Privacy policy

Last updated: 26 August 2026

1. Who we are

SWISTART SAGL, Via Foss 6, 6853 Ligornetto, Switzerland, CHE-431.769.989 ("TBWL", "we", "us"), is responsible for the personal data described in this Privacy Policy.

This Privacy Policy applies to tabitabags.ch, related online services and our interactions with customers, prospective customers, sellers and consignors. You can contact us about privacy matters at privacy@swistart.ch.

We process personal data in accordance with applicable data-protection law.

2. Personal data we collect

Depending on how you interact with us, we may collect:

• identity, contact, account, billing and delivery information, such as your name, email address, telephone number, postal address and account details;
• order and transaction information, including products purchased or offered for sale, payment method and status, invoices, deliveries, returns and refunds;
• communications sent through email, forms, chat, WhatsApp or social media, including messages, photographs and attachments;
• for valuations, authentication, direct purchase and consignment requests, contact and shipping information, product descriptions and photographs, and payment information such as an IBAN;
• in limited cases, copies of identity documents or residence permits temporarily received for identity verification requested by a Swiss invoice payment provider;
• technical and usage information, such as IP address, device and browser information, pages viewed, interactions with the Website, cookie identifiers and consent choices;
• marketing and preference information, such as newsletter subscriptions, interests, wishlists, loyalty activity and responses to advertising; and
• information needed for security, fraud prevention, legal compliance and the exercise or defence of legal claims.

We obtain this information directly from you, through your use of the Website, and from service providers involved in payments, financing, communications, social media, delivery, analytics and advertising.

Information marked as required, or otherwise needed to conclude or perform a transaction, must be provided if you wish to use the relevant service. Without it, we may be unable to open an account, process an order, arrange financing, respond to a request or conclude a purchase, sale, consignment or authentication arrangement.

3. Why we process personal data

We process personal data to:

• operate the Website and customer accounts;
• respond to enquiries and provide customer service;
• prepare, conclude and perform purchase, sale, consignment and authentication arrangements;
• process payments, invoices, deliveries, returns, refunds and seller payouts;
• administer loyalty, review, wishlist and product-recommendation functions;
• maintain security, prevent fraud and misuse, and troubleshoot our services;
• comply with accounting, tax and other legal obligations;
• establish, exercise or defend legal claims; and
• send marketing communications and measure or personalise advertising, where permitted and subject to your consent or right to object.

Depending on the context, we process personal data because it is needed to take steps at your request, conclude or perform a contract, comply with legal obligations, pursue legitimate interests in operating and protecting our business and serving customers, or because you have given consent where required. You may withdraw consent at any time without affecting processing already carried out.

4. Payments and financing

Payments may be handled by banks, card, wallet, invoice and other payment providers. These providers receive the information needed to process the selected method and may act as independent data controllers under their own privacy policies. TBWL does not normally receive full card or online-banking credentials.

For certain invoice payment requests, a Swiss invoice payment provider may require additional identity verification. In these cases, TBWL may temporarily receive a copy of an identity document or residence permit solely to transmit it securely to the provider. We do not retain it longer than necessary to complete the transfer, unless retention is required by law or in connection with a documented dispute. The provider processes the document under its own privacy information.

Yourasset financing

When you choose to request financing through Yourasset, you leave the Website and are redirected to the platform operated by Yourasset AG. Yourasset AG acts as an independent data controller for the personal and financial data collected through its platform. Its processing is governed by the Yourasset Privacy Policy. Use of the Yourasset service is also subject to the Yourasset General Terms and Conditions.

TBWL does not collect or receive the financial information that you enter in the financing application. Yourasset may provide TBWL with the transaction data needed to review, conclude and fulfil the related purchase, such as your name, contact and delivery details, the relevant product and the transaction status, including confirmation that financing has been approved. TBWL does not make the credit decision and does not receive the reasons for a refusal.

5. Cookies, analytics and advertising

We use essential cookies and similar technologies to operate and secure the Website. Subject to your choices in the cookie banner, we also use analytics, advertising and personalisation technologies, including services provided by Google, Meta and TikTok and analytics or personalisation functions made available through Shopify applications.

Depending on the advertising integrations enabled, conversion data may include online identifiers, product views, cart or purchase events and hashed contact identifiers used for matching. Product catalogues and, where a social-commerce function is enabled, related order and fulfilment information may also be shared with the relevant platform.

Non-essential technologies are blocked until the required consent has been given. You can accept, reject or change your choices at any time through the cookie settings available on the Website. The cookie settings provide further information about the categories, providers, purposes and storage periods of the technologies in use.

6. Who receives personal data

We disclose personal data only where needed for the purposes described above. Recipients may include:

• e-commerce, hosting, database and Shopify application providers;
• payment, invoice and financing providers;
• delivery, logistics and returns providers;
• authentication and other product-related service providers;
• email, customer-service, chat, WhatsApp and social-media providers;
• newsletter, analytics, advertising, product-feed and recommendation providers;
• AI-assisted service providers used for customer service, translation, document analysis, fraud and chargeback handling, and internal operations;
• accounting and bookkeeping platforms, professional advisers, accountants, auditors and insurers;
• public authorities or other recipients where required by law or needed to protect legal rights; and
• a buyer or successor in connection with a merger, reorganisation or transfer of our business, subject to appropriate confidentiality and data-protection requirements.

Some recipients process personal data on our instructions, while others determine their own processing purposes and act as independent controllers.

7. Processing outside Switzerland

Our current service providers and their approved subprocessors may process personal data in Switzerland, the European Economic Area, the United Kingdom, Canada, the United States, India, Australia, Singapore and Malaysia.

Depending on the destination and recipient, cross-border disclosures may rely on a recognised adequate level of protection, an applicable data-privacy framework, recognised standard contractual clauses or another transfer mechanism permitted by applicable law. You may contact us for further information about the safeguards relevant to a particular transfer.

8. How long we keep personal data

We keep personal data only for as long as needed for the relevant purpose, legal obligations and the establishment, exercise or defence of legal claims. In particular:

• order, transaction, payment, seller, consignment, invoice and accounting records are kept for the periods required by law, generally at least 10 years, and may be kept longer where reasonably necessary for accounting continuity, customer service, transaction history, authenticity or provenance, fraud prevention, audits, disputes or legal claims;
• customer accounts and related purchase history are kept while the customer relationship remains active and afterwards where needed for the purposes above;
• customer-service communications, valuations and requests that do not result in a transaction may be kept for up to 5 years after the last meaningful interaction, unless they remain relevant to an ongoing customer relationship, transaction, dispute or legal claim;
• marketing-only profiles with no transaction history may be deleted or anonymised after 5 years without a meaningful interaction. Marketing contact information may also be kept until you unsubscribe or withdraw consent. We may retain a minimal suppression record to ensure that no further marketing is sent; and
• cookie and analytics data are kept for the periods shown in the cookie settings.

Data may be kept longer where required by law, a dispute or an authority. Data that has been irreversibly anonymised may be retained and used without these limits.

9. Your rights

Subject to the conditions of applicable law, you may ask us to:

• confirm whether we process your personal data and provide access to it;
• correct inaccurate or incomplete data;
• delete data that is no longer required;
• restrict or object to processing;
• provide certain data in a portable format; and
• withdraw consent at any time.

You may object to direct marketing at any time by using the unsubscribe link or contacting us.

Requests can be sent to privacy@swistart.ch or to our postal address above. We may request proportionate information to verify your identity where necessary. We will normally respond within the period required by applicable law.

You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or another competent data-protection authority where applicable.

10. AI-assisted tools, automated decisions and recommendations

We may use AI-assisted tools to support customer service, translation, document analysis, fraud and chargeback handling, and internal operations. We minimise or remove personal data before using these tools where reasonably possible. In limited cases, relevant personal data may be submitted where necessary to handle a specific request, transaction or dispute.

These tools support our personnel. TBWL does not use them to make decisions producing legal or similarly significant effects without appropriate human involvement. Product recommendations and advertising audiences may be based on browsing, purchase or interaction data, subject to your cookie and marketing choices.

11. Security

We use reasonable technical and organisational measures intended to protect personal data against unauthorised access, loss, misuse or alteration. No online service can guarantee absolute security.

12. Children

The Website is not directed at children. Purchase, sale, consignment and financing services are intended for persons who are legally able to enter into the relevant contract. If you believe that a child has provided personal data to us improperly, please contact us.

13. Changes to this Privacy Policy

We may update this Privacy Policy when our services, providers or legal obligations change. The current version and its effective date are published on this page. We will provide additional notice where required for material changes.