top of page
FUZZYCARDS-logo

Changes

We may update this policy from time to time. The current version is always available on this page.

Data Controller

XPUNKS GmbH Grabenstrasse 15a, 6340 Baar, Switzerland UID: CHE-154.303.270 Contact: info@fuzzycards.com

​

This policy explains how we process personal data when you visit this website or place an order. We comply with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

Data we collect

  • Order data: name, shipping address, email address, phone number (if provided), order contents, payment status. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

  • Payment data: processed by Shopify Payments. We do not receive or store full card details. Legal basis: performance of a contract.

  • Technical data: IP address, browser type, device information, and cookies strictly necessary to operate the store. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in operating a secure, functional website.

  • Wallet and blockchain data: for NFT redemption orders, your public wallet address and the associated burn transaction, to verify redemption eligibility and link it to your shipping order. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

  • Communications: emails you send to our support address. Legal basis: legitimate interest / contract performance.

 

We do not knowingly collect data from children under 16.

How we use your data

  • Processing and shipping your order

  • Payment processing and fraud prevention

  • Customer support and handling returns/withdrawals

  • Complying with legal obligations (accounting, tax, consumer law)

​

We do not sell your personal data. We do not use your data for third-party advertising.

Who we share data with

  • Shopify Inc. - our e-commerce and checkout infrastructure (order management, payment processing via Shopify Payments)

  • Fulfillment and shipping partners - name and delivery address, strictly to produce and deliver your order

  • Accounting and tax advisors / authorities - where legally required

​

Some of these providers are located outside Switzerland/the EEA. Where that is the case, transfers are protected by adequacy decisions or the EU Standard Contractual Clauses.

Retention

Order and invoice data is retained for 10 years as required by Swiss commercial and tax law. Support communications are retained as long as needed to handle your request. Technical logs are retained for a short period for security purposes.

Cookies

We only use cookies that are strictly necessary for the store to function (cart, checkout, session, security). We do not use analytics, tracking, or advertising cookies.

Your rights

You have the right to access, rectify, delete, and receive a copy of your personal data, to restrict or object to processing, and to withdraw consent at any time where processing is based on consent. Contact us at info@fuzzycards.com.

​

Note on blockchain data: transactions on public blockchains (such as the XRP Ledger) are public and immutable by design. We do not operate the blockchain and cannot modify or delete data recorded on it, including wallet addresses and transactions. Deletion rights therefore apply to the data we hold in our own systems, not to on-chain records.

​

If you are in the EU/EEA, you may lodge a complaint with your local data protection authority. In Switzerland, the competent authority is the Federal Data Protection and Information Commissioner (FDPIC).

bottom of page