Privacy Policy

This English version is provided for convenience. Only the German version is legally binding.

Last updated: 13 October 2026

This policy explains which personal data we process in the LuminLab online shop. It is based on the Swiss Federal Act on Data Protection (FADP). For customers in Germany and Austria, the EU General Data Protection Regulation (GDPR) also applies.

1. Controller

Misimi Skincare, owner Liridon Misimi, Waldaustrasse 17, 9000 St. Gallen, Switzerland
Email: Luminlab@proton.me

2. Data we process

Orders: name, delivery and billing address, email, phone number (if provided), ordered products, payment method. We do not see full card details.
Customer account: your details and orders, if you create an account.
Newsletter: email address and your consent, if you sign up.
Contact: the content of your enquiry by email or form.
Website use: IP address, device, browser, pages visited and cookies.

3. Purposes and legal bases

We process data to handle orders, deliver them and process payments (performance of contract, Art. 6(1)(b) GDPR), to comply with statutory retention obligations (Art. 6(1)(c) GDPR), to operate the shop securely, improve it and prevent fraud (legitimate interest, Art. 6(1)(f) GDPR), and for the newsletter and non-essential cookies only with your consent (Art. 6(1)(a) GDPR). Under the FADP, these purposes apply accordingly.

4. Who we share data with

We do not sell data. We only share it with service providers we need for the shop:

Shopify (Shopify International Ltd., Ireland, and Shopify Inc., Canada): shop platform, checkout, payment processing, newsletter. Locations: Ireland, Canada, USA.
Shipping providers (e.g. Swiss Post and its partners in the destination country): shipping, customs clearance and tracking. Locations: Switzerland, Germany, Austria.
Payment providers: processing your payment. Locations: Switzerland / EU.
Proton AG: email communication. Location: Switzerland.

According to the European Commission, Switzerland provides an adequate level of data protection. For recipients in countries without equivalent data protection, in particular the USA, we rely on the European Commission's standard contractual clauses or on the EU-US or Swiss-US Data Privacy Framework, where the provider is certified.

5. Cookies and analytics

The shop uses cookies that are necessary for the cart and checkout. We only set statistics and marketing cookies with your consent via the cookie banner. You can withdraw your consent at any time via the cookie banner.

6. How long we store data

We keep order and accounting data for ten years, as required by law (Art. 958f Swiss Code of Obligations). We delete newsletter data after you unsubscribe. We delete other data as soon as we no longer need it.

7. Your rights

You can request information about your data as well as its correction, deletion, restriction of processing or release (data portability). You can object to processing based on legitimate interest and withdraw consent at any time with effect for the future, for example via the unsubscribe link in the newsletter. To do so, write to us at Luminlab@proton.me.

You can lodge a complaint with a data protection supervisory authority: in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC), in Germany or Austria with the supervisory authority of your place of residence (in Austria the Data Protection Authority, in Germany the data protection authority of your federal state).