Privacy Policy

1. Who is responsible (controller)

The controller responsible for the personal data processed in connection with this Store (“1291 Supply Co.”, “we”, “us”) is:

Overclock GmbH
Blegistrasse 11a
6340 Baar, Zug
Switzerland
Email: hello@1291supply.ch

2. Scope & applicable law

This policy explains how we collect, use, share and protect your personal data when you visit 1291supply.ch or place an order. We process personal data in accordance with the revised Swiss Federal Act on Data Protection (revFADP / nFADP) and, where you are located in the European Economic Area, the EU General Data Protection Regulation (GDPR).

3. Our platform & merchant of record

4. What data we collect

We (directly or via Fourthwall as our platform) collect:

• Identity & contact data: name, email address, and, for delivery, your shipping address and phone number.
• Order data: the products you ordered, order value, order and delivery status, and correspondence with us.
• Payment data: handled by our payment processors. We do not receive or store your full card number; we may see limited confirmation data such as the payment status and card brand/last digits.
• Technical & usage data: IP address, device/browser type, pages viewed and referring URLs, collected via cookies and similar technologies (see section 8).
• Marketing data: if you subscribe, your email address and your consent and preference status.

5. Why we process it & legal bases

We process your personal data for the following purposes, on the following legal bases (GDPR Art. 6; corresponding revFADP grounds):

Processing and fulfilling your order

Including production, shipping, payment, tax and customer support. Legal basis: performance of a contract (GDPR Art. 6(1)(b)).

Tax, accounting & legal compliance

Including VAT/sales-tax remittance handled by Fourthwall/Avalara and record-keeping. Legal basis: legal obligation (GDPR Art. 6(1)(c)).

Customer service & handling defects, returns and refunds

Legal basis: performance of a contract and our legitimate interest (GDPR Art. 6(1)(f)) in supporting customers.

Security, fraud prevention & improving the Store

Legal basis: legitimate interest (GDPR Art. 6(1)(f)) in running a safe, functional store.

Marketing & newsletters

Only where you have opted in. Legal basis: consent (GDPR Art. 6(1)(a)), which you may withdraw at any time.

Optional analytics cookies

Legal basis: consent where required (see section 8).

6. Processors & sub-processors

We share personal data only as needed to run the Store, with providers that process it on our behalf or as merchant of record:

• Fourthwall, Inc. — e-commerce platform, merchant of record, order and fulfilment handling.
• Fourthwall’s production & fulfilment partners (US / UK / EU) — to print and ship your order; they receive your name and shipping address.
• Payment processors (e.g. Stripe, PayPal) — to process payment securely.
• Avalara — to calculate sales tax and VAT.
• Shipping carriers — to deliver your order and provide tracking.
• Email / newsletter provider — to send transactional and (with consent) marketing emails.
• Hosting & analytics providers — to host the website and, subject to consent, understand usage.

We do not sell your personal data.

7. International data transfers

Because Fourthwall is based in the United States and production partners operate in the US, UK and EU, your personal data may be transferred outside Switzerland and the EEA. Where data is transferred to a country without an adequacy decision, we rely on appropriate safeguards — such as the EU Standard Contractual Clauses (and their Swiss addendum) and, where applicable, the EU–US / Swiss–US Data Privacy Framework — to protect your data. You may request more information about these safeguards using the contact details below.

8. Cookies & analytics

We use essential cookies that are strictly necessary for the site and checkout to function (e.g. cart and session). These do not require consent. We may also use optional analytics cookies to understand how the Store is used; these are set only where you consent via our cookie banner, and you can withdraw consent at any time through the banner or your browser settings. Payment and checkout processing by Fourthwall and its processors may also set cookies necessary for that process.

9. How long we keep data

We keep personal data only as long as necessary for the purposes above. Order and transaction records are retained for the periods required by Swiss accounting and tax law (generally up to 10 years). Marketing data is kept until you unsubscribe or withdraw consent. Analytics data is retained for the period set for the relevant tool. Data no longer needed is deleted or anonymised.

10. Your rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Erase your data (“right to be forgotten”), where applicable;
• Restrict or object to certain processing, including direct marketing;
• Data portability — receive your data in a structured, machine-readable format;
• Withdraw consent at any time, without affecting prior lawful processing;
• Lodge a complaint with a supervisory authority.

In Switzerland, the competent authority is the Federal Data Protection and Information Commissioner (FDPIC). In the EEA, you may contact the supervisory authority in your country of residence. To exercise any right, email hello@1291supply.ch; we may ask you to verify your identity.

11. Security

We and our processors apply appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access, including encryption in transit and access controls. No method of transmission over the internet is completely secure, but we work to protect your data using industry-standard measures.

12. Children

The Store is not directed to children, and we do not knowingly collect personal data from children under 16. If you believe a child has provided us personal data, please contact us and we will delete it.

13. Swiss / EU contact & representative

For any privacy matter, our primary contact is hello@1291supply.ch. As a Switzerland-based controller, our Swiss contact point is Overclock GmbH, Blegistrasse 11a, 6340 Baar, Zug, Switzerland. We have not appointed a separate data-protection representative; please direct all data-protection requests to the contact above.

14. Changes to this policy

We may update this policy from time to time. The current version is always the one published here, shown by the “Last updated” date above. Material changes will be highlighted where appropriate.

15. How to contact us

For any question or request regarding your personal data, email hello@1291supply.ch or write to Overclock GmbH, Blegistrasse 11a, 6340 Baar, Zug, Switzerland.