Privacy policy
Last updated: October 5, 2026
1. Controller
The controller of your data is Bombillas de Alpaca, based in Switzerland. Contact: [email protected].
2. Purchase data
When you buy, we store your name, email, phone number, shipping and billing address, the products purchased and the optional order note. We use them to process and ship your order, to contact you (including on WhatsApp, for example to confirm a design) and to meet our accounting obligations.
3. Payments
Payments are processed by Stripe (Stripe Payments Europe Ltd. and Stripe, Inc.), which handles payment data under its own responsibility. We never receive your full card details.
4. Emails
Confirmation emails are sent through Resend (Resend, Inc., USA).
5. Hosting
The website is hosted by Cloudflare (Cloudflare, Inc.), which processes technical data such as your IP address to deliver the page and protect it from abuse. When you proceed to payment, Cloudflare Turnstile checks that you are not a bot by analysing technical browser data, without advertising cookies.
6. Analytics
We use Google Analytics 4 (Google Ireland Ltd.) to understand how the site is used: page views, clicks and checkout steps. You can prevent this with a content blocker or the Google Analytics opt-out browser add-on.
7. Cart
Your cart is stored only in your browser (local storage) until you complete the purchase or empty it.
8. International transfers
Some of these providers process data in the United States, with the safeguards required by law, such as the Data Privacy Framework or standard contractual clauses.
9. Retention
We keep order data for as long as Swiss accounting law requires (10 years). Other data is kept only as long as necessary.
10. Your rights
You can request access, rectification, erasure, restriction of or objection to processing, and data portability by writing to [email protected]. You can also lodge a complaint with the data protection authority in your country or with the Swiss Federal Data Protection and Information Commissioner (FDPIC).