Privacy policy
Effective Date: August 11, 2026
Last Updated: August 11, 2026
This Privacy Policy explains how ViSand Wick, a sole proprietorship operating in Switzerland under the brand name Cruzz ("Cruzz," "we," "us," or "our"), collects, uses, stores, discloses, and otherwise processes personal information when you visit or use our website, create an account, place an order, purchase our products, use our services, submit a custom or personalized design request, communicate with us, or otherwise interact with our online store.
Our website is operated using Shopify. Products are produced and fulfilled through third-party print-on-demand and fulfillment services, including Gelato. Payments are processed through third-party payment providers, including Shopify Payments and PayPal.
This Privacy Policy applies to our website and related online services, including:
Website: https://cruzzcore.com/
We process personal information in accordance with applicable data protection laws, including applicable Swiss data protection law and, where applicable, the General Data Protection Regulation ("GDPR") and other data protection laws applicable to customers in other jurisdictions.
1. DATA CONTROLLER
The data controller responsible for the processing of personal information described in this Privacy Policy is:
ViSand Wick
Sole Proprietorship
Brand: Cruzz
Switzerland
Business address: Schwellbrunnerstrasse 74, 9100 Herisau, Switzerland
Email: cruzzcore@protonmail.com
Telephone: +41 76 205 98 19
Website: https://cruzzcore.com/
For questions regarding the processing of personal information or to exercise applicable data protection rights, you may contact us using the information above.
2. PERSONAL INFORMATION WE COLLECT
When we use the term "personal information" or "personal data," we mean information that identifies or can reasonably be linked to an identified or identifiable person.
Depending on how you interact with our Services, we may collect and process the following categories of personal information.
2.1 Contact and identification information
This may include your first and last name, email address, billing address, shipping address, country and postal code, telephone number where provided or required for delivery, and other contact information you voluntarily provide.
A telephone number is not necessarily required for every order. However, certain delivery methods, fulfillment partners, or shipping providers may require a telephone number for delivery purposes.
2.2 Account information
If you create a customer account, we may process information associated with your account, including your name, email address, login credentials, account preferences, saved addresses, order history, and other information associated with your customer account.
You are responsible for maintaining the confidentiality of your account credentials.
2.3 Order and transaction information
When you place an order, we may process information including the products purchased, product quantities, product sizes and colors, order number, order date, order status, shipping information, billing information, return, refund or replacement information, communications concerning your order, transaction details, payment method, and payment confirmation.
2.4 Payment information
Payments are processed through third-party payment providers. Depending on the payment method selected, these may include Shopify Payments, PayPal, and other payment methods made available through our Shopify store.
We generally do not store complete payment card numbers on our own systems. Payment information may be processed by the relevant payment provider in accordance with its own privacy policy, security requirements, and applicable law.
The specific information processed may vary depending on the payment method selected.
2.5 Custom and personalized product information
If you request a custom or personalized product, we may process information you provide for the purpose of creating and fulfilling your order.
This may include names, initials, messages, text, design instructions, color preferences, placement instructions, artwork, logos, images, photographs, design references, and other creative concepts or specifications.
Such information may be used to review, create, approve, produce, and fulfill the requested product.
2.6 Customer communications
When you contact us, we may process your name, email address, telephone number or other contact information, order information, the contents of your communication, and information necessary to respond to your request.
2.7 Technical and device information
When you access our website, certain information may be collected automatically, including your IP address, browser type, device type, operating system, language preferences, approximate location derived from technical information, referring website, pages visited, date and time of access, session information, cookie information, and other technical information generated through use of the website.
The exact information collected may depend on your device, browser, Shopify configuration, cookies, applications, integrations, and other technologies active on our website.
3. SOURCES OF PERSONAL INFORMATION
We may collect personal information directly from you, automatically through your use of our website, through service providers, or through third parties where permitted by applicable law.
Information may be collected directly when you create a customer account, place an order, complete checkout, contact us, submit a custom design request, upload or provide design materials, submit a form, communicate with us, or voluntarily provide information.
Certain information may also be collected automatically through cookies, log files, pixels, tags, SDKs, and similar technologies used by Shopify, our website, or integrated services, where applicable.
We may also receive or process information through companies that provide services supporting our business, including Shopify, Gelato, payment providers, shipping providers, hosting providers, analytics providers, advertising providers, security providers, customer-support providers, and other necessary service providers.
Where permitted by applicable law, we may receive information from third parties, including payment providers, fraud-prevention services, shipping providers, advertising or analytics providers, or other service providers.
4. HOW WE USE PERSONAL INFORMATION
Depending on how you interact with us, we may use personal information to provide and operate our Services, process and fulfill orders, process payments, provide customer support, arrange production and fulfillment, arrange shipping and delivery, process returns, refunds and replacements, provide requested products and services, maintain customer accounts, maintain website functionality, remember relevant account or shopping preferences, and provide transaction-related communications.
For custom and personalized orders, we may use personal information to receive customer design requirements, review custom requests, create customized designs, communicate regarding design approvals, produce personalized products, and fulfill customized orders.
We may use information to improve our website, products, services and shopping experience; understand customer preferences; analyze website and shopping activity; measure the effectiveness of our Services; and maintain and develop our Services.
We may use personal information to respond to inquiries, provide customer support, communicate regarding orders and custom designs, and provide important service-related information.
We may also process information for security and fraud-prevention purposes, including protecting our website, preventing fraud, detecting suspicious transactions, preventing abuse, protecting customers and our business, and maintaining the security of our systems.
We may process personal information where necessary to comply with legal obligations, tax and accounting requirements, lawful requests from authorities, legal claims, our Terms & Conditions and other policies, and to protect our legal rights and interests.
We may use analytics services, including services such as Google Analytics, where such services are implemented and permitted by applicable law. If analytics technologies requiring consent are used, the necessary consent or other legally required mechanism will be obtained before such processing where required.
5. MARKETING, PROMOTIONAL COMMUNICATIONS AND ADVERTISING
We may use personal information for marketing and promotional purposes where permitted by applicable law.
This may include promotional emails, promotional communications, product announcements, special offers, marketing messages, personalized marketing, advertising communications, and other promotional activities.
Where applicable law requires prior consent, we will obtain the required consent before sending such communications.
In Switzerland, commercial email advertising will generally only be sent where the recipient has provided the required consent, subject to applicable legal exceptions, including certain communications concerning similar products or services to existing customers.
Marketing communications will provide an appropriate method to object to or unsubscribe from further promotional communications where required by applicable law.
We may also use personal information for advertising and marketing purposes, including personalized or targeted advertising, where permitted by applicable law.
This may involve advertising cookies, pixels, tags, advertising identifiers, conversion tracking, retargeting technologies, similar advertising technologies, and third-party advertising platforms.
We may work with advertising and marketing partners to display advertisements that may be more relevant to you based on your interaction with our website, products, services, or other online activities, where permitted by applicable law.
Where applicable law requires consent before using such technologies, we will obtain the required consent before activating the relevant processing.
Depending on your jurisdiction, you may have rights to opt out of certain forms of targeted advertising, sale, or sharing of personal information.
6. LEGAL BASES FOR PROCESSING
Depending on the applicable law and circumstances, we may rely on performance of a contract, legal obligations, consent, or legitimate interests as legal bases for processing personal information.
We may process information where necessary to perform a contract with you, including processing and fulfilling an order, processing payment, producing and delivering products, handling returns, refunds and replacements, providing order-related customer support, and providing requested custom or personalized products.
We may process information where necessary to comply with legal, tax, accounting, regulatory, or other legal requirements.
Where required by applicable law, we process personal information based on your consent. You may withdraw consent at any time where applicable. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Where permitted by applicable law, we may process personal information where necessary for our legitimate interests, including operating and improving our business, maintaining website security, preventing fraud, improving products and services, customer communication, marketing and advertising where legally permitted, business administration, and protecting our legal rights.
When relying on legitimate interests, we consider the applicable legal requirements and the rights and interests of affected individuals.
7. COOKIES AND SIMILAR TECHNOLOGIES
Our Shopify-powered website uses cookies and similar technologies.
The technologies used may change over time depending on our Shopify configuration, applications, integrations, service providers, and business activities.
Cookies and similar technologies may be used for essential website functions, preferences and functionality, analytics, advertising, marketing, security, fraud prevention, and other purposes permitted by applicable law.
Essential technologies may be necessary for website operation, shopping cart functionality, checkout, security, authentication, customer account functionality, fraud prevention, and basic website functionality.
Preference and functionality technologies may be used to remember settings and preferences and improve website functionality and the user experience.
Where implemented, analytics technologies may be used to understand website usage, measure traffic, analyze user interactions, improve website performance, improve our Services, and measure marketing effectiveness. Such services may include Google Analytics or similar services.
Where implemented, advertising technologies may be used to measure advertising effectiveness, display relevant advertisements, retarget visitors, measure conversions, personalize advertising, and support marketing campaigns.
Shopify may use cookies and similar technologies to provide, secure, maintain, and improve its platform and related services.
Where applicable law requires consent for non-essential cookies or similar technologies, we will provide an appropriate consent mechanism.
You may manage certain cookies through your browser settings and, where available, through the privacy or cookie controls provided on our website. Disabling certain cookies may affect website functionality.
8. PRIVACY PREFERENCE SIGNALS AND GLOBAL PRIVACY CONTROL
Depending on applicable law and our technical capabilities, we may recognize privacy preference signals such as Global Privacy Control ("GPC") where required or appropriate.
Where a legally recognized privacy preference signal applies to you, we may process the signal as an applicable request to opt out of certain forms of data processing, sale, sharing, targeted advertising, or other processing, depending on the requirements of the jurisdiction in which you are located.
The specific effect of a privacy preference signal may depend on applicable law, the browser or device used, and our technical configuration.
We may update our technical implementation of privacy preference signals as legal requirements and available technologies develop.
9. THIRD-PARTY SERVICE PROVIDERS
We use third-party service providers to operate and support our business.
Depending on the service involved, these may include Shopify as our e-commerce platform and website infrastructure provider; Gelato as our print-on-demand production and fulfillment provider; Shopify Payments and PayPal as payment providers; shipping and delivery providers; production partners; fulfillment providers; hosting and IT providers; analytics providers; advertising and marketing providers; customer-support and communication providers; fraud-prevention and security providers; and other service providers necessary to operate our business.
Third-party providers may process personal information to the extent necessary to provide their services or for their own purposes where permitted by applicable law.
The privacy practices of third-party providers are governed by their respective privacy policies and terms.
10. SHOPIFY
Our website is hosted and operated using Shopify.
Shopify provides the e-commerce infrastructure that enables us to operate our online store, including products, customer accounts, checkout, orders, payments, security, website functionality, analytics, and store functionality where enabled.
Information submitted through our website may therefore be processed by Shopify and by service providers engaged by Shopify.
Depending on the service involved, Shopify may process personal information on our behalf or may process certain information for its own purposes as an independent controller.
11. GELATO AND PRINT-ON-DEMAND FULFILLMENT
Our products are produced and fulfilled using Gelato and its production and fulfillment network.
When an order is placed, information necessary to manufacture and deliver the product may be transmitted to Gelato and relevant production and fulfillment partners.
This information may include customer name, shipping address, email address, telephone number where required, order details, product specifications, customization information, design files, and customer-provided artwork or content where necessary for production.
Because our store serves customers internationally, fulfillment may take place through production facilities and partners located in different countries.
12. PAYMENT PROCESSING
Payments are processed through third-party payment providers.
Our currently available payment providers may include Shopify Payments, PayPal, and other payment methods made available through our Shopify store.
Shopify Payments may process payment and transaction information necessary to authorize and complete payments, prevent fraud, and comply with legal requirements.
Where PayPal is selected as a payment method, PayPal may process information necessary to authorize and complete the transaction, prevent fraud, handle disputes, and comply with legal requirements.
Other payment methods may become available in the future.
Payment providers may process certain personal information as independent controllers for specific purposes.
We do not generally store complete payment card numbers on our own systems.
13. SHIPPING AND DELIVERY
To fulfill and deliver orders, we may share necessary customer information with Gelato, production partners, fulfillment providers, shipping carriers, postal services, courier services, and other logistics providers.
The information shared may include name, shipping address, email address, telephone number where necessary, order information, and product or fulfillment information.
Because we sell products internationally, shipping and fulfillment may involve service providers located in countries outside Switzerland and outside the customer's country of residence.
14. CUSTOM AND PERSONALIZED PRODUCTS
Cruzz offers products that may be customized or personalized according to customer requirements.
Customers may provide names, text, messages, artwork, logos, images, photographs, design references, color preferences, placement instructions, and other design specifications.
We process this information as necessary to review the customer's request, create the requested design, communicate with the customer, obtain design approval where applicable, produce the customized product, and fulfill and deliver the order.
Where necessary, customer-provided design information may be shared with Gelato and relevant production or fulfillment providers.
Customers are responsible for ensuring that content they submit does not unlawfully infringe the rights of third parties.
15. CUSTOMER-PROVIDED CONTENT
If you submit images, artwork, logos, text, photographs, or other materials to us for a custom or personalized product, we may process and transmit such materials to service providers where necessary to fulfill your request.
Customer-provided materials are used for the purposes necessary to provide the requested custom or personalized service.
We do not use customer-provided materials for unrelated purposes unless permitted by applicable law or otherwise agreed with you.
You should not submit sensitive personal information through custom-design forms unless it is necessary for the requested service.
16. DISCLOSURE OF PERSONAL INFORMATION
We may disclose personal information to third parties where necessary for the purposes described in this Privacy Policy and where permitted by applicable law.
This may include Shopify and relevant Shopify service providers; Gelato and production or fulfillment partners; payment providers; shipping and delivery providers; hosting and IT providers; analytics providers; advertising and marketing providers; fraud-prevention and security providers; customer-support providers; and other service providers necessary to operate our business.
We may also disclose information where you request or authorize us to do so, where disclosure is necessary to comply with a legal obligation, to establish, exercise, or defend legal claims, in connection with a merger, sale, restructuring, bankruptcy, or other business transaction, or where necessary to protect our rights, property, security, customers, or other persons.
Depending on applicable law, certain disclosures may constitute "sale," "sharing," or similar regulated activities.
Where applicable law provides a right to opt out of such processing, we will provide the required mechanism.
17. INTERNATIONAL DATA TRANSFERS
Because Cruzz serves customers worldwide and uses international service providers, personal information may be transferred to, stored in, or processed in countries outside Switzerland and outside the country in which you reside.
Such transfers may occur in connection with Shopify, Gelato, Shopify Payments, PayPal, shipping providers, IT and hosting providers, analytics providers, advertising providers, and other service providers necessary to operate our business.
Where applicable law requires safeguards for international data transfers, we may use appropriate mechanisms, including adequacy decisions, Standard Contractual Clauses, contractual safeguards, or other legally recognized transfer mechanisms.
For transfers from Switzerland, we will apply safeguards required or recognized under applicable Swiss data protection law.
For transfers involving the European Economic Area or United Kingdom, where applicable, we may rely on recognized transfer mechanisms such as adequacy decisions or Standard Contractual Clauses.
Where required by applicable law, we will provide information regarding the relevant destination countries and applicable safeguards.
18. DATA RETENTION
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.
The applicable retention period depends on the nature of the information, the purpose for which it was collected, our legal and contractual obligations, accounting and tax requirements, the need to establish, exercise, or defend legal claims, and legitimate business requirements.
Certain transaction, accounting, tax, and contractual information may need to be retained for longer periods where required by law.
Customer account information may be retained while the account remains active or as otherwise required or permitted by applicable law.
When personal information is no longer required, we will delete, anonymize, or otherwise securely dispose of it where appropriate and legally permissible.
19. DATA SECURITY
We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, disclosure, or destruction.
Depending on the service involved, security measures may include encryption in transit, access controls, authentication, security monitoring, restricted access to personal information, and security measures implemented by our third-party service providers.
However, no method of transmission or electronic storage can be guaranteed to be completely secure.
20. CHILDREN'S PRIVACY
Our Services are not specifically directed toward children.
We do not knowingly collect personal information from children where doing so would violate applicable law.
If you believe that a child has provided us with personal information unlawfully, please contact us using the contact information provided below.
We will take appropriate steps where required by applicable law.
21. YOUR PRIVACY RIGHTS
Depending on your location and applicable law, you may have certain rights concerning your personal information.
These may include the right of access, the right to correction, the right to deletion, the right to restriction of processing, the right to data portability, the right to object, the right to withdraw consent, rights relating to certain automated decision-making and profiling, and rights to opt out of certain marketing, targeted advertising, sale, or sharing activities where applicable.
The availability and scope of these rights depend on the applicable law and your individual circumstances.
You may exercise applicable rights by contacting us using the contact details provided in Section 28.
We may need to verify your identity before processing certain requests, where permitted or required by applicable law.
22. SWITZERLAND – PRIVACY RIGHTS AND COMPLAINTS
For customers located in Switzerland, personal information is processed in accordance with applicable Swiss data protection law, including the Swiss Federal Act on Data Protection (FADP).
Depending on the circumstances, you may have rights to request information about whether and how your personal data is processed, request access to personal information concerning you, request correction of inaccurate personal information, request deletion or destruction of personal information where legally applicable, object to certain processing activities where applicable, and exercise other rights provided by applicable Swiss law.
To exercise your rights, please contact us using the contact details in Section 28.
We may need to verify your identity before processing your request.
Complaints in Switzerland
If you have a concern or complaint regarding our processing of your personal information, we encourage you to contact us first so that we can review and address the matter.
Where applicable, you may also contact the Federal Data Protection and Information Commissioner (FDPIC/EDÖB), Feldeggweg 1, 3003 Bern, Switzerland.
The FDPIC is the competent federal supervisory authority for data protection in Switzerland.
23. EUROPEAN UNION AND EEA – GDPR RIGHTS AND COMPLAINTS
Where the GDPR applies to our processing of your personal information, you may have additional rights under the GDPR.
These may include the right to be informed, the right of access, the right to rectification, the right to erasure, the right to restriction of processing, the right to data portability, the right to object, the right to withdraw consent, and rights concerning automated decision-making and profiling where applicable.
You may object to certain processing activities, including certain direct marketing activities, where provided by applicable law.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Complaints in the EU/EEA
If you believe that our processing of your personal information violates applicable data protection law, you may first contact us using the contact details in Section 28.
Where the GDPR applies, you may also have the right to lodge a complaint with a competent data protection supervisory authority in the EU/EEA country of your habitual residence, place of work, or the place of the alleged infringement, as applicable.
You are not required to contact us first before exercising a right to lodge a complaint where applicable law provides otherwise.
24. UNITED STATES – PRIVACY RIGHTS AND COMPLAINTS
Depending on your location and whether applicable U.S. state privacy laws apply to our business, certain U.S. state laws may provide consumers with additional privacy rights.
Depending on the applicable state law, these may include rights to know what personal information is collected, access personal information, correct inaccurate personal information, delete personal information, obtain information about categories of personal information disclosed to third parties, opt out of certain sales or sharing of personal information, opt out of certain targeted advertising, limit certain uses of sensitive personal information, obtain information about profiling or automated decision-making where applicable, and exercise applicable privacy rights without unlawful discrimination.
The availability and scope of these rights depend on the applicable state law and whether that law applies to our business.
Because our use of advertising, analytics, and similar technologies may change over time, the specific privacy practices applicable to a particular user may also depend on the technologies and services active on our website.
U.S. privacy requests
If a U.S. privacy law applies to you and provides you with a privacy right, you may contact us using the contact information in Section 28.
We will process applicable requests in accordance with the law applicable to the request.
Complaints in the United States
If you have a concern regarding our privacy practices, you may first contact us directly.
Where applicable law provides a right to lodge a complaint with a governmental authority, you may also contact the relevant U.S. federal or state authority responsible for privacy or consumer protection in your jurisdiction.
The appropriate authority may depend on the state in which you reside and the specific law applicable to your request.
25. THIRD-PARTY WEBSITES AND LINKS
Our website may contain links to third-party websites, platforms, applications, or services.
We are not responsible for the privacy practices, security, or content of third-party websites.
You should review the privacy policies and terms of any third-party service before providing personal information to that service.
Our inclusion of a link to a third-party website does not necessarily constitute an endorsement of that website or its operator.
26. BUSINESS TRANSFERS
If Cruzz or substantially all of its assets are transferred, sold, reorganized, merged, or otherwise involved in a business transaction, personal information may be transferred as part of that transaction where permitted by applicable law.
Any such transfer will be handled in accordance with applicable legal requirements.
27. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes to our business, services, technology, service providers, data-processing practices, or applicable legal and regulatory requirements.
When we make changes, we will update the "Last Updated" date at the beginning of this Privacy Policy.
Where required by applicable law, we will provide additional notice regarding material changes.
28. CONTACT
If you have questions about this Privacy Policy, our privacy practices, your personal information, or the exercise of your privacy rights, please contact us:
ViSand Wick
Brand: Cruzz
Business type: Sole Proprietorship
Country: Switzerland
Business address: Schwellbrunnerstrasse 74, 9100 Herisau, Switzerland
Email: cruzzcore@protonmail.com
Telephone: +41 76 205 98 19
Website: https://cruzzcore.com/
Effective Date: August 11, 2026
Last Updated: August 11, 2026