikardo Stoilov**, doing business as **VISTINA** ("VISTINA," "we," "us," or "our"), collects, uses, discloses, and otherwise processes personal information when you visit https://vistina.ch (the "Site"), make a purchase, communicate with us, submit a product review, receive marketing from us, or otherwise use our services (collectively, the "Services").
VISTINA is established in Switzerland and currently sells and ships products to customers in the 50 United States.
For purposes of applicable data protection law, the controller of your personal information is:
VISTINA
Rikardo Stoilov
SOLE PROPRIETORSHIP
8730 Uznach
St. Gallen
Switzerland
Email: info@vistina.ch
1. Scope
This Privacy Policy applies to personal information processed through the Services. It does not apply to websites, applications, or services operated independently by third parties, even if we link to them. Those third parties maintain their own privacy notices and are responsible for their own privacy practices.
By using the Services, you acknowledge the practices described in this Privacy Policy. Where consent is required by law, we will request it separately, including through our cookie banner or other privacy controls.
2. Personal Information We Collect
The personal information we collect depends on how you interact with us.
A. Information You Provide Directly
We may collect:
- **Contact information**, such as your name, email address, telephone number, billing address, shipping address, and social media handle if you choose to provide it.
- **Order and transaction information**, such as products purchased, selected size and color, order number, purchase date, amount paid, discounts, returns, refunds, and shipping status.
- **Account information**, such as login credentials and account preferences, if customer accounts are enabled and you create one.
- **Payment-related information.** Payments are processed by Shopify and the payment provider you select. We generally do not receive or store full payment-card numbers or security codes.
- **Communications**, including messages submitted through our contact form, emails, customer-service requests, photographs supplied in connection with damaged-product claims, and other correspondence.
- **Marketing preferences**, including newsletter subscription status and choices regarding cookies, targeted advertising, and data sharing.
- **Review and user-generated content**, such as ratings, product reviews, display names, photographs, videos, and any other content you choose to submit.
- **Promotion information**, if you participate in a giveaway, survey, contest, or similar promotion that we offer in the future.
Please do not send us sensitive personal information through contact forms, product reviews, or ordinary email.
B. Information Collected Automatically
When you use the Site, we and our service providers may automatically collect:
- IP address and approximate location derived from it;
- browser type, device type, operating system, language, and device identifiers;
- cookie IDs, advertising identifiers, and similar online identifiers;
- referring URLs, pages viewed, searches, links and buttons clicked, time spent, and navigation paths;
- product views, cart activity, checkout activity, purchases, and other website events;
- advertising interactions, campaign and referral information, timestamps, and attribution data;
- diagnostic, security, fraud-prevention, and performance information; and
- cookie, consent, opt-out, and privacy-preference signals.
We collect this information using cookies, pixels, tags, software development kits, server-side APIs, local storage, and similar technologies.
C. Information From Other Sources
We may receive personal information from:
- Shopify and Shopify services, including Shop, Shop Pay, Shopify Payments, Shopify Network Intelligence, and Shopify Email;
- payment processors and payment networks;
- Printful and shipping carriers;
- Meta, TikTok, Pinterest, and other advertising or analytics partners;
- Sternify and other applications installed in our Shopify store;
- fraud-prevention, security, and identity-verification providers;
- social networks when you interact with our profiles, advertisements, or social content; and
- publicly available sources or partners that lawfully provide information to us.
3. How We Use Personal Information
We may use personal information to:
- provide, operate, maintain, and improve the Services;
- process payments, fulfill orders, arrange production and delivery, and provide order updates;
- create and manage customer accounts;
- respond to questions, claims, returns, complaints, and customer-service requests;
- personalize the Site and remember your preferences;
- send transactional communications, such as order confirmations, shipping notices, and service messages;
- send marketing emails where permitted by law and according to your preferences;
- display product reviews, ratings, photographs, and other content you submit;
- measure advertising performance, attribute conversions, retarget Site visitors, build advertising audiences, and show more relevant advertisements;
- conduct analytics, research, testing, and product or Site improvement;
- detect, investigate, and prevent fraud, abuse, security incidents, prohibited activity, and violations of our terms;
- comply with tax, accounting, recordkeeping, consumer-protection, sanctions, law-enforcement, and other legal requirements;
- establish, exercise, or defend legal claims;
- protect the rights, safety, property, and integrity of VISTINA, our customers, and others; and
- carry out a merger, financing, restructuring, sale, or transfer of all or part of our business, subject to applicable law.
Under Swiss data protection law and where relevant under other laws, we process personal information as necessary to perform a contract with you, comply with legal obligations, pursue legitimate business interests, protect rights and security, or based on consent where consent is required.
4. Shopify and Shopify Network Intelligence
Our store is hosted by Shopify. Shopify processes personal information to provide storefront hosting, checkout, payments, fraud prevention, analytics, customer accounts, email services, and other commerce functions.
We have enabled **Shopify Network Intelligence**. Shopify may use information from your interactions with our store together with information from your interactions with Shopify and other merchants to provide enhanced services, personalization, measurement, security, and advertising-related features. For certain activities, Shopify may act as an independent controller or "business" under applicable privacy law rather than solely as our processor or service provider.
Shopify may process information in the United States, Canada, and other countries. For more information, review the [Shopify Consumer Privacy Policy](https://www.shopify.com/legal/privacy/consumers) and Shopify's privacy portal at [https://privacy.shopify.com](https://privacy.shopify.com).
You may exercise applicable choices regarding Shopify-powered targeted advertising through our **Your Privacy Choices** page at **https://vistina.de/pages/data-sharing-opt-out**, through our cookie-preference tool, or directly through Shopify's privacy portal.
5. Payments
Payments are processed by Shopify and the payment provider selected during checkout. Depending on availability and your device, payment methods may include major credit and debit cards, Shopify Payments, Shop Pay, Apple Pay, Google Pay, PayPal.
Payment providers may collect your name, billing details, payment credentials, device information, transaction details, and information required for authentication, fraud prevention, and legal compliance. Their processing is governed by their own privacy notices. We generally receive confirmation of payment and limited transaction information rather than your full card number or security code.
6. Production, Fulfillment, and Shipping
We use **Printful** to print, cut, sew, fulfill, and ship products. To fulfill an order, we provide Printful with information such as your name, shipping address, contact details, order contents, and other information required for production and delivery.
Printful may fulfill orders from different facilities depending on product availability, capacity, and destination. Your information may therefore be processed in the United States, Mexico, Europe, or other locations involved in fulfillment. Printful and its shipping partners may provide order, tracking, delivery, return, and claim information to us.
For more information, review [Printful's Privacy Policy](https://www.printful.com/policies/privacy).
Shipping carriers process information necessary to transport and deliver packages, provide tracking, address delivery problems, comply with customs or other legal requirements, and investigate lost or damaged shipments.
7. Product Reviews and Sternify
We use the **Sternify** Shopify application to provide store sections, social-proof features, product ratings, reviews, and related functionality. Sternify may process review content, display names, product and order-related information, technical information, and other information necessary to provide its services, depending on how the application is configured.
Product reviews and content you submit for publication may be visible publicly. Do not include personal contact information, payment information, information about another person, or sensitive personal information in a review.
For more information, review **https://sternify.com/privacy**.
8. Email Marketing
We use **Shopify Email** to send marketing communications. If you subscribe, we may use your email address, name, purchase history, browsing or engagement information, and marketing preferences to send news, product launches, abandoned-cart reminders where enabled, and promotional messages.
You can unsubscribe at any time by clicking the unsubscribe link in a marketing email. Unsubscribing from marketing does not prevent us from sending transactional or service messages related to your orders, account, security, or legal matters.
We do not currently state that we send marketing text messages. If SMS marketing is introduced, this Privacy Policy and the applicable consent language must be updated before collection begins.
9. Cookies and Similar Technologies
We use cookies and similar technologies for the following categories of purposes:
- **Necessary:** storefront operation, checkout, security, fraud prevention, consent preferences, load balancing, and account authentication.
- **Functional:** remembering preferences and improving Site functionality.
- **Analytics:** understanding Site traffic, performance, navigation, and product engagement.
- **Advertising:** measuring campaigns, attributing conversions, retargeting visitors, creating advertising audiences, and personalizing advertisements.
Our cookie banner allows you to manage non-essential cookie choices where available. You can revisit your choices through the **Cookie Preferences** link in the Site footer. Browser controls may also allow you to block or delete cookies, but doing so may affect Site functionality.
Your cookie choice must also be implemented technically. A statement in this Privacy Policy does not by itself prevent pixels, tags, or server-side APIs from sending data.
10. Advertising and Targeted Advertising
We use advertising tools to measure campaigns, understand customer journeys, attribute sales, retarget visitors, find potential customers, and display advertisements that may be more relevant to users.
A. Meta
We use Meta advertising tools, including the **Meta Pixel**, **Conversions API**, and the official Facebook and Instagram integration for Shopify, with maximum data sharing enabled.
Depending on your interaction and our configuration, information sent to Meta may include browser and device information, IP address, cookie or advertising identifiers, page views, product views, cart and checkout activity, purchases, timestamps, order values, and hashed contact information used for matching and measurement.
Meta may use this information to provide measurement, attribution, audience creation, ad delivery, personalization, security, and other services according to its terms and privacy notices. Review Meta's [Privacy Policy](https://www.facebook.com/privacy/policy/) and [United States Regional Privacy Notice](https://www.meta.com/legal/united-states/).
B. TikTok
We use the **TikTok Pixel**, **TikTok Events API**, and the official TikTok integration for Shopify, with maximum data sharing enabled.
Depending on your interaction and our configuration, information sent to TikTok may include advertising and event information, timestamps, IP address, browser and device information, cookies, identifiers, page metadata, button clicks, product views, cart and checkout activity, purchases, and hashed contact information used for advanced matching.
TikTok may use this information for measurement, campaign optimization, attribution, audience creation, advertising personalization, and ad delivery according to its terms and privacy notices. Review TikTok's [Privacy Policy](https://www.tiktok.com/legal/page/us/privacy-policy/en) and information about the [TikTok Pixel](https://ads.tiktok.com/help/article/tiktok-pixel).
C. Pinterest
We use the **Pinterest Tag**. Pinterest may receive information about your visits and actions on the Site, including IP address, cookie and device identifiers, pages and products viewed, cart activity, purchases, and advertising interactions. Pinterest may use this information to measure ad performance, attribute conversions, build audiences, personalize content and advertising, and improve its advertising services.
Review Pinterest's [Privacy Policy](https://policy.pinterest.com/en/privacy-policy) and [Ad Data Terms](https://policy.pinterest.com/en/ad-data-terms).
D. Sensitive Information and Advertising
VISTINA is a Christian streetwear brand. We do not intentionally ask advertising partners to infer, identify, or target an individual based on religious beliefs or other sensitive personal traits. We do not intentionally create advertising audiences named or defined in a way that asserts or implies a person's religion, health condition, financial status, or other sensitive characteristic.
We also do not intend to send form contents, full payment-card data, government identifiers, or other prohibited data through advertising pixels or APIs. We review event names, URLs, product metadata, parameters, and audience names to reduce the risk of sensitive or prohibited data being transmitted.
11. When We Disclose Personal Information
We may disclose personal information to:
- **Commerce and hosting providers**, including Shopify and Shopify affiliates;
- **Production and fulfillment providers**, including Printful;
- **Payment processors, banks, payment networks, and digital-wallet providers**;
- **Shipping and logistics providers**;
- **Advertising and social-media partners**, including Meta, TikTok, and Pinterest;
- **Email and communications providers**, including Shopify Email;
- **Application and technology providers**, including Sternify and other apps installed in our store;
- **Analytics, security, fraud-prevention, and professional advisers**, such as accountants, lawyers, insurers, and IT providers;
- **Government, regulators, courts, law enforcement, or other parties** when disclosure is required or permitted by law or necessary to protect rights and safety;
- **Transaction counterparties and advisers** in connection with a merger, financing, restructuring, insolvency, sale, or transfer of all or part of our business; and
- **Other parties at your direction or with your consent**.
Service providers may process personal information on our behalf. Some providers, including Shopify and advertising platforms, may also process certain information for their own purposes as independent controllers or businesses under applicable law.
12. Sale, Sharing, and Targeted Advertising
We do not sell personal information for money in the ordinary meaning of the word "sell."
However, privacy laws in some US states define "sale," "sharing," and "targeted advertising" broadly. Our use of Shopify Network Intelligence, Meta, TikTok, Pinterest, advertising cookies, pixels, and server-side advertising APIs may be considered a sale or sharing of personal information, or processing for targeted advertising, under those laws.
The categories of information that may be involved include:
- identifiers, such as IP address, cookie IDs, advertising IDs, and hashed contact information;
- internet or electronic network activity, such as browsing, clicks, product views, and interactions;
- commercial information, such as cart activity, purchase events, and transaction value;
- approximate location derived from IP address; and
- inferences about product or shopping interests.
The recipients may include advertising networks, social-media platforms, analytics providers, and Shopify.
You may opt out of applicable sale, sharing, or targeted-advertising activities through our **Your Privacy Choices** page: **https://vistina.de/pages/data-sharing-opt-out**
You can also adjust non-essential tracking through **Cookie Preferences** in our footer. Where required by applicable law and supported by our systems, we treat a recognized **Global Privacy Control (GPC)** signal as a request to opt out. We do not respond to older browser "Do Not Track" signals where they are not standardized, but we honor legally required opt-out preference signals as described above.
13. US State Privacy Disclosures
Depending on where you live and whether an applicable law covers our processing, you may have rights to:
- confirm whether we process your personal information;
- access or obtain a copy of personal information;
- correct inaccurate personal information;
- delete personal information, subject to exceptions;
- obtain a portable copy of personal information;
- opt out of the sale or sharing of personal information;
- opt out of targeted advertising or certain profiling;
- limit certain uses or disclosures of sensitive personal information;
- withdraw consent where processing is based on consent;
- appeal a decision we make concerning a privacy request; and
- receive equal service and not be discriminated against for exercising a privacy right.
Categories of Personal Information
The following table describes categories of personal information we may have collected and disclosed for business purposes during the preceding 12 months. The categories are based on terminology used in California law and may overlap.
| Category | Examples | Sources | Purposes and recipients |
| --- | --- | --- | --- |
| Identifiers | Name, address, email, phone number, IP address, account ID, cookie ID, advertising ID | You, your device, Shopify, advertising partners | Orders, accounts, support, security, marketing; disclosed to commerce, payment, fulfillment, shipping, app, and advertising providers |
| Customer records | Contact, billing, shipping, and payment-related information | You and payment providers | Checkout, payment, fulfillment, support, recordkeeping; disclosed to Shopify, payment providers, Printful, and carriers |
| Commercial information | Products viewed or purchased, cart activity, order history, transaction value, returns | You, Shopify, Printful, advertising tools | Order fulfillment, analytics, personalization, advertising, support |
| Internet or network activity | Browsing, searches, clicks, pages, referrers, device and browser data | Your device, cookies, pixels, APIs | Site operation, analytics, security, measurement, and targeted advertising |
| Approximate geolocation | General location inferred from IP address | Your device and technology providers | Fraud prevention, localization, analytics, advertising, and delivery estimates |
| User-generated content | Reviews, ratings, display name, photographs, videos | You | Publishing reviews, social proof, customer support, brand promotion where authorized |
| Inferences | Likely product, style, or shopping interests | Browsing and commercial activity | Personalization, analytics, audience creation, and advertising |
| Sensitive personal information | Account credentials and payment information handled primarily by service providers | You and payment/account providers | Authentication, payment, security, and legal compliance; not used by us to infer characteristics about you |
We do not knowingly sell or share the personal information of consumers under 16 for targeted advertising. Our Services are not intended for children under 13.
Exercising Your Rights
To submit a privacy request, email **info@vistina.ch** with the subject line **Privacy Request**, or use **https://vistina.de/pages/contact-us**.
Describe the right you wish to exercise and provide enough information for us to identify the relevant records. We may need to verify your identity before completing a request. We will use information supplied for verification only to evaluate and respond to the request. We may deny or limit a request where permitted by law, including where we cannot reasonably verify identity or must retain information to complete a transaction, comply with law, prevent fraud, protect rights, or establish legal claims.
Where applicable, you may use an authorized agent to submit a request. We may require proof of the agent's authority and may ask you to verify your identity directly with us.
If we deny a request and applicable law provides a right to appeal, you may appeal by emailing **info@vistina.ch** with the subject line **Privacy Appeal**. Explain the decision you are appealing and provide the original request details.
14. California Online Privacy Notice
California residents may review the categories of personal information, sources, purposes, disclosures, and choices described throughout this Privacy Policy.
As explained above, we do not sell personal information for money, but certain advertising and analytics disclosures may constitute "sharing" or a "sale" under California law. Where applicable, California residents may opt out through **https://vistina.de/pages/data-sharing-opt-out** or a recognized Global Privacy Control signal.
California's "Shine the Light" law may allow certain residents to request information about disclosures of personal information to third parties for those third parties' own direct-marketing purposes. Requests may be sent to **info@vistina.ch** with the subject line **California Privacy Request**.
15. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide Services, fulfill orders, maintain business and tax records, resolve disputes, prevent fraud, enforce agreements, and comply with legal obligations.
Retention periods vary by data type and context. For example:
- order, transaction, tax, and accounting records may be retained for 10 years;
- customer-service and claim records are retained for as long as needed to resolve the matter and manage legal risk;
- marketing information is retained until you unsubscribe or we no longer need it, subject to suppression records used to respect your opt-out;
- cookie and advertising data is retained according to the settings and policies of the relevant technology provider; and
- public reviews may remain published until removed, the review feature is discontinued, or deletion is required by law.
We may retain information longer where required by law, needed for legal claims, or necessary for security and fraud prevention. We may also anonymize information so that it can no longer reasonably identify you.
16. Security
We use reasonable administrative, technical, and organizational measures designed to protect personal information. However, no internet transmission, platform, or storage system can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of any account credentials and for notifying us if you believe your account or interaction with us has been compromised.
17. International Data Transfers
VISTINA is based in Switzerland, while our customers are in the United States and our providers operate internationally. Personal information may be transferred to, stored in, or processed in the United States, Canada, Mexico, countries in Europe, and other countries where our service providers or their subprocessors operate.
Those countries may have privacy laws that differ from the laws where you live. Where required, we rely on recognized legal mechanisms and contractual safeguards for cross-border transfers. You may contact us for additional information about applicable safeguards, subject to legal and confidentiality limitations.
18. Children's Privacy
The Services are not directed to children under 13, and children under 13 are not permitted to place orders or submit personal information through the Services. We do not knowingly collect personal information from children under 13.
If you are a parent or legal guardian and believe a child under 13 has provided personal information to us, contact **info@vistina.ch**. If we learn that we collected such information without legally valid authorization, we will take reasonable steps to delete it.
We do not knowingly sell or share the personal information of consumers under 16 for targeted advertising.
19. Third-Party Links and Social Media
The Services may contain links to third-party websites, social platforms, or services. We do not control those parties and are not responsible for their privacy, security, content, or practices. Review the privacy notice of any third party before providing information.
When you interact with VISTINA through Facebook, Instagram, TikTok, Pinterest, or another social platform, the platform processes information under its own terms and privacy notice.
20. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our practices, technologies, providers, legal obligations, or business operations. We will post the revised version on the Site and update the effective date. Where required by law, we will provide additional notice or obtain consent.
21. Contact Us
Questions or requests concerning this Privacy Policy or our handling of personal information may be sent to:
Rikardo Stoilov
Doing business as VISTINA
8730 Uznach
St. Gallen
Switzerland
Email: info@vistina.ch
If your communication concerns a privacy right, use the subject line **Privacy Request** and identify the US state in which you reside.