Privacy policy
Last updated: 31 October 2026
This policy explains how Starfall handles your personal information. It follows the Swiss Federal Act on Data Protection (nFADP / nLPD) and the Australian Privacy Principles.
Who is responsible
Prevalya Sàrl, Rue Adrien-Lachenal 26, 1207 Genève, Switzerland (UID CHE-272.977.633), operator of the Starfall brand. Contact for any privacy question: hello@starfalljewellery.com.
What we collect
- Order information: name, email, delivery and billing address, phone number if you give it, items ordered, gift note, order history.
- Payment information: handled by our payment providers. We never see or store your full card number.
- Messages: what you send us by email or through the contact form, including photos for a claim.
- Newsletter: your email address and your consent, if you sign up.
- Browsing data: device, browser, pages viewed, approximate location and cookies, as described below.
Why we use it
- To process, ship and support your order, and to handle claims and the warranty (performance of our contract with you).
- To answer your messages.
- To send our newsletter, only if you have signed up. You can unsubscribe at any time from any email.
- To measure and improve our site and advertising, with cookies where you have allowed them.
- To prevent fraud and meet our legal and accounting obligations.
Who we share it with
- Shopify (online store and checkout; Shopify International Limited, Ireland, with processing in Canada, the United States and other countries).
- Payment provider: Shopify Payments (operated with Stripe), for card, Apple Pay and Google Pay payments.
- Fulfilment partners and carriers, which prepare, ship and deliver your order and provide tracking. They receive your name, delivery address, phone number if given, and the items ordered.
- Google (Google Analytics, Google Ads, Merchant Center), to measure visits and advertising, where you have allowed it.
- Microsoft Clarity (Microsoft Corporation, United States), to understand how visitors use our site through heatmaps and recordings of pages viewed, clicks and scrolling, where you have allowed it.
- Infomaniak (Switzerland), which hosts our email.
We do not sell your personal information.
Where your information is processed
Your information is processed in Australia, Canada, China, countries of the European Union, Switzerland and the United States. Some of these countries do not offer a level of protection recognised as adequate by Switzerland or Australia. Where we send information to them, we do so because it is necessary to perform our contract with you (for example, to ship your order), or under contractual safeguards offered by our providers.
Cookies
We use cookies that are needed for the store and checkout to work, and, with your consent where required, cookies for analytics and advertising. You can change your choice at any time in the cookie banner or in your browser settings.
How long we keep it
Order and accounting records: 10 years, as required by Swiss law. Messages and claims: up to 3 years after the last exchange. Newsletter: until you unsubscribe. Analytics data: according to the retention settings of each provider, 14 months at most for Google Analytics.
Your rights
You can ask to access, correct or delete your personal information, to receive a copy of it, or to object to its use for marketing. Write to hello@starfalljewellery.com; we answer within 30 days. If you are not satisfied with our answer, you can contact the Swiss Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch) or the Office of the Australian Information Commissioner (OAIC, www.oaic.gov.au).
Security
We use reputable providers, encrypted connections and limited access to protect your information. No system is perfectly secure; if a breach is likely to put you at risk, we will tell you and the relevant authority as required by law.
Changes
We may update this policy. The date at the top shows the latest version.