Privacy policy

Last updated: 24 October 2026

0. Controller

The controller responsible for processing personal data is D/R ARCHIVE, operated by Diogo André Pereira Ribeiro, a sole trader (individual business activity, not an incorporated or registered company) based at Le Château 45, 1483 Les Montets, Switzerland. Email: drarchive2026@gmail.com. This policy is written with the Swiss Federal Act on Data Protection (FADP) in mind and, where it applies to you, the EU/UK General Data Protection Regulation (GDPR).

D/R ARCHIVE respects your privacy. This policy explains how information is collected, used and shared when you visit our website, place an order, contact us or otherwise use our services.

1. Information we collect

  • Name, email address and telephone number
  • Billing and shipping address
  • Order and purchase information
  • Customer support communications
  • Device and browser information, IP address, website activity and interactions
  • Cookie and similar technology information

Payment details are entered with the payment providers available at checkout. We do not normally store complete card details.

2. How we use your information

  • Process and fulfil orders, take payments, arrange shipping and delivery
  • Send order confirmations and updates, manage returns, refunds and claims
  • Carry out our Quality Check of your order
  • Respond to enquiries and provide support
  • Prevent fraud and protect the security of our store
  • Improve our website and analyse its performance
  • Comply with legal obligations
  • Send marketing communications where permitted or where you have consented

3. Legal bases (GDPR)

  • Performance of a contract (Art. 6(1)(b)): orders, payment, delivery, Quality Check, support, returns and claims.
  • Legal obligation (Art. 6(1)(c)): accounting, tax and consumer-law records.
  • Legitimate interests (Art. 6(1)(f)): fraud prevention, security, essential analytics and improving the store.
  • Consent (Art. 6(1)(a)): non-essential cookies and marketing emails. You can withdraw consent at any time.

Under the FADP we process personal data lawfully, in good faith and proportionately, and only for the purposes stated here.

4. Who receives your data

We share personal data only where necessary, with these categories of recipients:

  • E-commerce platform: our store, checkout and customer accounts run on Shopify, which processes data under its own privacy policy (https://www.shopify.com/legal/privacy).
  • Payment providers: the providers behind the payment methods shown at checkout (cards, PayPal and other methods offered there). They process the data needed to complete and secure your payment under their own privacy policies.
  • Logistics and fulfilment partners and carriers: name, shipping address, telephone number, email and order details, to prepare, ship and deliver your order and resolve delivery issues.
  • Service providers for store operation: such as email, customer support and store apps (for example discount functionality), only as needed to operate the store.
  • Authorities and advisers: where required by law or to establish, exercise or defend legal claims.

If you contact us via email or social media (Google/Gmail, Instagram, TikTok), those platforms process your messages under their own policies. We do not sell your personal data.

5. International transfers

Some recipients may process data in countries other than the one where you live, which may include countries outside Switzerland and the EU/EEA. Applicable data-protection law may require specific safeguards for such transfers. You can contact us for information about the transfers that apply to your data.

6. Cookies

Our website uses cookies and similar technologies. Our store runs on Shopify. Based on Shopify's published information (Shopify Cookie Policy, https://www.shopify.com/legal/cookies), the following cookies are typically used on a Shopify storefront. This list may change and may not be complete, and apps or services we use may set additional cookies:

  • Necessary for the store to work (used without consent): _shopify_essential (session, checkout and anti-tampering data, up to 1 year), cart and cart_currency (cart contents and currency, 2 weeks), localization (country, 1 year), discount_code (a discount code received through a link, session) and _shopify_test (cookie capability check, 1 minute).
  • Analytics (only after you agree where consent is required): _shopify_analytics (analytics data about the storefront and checkout, 1 year).
  • Marketing (only after you agree where consent is required): _shopify_marketing (marketing data for the storefront and checkout, 1 year).

If you use an accelerated checkout or sign-in service offered by a provider, that provider may set additional cookies under its own policy. Where consent is required, analytics and marketing cookies are used only after you accept them. A cookie banner lets you accept, decline or manage your choices, and you can change them at any time through the cookie preferences link on our website or our Your Privacy Choices page: https://archivebydr.com/pages/data-sharing-opt-out. You can also block or delete cookies in your browser settings, although parts of the store may then stop working.

7. Marketing

Where permitted, we may send information about products, releases and promotions. You can unsubscribe at any time using the link in the message. We may still send transactional messages about orders, payments, shipping, refunds or support requests.

8. Data retention

We keep personal data only as long as reasonably necessary for the purpose it was collected for and to meet legal, accounting, tax, fraud-prevention and dispute-resolution requirements. Order and accounting records are generally kept for 10 years (Swiss Code of Obligations, Art. 958f). Other data is deleted or anonymised when no longer needed.

9. Data security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, misuse, loss, alteration or disclosure. No method of electronic transmission or storage is completely secure.

10. Your rights

Depending on the law that applies to you, you may have the right to access, correct or delete your personal data, object to or restrict processing, receive your data in a portable format, withdraw consent, and object to marketing. You may also lodge a complaint with a supervisory authority: in Switzerland the FDPIC (edoeb.admin.ch), or the data protection authority in your country. Send requests to drarchive2026@gmail.com; we answer within 30 days. We may ask for information to verify your identity.

11. Children

Our services are not directed at children, and we do not knowingly collect their personal data where this is prohibited by law.

12. Third-party links

Our website may link to third-party sites. We are not responsible for their privacy practices.

13. Changes

We may update this policy to reflect changes to our services or legal requirements. The latest version is always published here with its date.

14. Contact

D/R ARCHIVE · Diogo André Pereira Ribeiro · Le Château 45, 1483 Les Montets, Switzerland · drarchive2026@gmail.com · https://archivebydr.com/pages/contact