Privacy policy

Privacy Policy

Last updated: 11 September 2026

This policy explains which personal data we process when you visit our store mirakelita.com, buy from us, subscribe to our newsletter or contact us. It is based on the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR) and the UK GDPR.

1. Controller

Estevao Sales, sole proprietorship of Rakel Estevao, Altmannsteinstrasse 5, 8181 Höri, Switzerland (hereinafter “mirakelita” or “we”)
Email: support@mirakelita.com
Phone: +41 79 906 80 17

If you have questions about data protection or want to exercise your rights, write to us at support@mirakelita.com.

2. What data we process and why

Visiting the store. When you visit our store, our store platform Shopify processes technical data such as IP address, date and time, pages visited, browser, device and approximate location. We need this data to provide the store securely and reliably and to prevent misuse.

Orders. When you buy from us, we process your email address, your name, your billing address, your phone number if you provide it, the payment method you choose, your order details (product, language version, price, time) and the time of your consent to delivery beginning before the end of the withdrawal period. We need this data to perform the purchase contract, deliver the e-book to you by email, process the payment and meet our statutory retention obligations. We do not receive your full card details; they are processed directly by the payment provider.

Customer account. If you use a customer account, we process your email address and your orders so that you can log in and view your orders.

Contact. If you write to us by email or through the contact form, we process your details and the content of your message in order to answer your request.

Newsletter. If you sign up for our newsletter, we process your email address to send you news about our products. We only send the newsletter with your consent. You can unsubscribe at any time using the link in every email. We analyse whether our newsletters are opened and whether links in them are clicked in order to improve them.

Health context. Our e-books cover topics such as period pain and endometriosis. A purchase alone may therefore reveal something about your health, and in messages to us you may tell us about your symptoms. We treat this data with particular confidentiality, use it only to handle your order and your request, and do not share purchase data with advertising platforms. We currently do not use any third-party advertising or tracking pixels (for example from Meta, Google or TikTok).

3. Cookies, analytics and video

Our store uses cookies and similar technologies from Shopify. We need necessary cookies so that the cart, checkout and login work. In regions where this is required, for example in the EU and the United Kingdom, we only set analytics and marketing cookies with your consent via the cookie banner. You can change your choice on the “Your privacy choices” page in the footer of the store. Shopify describes the cookies it sets at https://www.shopify.com/legal/cookies.

We use Shopify's analytics function to see how our store is used, for example page views and purchases, in order to improve it.

A YouTube (Google) video is embedded on our home page. It only loads when you play it. Only then is data such as your IP address transmitted to Google, and Google may set cookies. More information in Google's privacy policy: https://policies.google.com/privacy.

4. Legal bases for people in the EU and the United Kingdom

We process your data to perform our contract with you (Art. 6(1)(b) GDPR), to comply with legal obligations such as retention obligations (Art. 6(1)(c) GDPR), on the basis of our legitimate interest in a secure store, in answering requests and in improving our offer (Art. 6(1)(f) GDPR), and with your consent, for example for the newsletter and for non-essential cookies (Art. 6(1)(a) GDPR). Where purchase data allows conclusions about your health, we process it only to the extent necessary to handle your order or request. You can withdraw your consent at any time with effect for the future.

5. Recipients and service providers

We only share your data where this is necessary for the purposes described above, namely with:

  • Shopify (Shopify International Limited, Dublin, Ireland, and affiliated companies, including in Canada and the USA): operating the store, checkout, customer accounts, analytics, sending order and newsletter emails, delivering the e-books (“Digital Products” app) and translating the store (“Translate & Adapt” app).
  • Payment providers: depending on the payment method you choose, Shopify Payments, Shop Pay, PayPal, Klarna, Apple Pay or Google Pay. Some of these providers process your payment data under their own responsibility, for example for fraud prevention or, in the case of Klarna, to check your creditworthiness.
  • Shop Pay and the Shop app: if you pay with Shop Pay or use the Shop app, Shopify also processes your data under its own responsibility in accordance with Shopify's privacy policy.
  • Terms Checkbox (RoarTheme): the app displays the consent checkbox in the cart and stores the time of your consent with your order. In doing so, it may process technical data such as IP address and browser.
  • YouTube (Google Ireland Limited, Ireland, and Google LLC, USA): only if you play the video on the home page.
  • AI assistance: to manage our store, we use an AI assistant (Claude by Anthropic PBC, USA) which may have access to store data such as orders via a Shopify app.
  • Authorities and advisers, where we are legally obliged to do so or it is necessary to protect our rights, for example tax authorities, accountants or lawyers.

We do not sell your data and do not share it with third parties for advertising purposes.

6. Processing abroad

Our service providers also process data outside Switzerland, in particular in the EU (Ireland), Canada and the USA. The Swiss Federal Council has recognised the EU and Canada as providing an adequate level of data protection. We transfer data to the USA to companies certified under the Swiss-U.S. Data Privacy Framework or on the basis of the European Commission's standard contractual clauses recognised by the Swiss Federal Data Protection and Information Commissioner (FDPIC). You can request a copy of these safeguards from us.

7. Retention

We keep order and invoice data for 10 years because the law requires it (Art. 958f of the Swiss Code of Obligations). We delete requests once they have been dealt with and no retention obligation applies, at the latest after 2 years. We keep your newsletter subscription until you unsubscribe. Technical data and cookies are deleted in line with Shopify's retention periods.

8. Your rights

You have the right to request information about your data, to have it corrected or deleted, to object to its processing, to withdraw your consent and to receive your data in a common format. If you live in the EU or the United Kingdom, you can also request restriction of processing. To do so, write to us at support@mirakelita.com. We may ask you to verify your identity.

You can also lodge a complaint with a data protection authority: in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch), in the EU with the authority of your country of residence and in the United Kingdom with the Information Commissioner’s Office (ICO).

9. Security

We and our service providers protect your data with appropriate technical and organisational measures, for example encrypted transmission (HTTPS). No one can guarantee absolute security for data transmitted over the internet.

10. Children

Our store is not aimed at children under 16. We do not knowingly process data of children under 16.

11. Changes

We update this privacy policy when our store or the legal situation changes. The version published here at any given time applies.