Privacy Policy

Last updated: 22.06.2026

This Privacy Policy describes how PROTSAAH Zürich (operated by Shrestha Designs, the "Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from www.protsaah.com (the "Site") or otherwise communicate with us (collectively, the "Services"). For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use or access any of the Services.

Changes to This Privacy Policy
We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last updated" date and take any other steps required by applicable law.

Hosting & Content Delivery Network

Shopify
For the hosting of our website and the display of the page content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.
All data collected on our website is processed on the provider's servers. We have concluded an order processing agreement with the provider, ensuring the protection of our site visitors' data and prohibiting unauthorised disclosure to third parties.
In case of data transfer to Canada, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission. 

How We Collect and Use Your Personal Information

To provide the Services, we collect and have collected over the past 12 months personal information about you from a variety of sources, as set out below. The information that we collect and use varies depending on how you interact with us.
In addition to the specific uses set out below, we may use information we collect about you to communicate with you, provide the Services, comply with any applicable legal obligations, enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

What Personal Information We Collect
The types of personal information we obtain about you depends on how you interact with our Site and use our Services. When we use the term "personal information", we are referring to information that identifies, relates to, describes or can be associated with you.

The following sections describe the categories and specific types of personal information we collect.

Information We Collect Directly from You
Information that you directly submit to us through our Services may include:
• Basic contact details including your name, address, phone number, email.
• Order information including your name, billing address, shipping address, payment confirmation, email address, phone number.
• Account information including your username, password, security questions.
• Shopping information including the items you view, put in your cart or add to your wishlist.
• Customer support information including the information you choose to include in communications with us, for example, when sending a message through the Services. • Review information including your name, email address and review content when you submit product reviews.

Some features of the Services may require you to directly provide us with certain information about yourself. You may elect not to provide this information, but doing so may prevent you from using or accessing these features.

Data Processing When Opening a Customer Account and for Contract Processing Pursuant to Art. 6 (1) point b GDPR, personal data will continue to be collected and processed to the extent required in each case if you provide us with this data when opening a customer account. The data required for opening an account can be found in the input mask of the corresponding form on our website. Deletion of your customer account is possible at any time and can be done by sending a message to the above address of the person responsible. After deletion of your customer account, your data will be deleted, provided that all contracts concluded via it have been fully processed, no legal retention periods are opposed and no legitimate interest on our part in the continued storage exists.

Data Collection When You Visit Our Website
When using our website for information only, i.e. if you do not register or otherwise provide us with information, we also automatically collect certain information about your interaction with the Services ("Usage Data", so-called "server log files"). To do this, we may use cookies, pixels and similar technologies ("Cookies"). Usage Data may include information that is technically necessary for us to display the website to you:
• Our visited website
• Date and time at the moment of access
• Amount of data sent in bytes
• Source/reference from which you came to the page
• Browser used
• Operating system used
• IP address used (if applicable: in anonymized form)

Data processing is carried out in accordance with Art. 6 (1) point f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently, if there are any concrete indications of illegal use.
This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller). You can recognize an encrypted connection by the character string https:// and the lock symbol in your browser line.

Information We Obtain from Cookies
Like many websites, we use Cookies on our Site. For specific information about the Cookies that we use related to powering our store with Shopify, see https://www.shopify.com/legal/cookies. We use Cookies to make your visit to our website more attractive and to enable the use of certain functions (including to remember your actions and preferences), to run analytics and better understand user interaction with the Services (in our legitimate interests to administer, improve and optimize the Services).

We may also permit third parties and services providers to use Cookies on our Site to better tailor the services, products and advertising on our Site and other websites. Most browsers automatically accept Cookies by default, but you can choose to set your browser to remove or reject Cookies through your browser controls.

Please keep in mind that removing or blocking Cookies can negatively impact your user experience and may cause some of the Services, including certain features and general functionality, to work incorrectly or no longer be available.

If personal data is also processed by individual cookies set by us, the processing is carried out either in accordance with Art. 6 (1) point b GDPR for the performance of the contract, in accordance with Art. 6 (1) point a GDPR in the case of consent given or in accordance with Art. 6 (1) point f GDPR to safeguard our legitimate interests in the best possible functionality of the website.

Information We Obtain from Third Parties
Finally, we may obtain information about you from third parties, including from vendors and service providers who may collect information on our behalf, such as:
• Companies who support our Site and Services, such as Shopify.
• Our payment processors, who collect payment information (e.g., bank account, credit or debit card information, billing address) to process your payment in order to fulfill your orders and provide you with products or services you have requested.
• When you visit our Site, open or click on emails we send you, or interact with our Services or advertisements, we, or third parties we work with, may automatically collect certain information using online tracking technologies such as pixels, web beacons, software developer kits, third-party libraries, and cookies.

How We Use Your Personal Information

Providing Products and Services
We use your personal information to provide you with the Services in order to perform our contract with you, including to process your payments, fulfil your orders, to send notifications to you related to your account, purchases, returns, exchanges or other transactions, to create, maintain and otherwise manage your account, to arrange for shipping, facilitate any returns and exchanges and to enable you to post reviews.

Processing of Data for the Purpose of Order Handling
Insofar as necessary for the processing of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 Para. 1 lit. b GDPR.

Marketing and Advertising
We use your personal information for marketing and promotional purposes, such as to send marketing, advertising and promotional communications by email, text message or postal mail, and to show you advertisements for products or services. This may include using your personal information to better tailor the Services and advertising on our Site and other websites.

Advertising by Post
Based on our legitimate interest in personalized direct mail, we reserve the right to store your first and last name, your postal address and — if we have received this additional information from you within the framework of the contractual relationship — your title, academic degree, year of birth and your professional, industry or business name in accordance with Art. 6 (1) point f GDPR and to use this data for sending interesting offers and information on our products by letter post.
You can object to the storage and use of your data for this purpose at any time by sending an appropriate message to the controller. 

Security and Fraud Prevention
We use your personal information to detect, investigate or take action regarding possible fraudulent, illegal or malicious activity. If you choose to use the Services and register an account, you are responsible for keeping your account credentials safe. We highly recommend that you do not share your username, password, or other access details with anyone else. If you believe your account has been compromised, please contact us immediately.

Communicating with You
We use your personal information to provide you with customer support and improve our Services. This is in our legitimate interests in order to be responsive to you, to provide effective services to you, and to maintain our business relationship with you. Notification by E-mail of Stock Availability If our online shop provides the possibility of informing you by e-mail about the time of availability for selected, temporarily unavailable items, you can subscribe to our e-mail notification service for product availability. We use the so-called double opt-in procedure when sending this notification. The only mandatory information needed to send this notification is your e-mail address. By activating the confirmation link, you consent to the use of your personal data in accordance with Art. 6 (1) point a GDPR.

Passing on Personal Data to Shipping Service Providers
We pass on your e-mail address and/or telephone number to the listed providers in accordance with Art. 6 (1) point a GDPR prior to delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, if you have given your express consent in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to the supplier for the purpose of delivery in accordance with Art. 6 (1) point b GDPR. 
The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis the provider.

Use of Payment Service Providers
- Apple Pay
Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. Payment processing is carried out via the "Apple Pay" function of your terminal device. For the purpose of payment processing, your information provided during the ordering process is transmitted to Apple in encrypted form. Processing is carried out in accordance with Art. 6 Para. 1 lit. b GDPR. For more information: https://support.apple.com/en-gb/HT203027
- Google Pay
Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. For the release of a payment via Google Pay, your payment information stored in Google Pay is transmitted in the form of a unique transaction number. Processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR. For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework. The terms of use of Google Pay can be found here: https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=en

Further information on data protection at Google Pay can be found at the following Internet address: https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=en
- PayPal
PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. Your payment data provided during the ordering process (including name, address, bank and payment card information) will be passed on in accordance with Art. 6 (1) point b GDPR, only to the extent necessary for payment processing.
- Klarna
Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden. If you select a Klarna payment method, your payment and order information will be shared with Klarna to process your payment and, where applicable, to perform a credit assessment. Processing is carried out in accordance with Art. 6 (1) point b GDPR. For more information: https://www.klarna.com/international/privacy-policy/
- Shopify Payments
Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Your payment data provided during the ordering process will be passed on in accordance with Art. 6 (1) point b GDPR for the purpose of payment processing.
- Stripe
Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. Your payment data provided during the ordering process will be passed on in accordance with Art. 6 (1) point b GDPR. For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework.
- Twint
TWINT AG, Konsumstrasse 20, 3007 Bern, Switzerland. Your payment data provided during the ordering process will be passed on in accordance with Art. 6 (1) point b GDPR for the purpose of payment processing.
- Bancontact / iDEAL / Wero
These payment methods are facilitated through our payment processors (Shopify Payments / Stripe). Your payment data is processed solely for the purpose of completing your transaction in accordance with Art. 6 (1) point b GDPR.
- Shop Pay / Union Pay
Shop Pay is provided by Shopify International Limited (see above). Union Pay International Co., Ltd. facilitates UnionPay card payments. Your payment data is processed solely for the purpose of completing your transaction in accordance with Art. 6 (1) point b GDPR.

Web Analysis Services
Google Analytics 4
This website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. When using Google Analytics 4, the IP address transmitted by your terminal device is processed only in anonymized form. The data collected in the context of the use of Google Analytics 4 will be retained for 2 months and then deleted. All processing will only take place if you have given us your express consent in accordance with Art. 6 (1) lit. a GDPR via our cookie consent tool. For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework. Further information: https://policies.google.com/privacy

Google Signals & User IDs
As an extension of Google Analytics 4, Google Signals and UserID cross-device tracking may be used, allowing analysis of usage behaviour across devices where you are logged into a Google account and have activated personalised ads. This only occurs with your consent pursuant to Art. 6 Para. 1 lit. a GDPR.

Microsoft Clarity
We use Microsoft Clarity, a behavioural analytics service provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (and Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA). Microsoft Clarity records how users interact with our website through session recordings, heatmaps, click maps, and scroll tracking. Data collected may include mouse movements, clicks, scrolling behaviour, pages visited, and technical device information.
Clarity does not collect or store personally identifiable information such as names or email addresses in the session recordings, as we have enabled masking for sensitive input fields. This processing is carried out only with your express consent in accordance with Art. 6 (1) lit. a GDPR, obtained via our cookie consent tool. You may withdraw your consent at any time by adjusting your cookie preferences. For data transfers to the USA, Microsoft participates in the EU-US Data Privacy Framework. For more information about Microsoft's privacy practices, see: https://privacy.microsoft.com/en-us/privacystatement and https://clarity.microsoft.com/terms

Retargeting / Remarketing / Referral Advertising Meta Pixel
Within our online offering, we use the "Meta Pixel" service of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta"). The Meta Pixel enables us to display our Facebook and Instagram ads only to users who have shown interest in our offering, and to carry out conversion tracking. All processing is only carried out with your express consent in accordance with Art. 6 para. 1 lit. a GDPR. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework.

Google Ads Remarketing
This website uses Google Ads conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Conversion tracking cookies are set when a user clicks on a Google ad and are used to create conversion statistics. All processing is only carried out with your express consent in accordance with Art. 6 (1) point a GDPR. For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework. Further information: https://policies.google.com/technologies/partner-sites

Flexify for Facebook (Facebook Product Feed)
We use Flexify, provided by Flexify AB, to generate and manage our Facebook and Instagram product catalogues and advertising feeds. Flexify may process product data and, where applicable, anonymised performance data. Personal data is not shared directly with Flexify for this purpose. For more information: https://flexify.io/privacy

Email Marketing, SMS & Loyalty
Klaviyo Email Marketing & SMS
We use Klaviyo for email marketing and SMS communications, provided by Klaviyo, Inc., 125 Summer Street, Floor 4, Boston, MA 02110, USA. If you subscribe to our newsletter or marketing communications, or if you make a purchase, Klaviyo may process your name, email address, phone number, purchase history, browsing behaviour on our Site, and email engagement data (opens, clicks) for the purpose of sending you personalised marketing communications and analysing campaign performance. Marketing emails and SMS are sent on the basis of your consent in accordance with Art. 6 (1) point a GDPR. You can unsubscribe at any time by clicking the unsubscribe link in any email or replying STOP to any SMS. Post-purchase transactional emails (order confirmations, shipping notifications) are sent on the basis of Art. 6 (1) point b GDPR. For data transfers to the USA, we have put in place appropriate safeguards including Standard Contractual Clauses. Klaviyo participates in the EU-US Data Privacy Framework. For more information: https://www.klaviyo.com/legal/privacy-notice

BUCKS Loyalty & Rewards
We use the BUCKS app to operate our customer loyalty and rewards programme. If you participate in the loyalty programme, BUCKS may process your name, email address, purchase history, and points balance to manage your rewards account. Processing is carried out on the basis of Art. 6 (1) point b GDPR (performance of contract) and Art. 6 (1) point a GDPR (consent for marketing-related features). You may contact us at info@protsaah.com to request deletion of your loyalty account data.

UpPromote Affiliate Programme
We operate an affiliate referral programme using UpPromote, provided by Secomapp Co., Ltd. If you participate as an affiliate or are referred via an affiliate link, UpPromote may process referral tracking data, your name, and email address to attribute and pay commissions. Processing is carried out on the basis of Art. 6 (1) point b GDPR. For more information: https://secomapp.com/privacy-policy/

Customer Reviews
Judge.me Reviews
We use Judge.me, provided by Judge.me B.V., Apollolaan 151, 1077AR Amsterdam, Netherlands, to collect and display product reviews on our website. If you submit a review, Judge.me will process your name, email address, and review content. Review submission is voluntary, and processing is based on your consent (Art. 6 (1) point a GDPR). Public reviews will display your name or chosen display name. For more information: https://judge.me/privacy

Live Chat & Customer Support
Tidio – Live Chat & Chatbots
We use Tidio for live chat and automated chatbot support, provided by Tidio LLC, 149 New Montgomery St, San Francisco, CA 94105, USA. When you use the live chat feature, Tidio may process your name, email address, chat messages, and technical information about your device and browser. This data is processed on the basis of Art. 6 (1) point f GDPR (our legitimate interest in providing responsive customer support), or Art. 6 (1) point b GDPR where the chat relates to a contract. Chat data is retained for as long as necessary to resolve your enquiry. For data transfers to the USA, appropriate safeguards are in place. For more information: https://www.tidio.com/privacypolicy/

Automation & Integrations
Zapier
We use Zapier, provided by Zapier Inc., 548 Market St #62411, San Francisco, CA 94104, USA, to automate workflows between our applications (for example, passing order data or customer information between systems). Zapier processes data only as directed by us and solely to the extent necessary to carry out the automation tasks we configure. Processing is carried out on the basis of Art. 6 (1) point b or f GDPR as applicable. For data transfers to the USA, Zapier participates in the EU-US Data Privacy Framework. For more information: https://zapier.com/privacy

Fulfil.IO Retail ERP
We use Fulfil.IO, provided by Fulfil Solutions Inc., as our retail ERP (Enterprise Resource Planning) system. Fulfil.IO may process your order information, name, address, and contact details for the purpose of order management, inventory, and fulfilment. Processing is carried out on the basis of Art. 6 (1) point b GDPR. For more information: https://www.fulfil.io/privacy-policy

CedCommerce Fruugo Integration
We list products on the Fruugo marketplace through the CedCommerce integration. If you place an order via Fruugo, your order data (name, shipping address, order details) is transferred from Fruugo to our systems for fulfilment. Fruugo's own privacy policy governs data collected directly by Fruugo. For more information: https://sell.fruugo.com/en/information/privacy-policy

Page Building & On-site Experience
PageFly Page Builder
We use PageFly, provided by PageFly Solutions Co., Ltd., to build and customise certain pages on our website. PageFly may collect aggregated, anonymised analytics on page performance. PageFly does not directly collect personally identifiable information from our visitors. For more information: https://pagefly.io/pages/privacy-policy

Whatmore Shoppable Videos
We use Whatmore to display shoppable video content on our website, provided by Whatmore (whatmore.ai). Whatmore may collect anonymised viewer interaction data (plays, clicks) for analytics purposes. Processing is carried out on the basis of Art. 6 (1) point f GDPR (our legitimate interest in improving content performance). No personally identifiable information is collected by Whatmore directly from visitors unless you interact with a purchase flow, in which case Shopify processes the transaction. For more information: https://whatmore.ai/privacy

Translate & Adapt 
We use Shopify's Translate & Adapt app to provide our website content in German and French for Swiss market visitors. This app processes page content for translation purposes and does not collect personal visitor data independently.

Search & Discovery 
We use Shopify's Search & Discovery app to power site search and product recommendations. This app may process search queries and browsing behaviour to improve search relevance. Processing is carried out on the basis of Art. 6 (1) point f GDPR (legitimate interest in improving user experience). Data is processed by Shopify Inc. under our existing data processing agreement with Shopify.

Tools and Cookie Consent 
This website uses a cookie consent tool to obtain effective user consent for cookies and cookie-based applications that require consent. The cookie consent tool is displayed to users in the form of an interactive user interface when they access the page. Cookies and services requiring consent are only loaded if the respective user provides the corresponding consent. The tool sets technically necessary cookies to save your cookie preferences. If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is done in accordance with Art. 6 (1) point f GDPR based on our legitimate interest in legally compliant consent management.

Contact
WhatsApp Business
We offer visitors the opportunity to contact us via WhatsApp Business (WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). If you contact us via WhatsApp in connection with a specific business transaction, your mobile telephone number and — if provided — your first and last name will be stored and used in accordance with Art. 6 para. 1 lit. b GDPR to process your request. For general enquiries, processing is based on Art. 6 Para. 1 lit. f GDPR. Data will not be passed on to third parties. In the course of processing, data may be transferred to Meta Platforms Inc. in the USA. The provider participates in the EU-US Data Privacy Framework.
Via Contact Form or E-mail
When you contact us (e.g. via contact form or e-mail), personal data is collected as indicated in the respective form. This data is stored and used exclusively for the purpose of responding to your request and for the associated technical administration. The legal basis for processing is our legitimate interest in responding to your request in accordance with Art. 6 (1) point f GDPR. If your contact is aimed at concluding a contract, the additional legal basis is Art. 6 (1) point b GDPR. Your data will be deleted after final processing of your enquiry, provided there are no legal storage obligations to the contrary.
Google Meet
We may use Google Meet (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) for online meetings and virtual styling sessions. Google Meet may process your registration data (name, email), session data (IP address, device information), and audio/video contributions. Processing is based on Art. 6 (1) point b or a GDPR as applicable. For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework.

How We Disclose Personal Information
In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include: • With vendors or other third parties who perform services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, fulfillment and shipping).
• With business and marketing partners, including Shopify, to provide services and advertise to you.
• When you direct, request us or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets or login integrations.
• With our affiliates or otherwise within our corporate group, in our legitimate interests to run a successful business.
• In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations, to enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

We do not use or disclose sensitive personal information for the purposes of inferring characteristics about you.

User Generated Content
The Services may enable you to post product reviews and other user-generated content. If you choose to submit user generated content to any public area of the Services, this content will be public and accessible by anyone. We are not responsible for the privacy or security of any information that you make publicly available.

Third Party Websites and Links
Our Site may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites.

Children's Data
The Services are not intended to be used by children, and we do not knowingly collect any personal information about children. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted.

Security and Retention of Your Information
Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." In addition, any information you send to us may not be secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.

Duration of Storage of Personal Data
The duration of the storage of personal data is based on the respective legal basis, the purpose of processing and — if relevant — on the respective legal retention period (e.g. commercial and tax retention periods). If personal data is processed on the basis of an express consent pursuant to Art. 6 (1) point a GDPR, this data is stored until the data subject revokes their consent. If there are legal storage periods for data processed on the basis of Art. 6 (1) point b GDPR, this data will be routinely deleted after expiry of the storage periods. When processing personal data on the basis of Art. 6 (1) point f GDPR, this data is stored until the data subject exercises their right of objection in accordance with Art. 21 (1) GDPR, unless we can provide compelling grounds for processing which outweigh the interests of the data subject.

International Users
Please note that we may transfer, store and process your personal information outside the country you live in, including the United States. Your personal information is also processed by staff and third party service providers and partners in these countries. If we transfer your personal information out of Europe, we will rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.

Your Rights and Choices
Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by law.
• Right to Access (Art. 15 GDPR): You may request access to personal information that we hold about you, including details relating to the ways in which we use and share your information.
• Right to Correct (Art. 16 GDPR): You may request that we correct inaccurate personal information we maintain about you.
• Right to be Forgotten (Art. 17 GDPR): You may request that we delete personal information we maintain about you.
• Right of Portability (Art. 20 GDPR): You may request a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances.
• Restriction of Processing (Art. 18 GDPR): You may ask us to stop or restrict our processing of personal information.
• Withdrawal of Consent (Art. 7(3) GDPR): Where we rely on consent to process your personal information, you may withdraw this consent at any time.
• Right to Object (Art. 21 GDPR): You may object to processing of your personal data based on our legitimate interests, or object to direct marketing at any time.
• Right to Lodge a Complaint (Art. 77 GDPR): You have the right to lodge a complaint with a competent data protection supervisory authority (see below). You may exercise any of these rights where indicated on our Site or by contacting us at info@protsaah.com.

Under GDPR you have the right to access, correct, or delete your data. Contact us at info@protsaah.com to exercise these rights.

We will not discriminate against you for exercising any of these rights.

Rights under Swiss Law (nFADP)
If you are located in Switzerland, you also have rights under the Swiss Federal Act on Data Protection (nFADP, in force since 1 September 2023), including the right of access, rectification, erasure, data portability, and the right to object to processing. These rights mirror those under GDPR and may be exercised by contacting us at info@protsaah.com.

Supervisory Authorities
You have the right to lodge a complaint with the competent data protection supervisory authority:
• Switzerland: Federal Data Protection and Information Commissioner (FDPIC / EDÖB), Feldeggweg 1, 3003 Bern — www.edoeb.admin.ch
• European Union: The data protection authority in your country of residence. A list of EU data protection authorities is available at: https://edpb.europa.eu/about-edpb/about-edpb/members_en
• United Kingdom: Information Commissioner's Office (ICO) — www.ico.org.uk

Controller
The controller in charge of data processing on this website, within the meaning of the General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (nFADP), is:
PROTSAAH Zürich (a brand owned and operated by Shrestha Designs)
Grundhofstrasse 1,
8704 Herrliberg,
Switzerland
Tel.: +41 (0) 44 810 11 64 
E-Mail: info@protsaah.com

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please email us or contact us at the address above.