Privacy policy

Privacy Policy

Last updated: September 21, 2026

1. Who we are

Arytmo, Leonhard Rüegg (sole proprietorship), Eichbühlstrasse 36, 8004 Zürich, Switzerland, email: info@arytmo.com ("Arytmo", "we", "us") operates the online store at arytmo.com (the "Services"). We are the data controller for the personal information described in this Privacy Policy. The Services are powered by Shopify.

This Privacy Policy explains how we collect, use and disclose your personal information when you visit or buy from our store or contact us. It is designed to meet the requirements of the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR).

2. Personal information we collect

  • Contact details: name, email address and billing address.
  • Order and payment information: items you view or buy, transaction details and payment status. Card and payment details are processed by Shopify and our payment providers. We do not store full card numbers.
  • Account information: username, password and preferences, if you create an account.
  • Communications: what you write to us, for example in support requests.
  • Device and usage information: IP address, browser, device identifiers and how you use the Services, collected through cookies and similar technologies.

We collect this information directly from you, automatically through the Services, and from service providers such as Shopify and payment providers.

3. Why we use your information and on what legal basis

  • To provide the Services and fulfil your order: delivering downloads, processing payments, managing your account, handling withdrawals and refunds and providing support. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
  • To meet legal obligations: such as accounting, tax and record-keeping duties. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
  • For security and fraud prevention, and to improve the Services: Legal basis: our legitimate interests (Art. 6(1)(f) GDPR).
  • For marketing emails: We send promotional emails only with your consent or where the law otherwise allows. You can unsubscribe at any time using the link in each email. Legal basis: consent (Art. 6(1)(a) GDPR), or legitimate interests where permitted.
  • For cookies and analytics that are not strictly necessary, and for personalized advertising: We use them only with your consent, given through our cookie banner. Legal basis: consent (Art. 6(1)(a) GDPR).

Providing the information needed for an order is required to complete the purchase. We do not use automated decision-making that produces legal effects for you.

4. Who receives your information

  • Shopify and other service providers that work for us, for example hosting, payment processing, fraud prevention, analytics, email and customer support.
  • Marketing and advertising partners, only where you have consented. Shopify supports personalized advertising with third-party services. Depending on where you live, you can opt out of sharing for targeted advertising here: https://arytmo.com/pages/data-sharing-opt-out
  • Authorities and other parties where required by law, to enforce our terms, or in connection with a business transfer.

We do not sell your personal information for money.

5. Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your use of the Services in order to provide and improve them. For certain enhanced features, Shopify processes personal information as a separate controller and is responsible for handling your rights requests for those purposes. Learn more in the Shopify Consumer Privacy Policy: https://www.shopify.com/legal/privacy/app-users and via the Shopify Privacy Portal: https://privacy.shopify.com/en

6. International transfers

Your information may be processed outside Switzerland and the European Economic Area, including in countries such as Canada and the United States, where Shopify and other providers operate. Where the destination country does not offer a level of protection recognized as adequate, we rely on safeguards such as the European Commission's Standard Contractual Clauses (with the Swiss addendum where needed) or other recognized transfer mechanisms.

7. How long we keep your information

  • Order and invoice data: up to 10 years, in line with legal record-keeping obligations.
  • Account data: until you delete your account or ask us to delete it, unless we must keep it for legal reasons.
  • Support communications: up to 3 years after the matter is closed.
  • Marketing data: until you unsubscribe or withdraw consent.
  • Cookie and usage data: as described in our cookie settings.

After these periods, we delete or anonymize your data.

8. Your rights

Depending on where you live, you have the right to access your personal information, correct it, delete it, receive a copy in a portable format, and restrict or object to certain processing. Where we rely on consent, you can withdraw it at any time, without affecting processing that happened before. Where we process based on legitimate interests, you can object on grounds relating to your situation. You can opt out of marketing emails at any time.

If you visit our website with the Global Privacy Control signal enabled, we treat it as an opt-out request for targeted advertising where applicable. We do not respond to other "Do Not Track" signals. You can find more information at https://globalprivacycontrol.org/

To exercise your rights, email us at info@arytmo.com. We may need to verify your identity first. We will not discriminate against you for exercising your rights.

9. Complaints

If you have a complaint, please contact us first at info@arytmo.com. You also have the right to complain to a data protection authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC). If you live in the EEA, you can contact the authority in your country of residence. A list is available at https://edpb.europa.eu/about-edpb/about-edpb/members

10. Security

We use reasonable technical and organizational measures to protect your information. No system is completely secure, so please avoid sending sensitive information through unsecured channels.

11. Children

Our Services are not directed at children under 18, and we do not knowingly collect their personal information. If you believe a child has given us personal information, please contact us and we will delete it.

12. Third-party websites

Our Services may link to third-party websites. We are not responsible for their privacy practices, so please review their policies.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version here and change the "Last updated" date. If changes are significant, we will notify you as required by law.

14. Contact

Arytmo, Leonhard Rüegg, Eichbühlstrasse 36, 8004 Zürich, Switzerland
Email: info@arytmo.com