Privacy policy

Privacy Policy – Solfaus

Last updated: October 20, 2026

This Privacy Policy explains what information Solfaus ("Solfaus", "we", "our") gathers from and about visitors and customers of solfaus.com, why we gather it, with whom it is shared, how long it is kept, and which choices you have. It covers our website, our checkout, our customer support channels and any communication you have with us (together, the "Platform").

If you do not agree with the practices set out here, please do not use the Platform. Continued use after the effective date above means you accept this Policy.

1. Data We Gather

Depending on how you interact with the Platform, we may obtain the following:

Identity and contact details – your name, postal address for delivery and invoicing, email address and phone number, and any details you enter when creating an account or contacting us.

Order and support records – the products you order, order values, delivery status, correspondence with our support team, return and claim submissions, and any evidence (photos, videos, descriptions) you provide with a claim.

Payment details – card and wallet transactions are handled by independent payment processors under their own security frameworks. Solfaus receives only a transaction reference, the last digits of the card, the payment status and the billing name; full card numbers are never stored on our systems.

Device and browsing data – IP address and approximate location derived from it, browser and operating-system version, device type and identifiers, referring pages, pages viewed, clicks, session duration, cart activity, error logs and similar diagnostic signals.

Security and verification data – signals used to detect automated traffic, duplicate accounts, unusual ordering patterns, dispute activity and other conduct that may breach our Terms or this Policy. This may include device fingerprints, IP history, order velocity and third-party risk scores.

Information from others – data from carriers (delivery scans, address corrections), payment providers (dispute and authorization results), fraud-screening services, and advertising or analytics partners.

The Platform is intended for adults. We do not knowingly gather data from anyone under 16, and we will delete such data if we learn it has been collected.

2. Why We Use It

We process your data for the following purposes:

  • to accept, process, ship and track your order and to send order confirmations and delivery updates;
  • to run our checkout, authenticate payments and keep accounting and tax records;
  • to answer support requests and handle returns, claims, cancellations and disputes;
  • to operate, secure, test and improve the Platform and our products;
  • to remember your settings and tailor the content and offers shown to you;
  • to send marketing emails or texts where you have agreed to receive them or where the law allows us to do so without consent — you can stop these at any time;
  • to detect, investigate and prevent fraud, abuse, chargeback misuse, policy circumvention and security incidents, and to enforce our Terms and policies;
  • to meet legal, regulatory and reporting duties, respond to lawful requests and defend legal claims.

Where European or UK law applies, our legal grounds are performance of a contract, compliance with legal obligations, our legitimate interests (operating a secure online store, preventing fraud, direct marketing to existing customers) and, where required, your consent.

3. Who Receives Your Data

We do not sell your personal data for money. We pass it to the following categories of recipients only to the extent needed for the purposes above:

Operational partners – the platform that hosts our store, payment processors, fraud-screening services, warehouses and fulfillment partners, shipping carriers, customer-support software, email and SMS delivery services, and accounting providers.

Measurement and advertising partners – analytics services and advertising networks that help us understand site performance and show relevant ads. Some of these partners may use data they receive through cookies or pixels in ways that qualify as a "sale" or "sharing" under certain US state laws; you can opt out as described in Section 7.

Authorities and legal recipients – courts, regulators, law enforcement and other bodies where we are legally required to disclose data or where disclosure is necessary to protect Solfaus, our customers or the public.

Payment and dispute recipients – banks, card networks and payment providers, including transaction evidence submitted to contest chargebacks.

Successors – a buyer or successor of Solfaus or its assets in connection with a sale, merger, reorganization, financing or insolvency proceeding.

Our vendors are bound by contracts that limit their use of your data to the services they provide for us.

4. Cookies, Pixels and Similar Tools

We and our partners place cookies, tracking pixels, local-storage objects and software development kits on your device to:

  • keep the Platform working (session, cart, checkout, security);
  • store preferences such as language or currency;
  • measure traffic, conversions and performance;
  • show and measure advertising on our site and elsewhere, including retargeting.

You can delete or refuse cookies through your browser settings, through any cookie banner we display, and through the opt-out tools offered by advertising networks. Rejecting essential cookies will prevent you from completing a purchase. Third-party tools are additionally subject to the policies of the companies that provide them.

5. How Long We Keep Data

We keep personal data only for as long as needed for the purpose it was collected, and then delete or anonymize it. As a guide:

  • order, invoice and payment records: for the period required by tax and commercial law (typically 7 years);
  • support and claim correspondence: for the lifetime of the customer relationship plus 3 years;
  • fraud and dispute records: for up to 5 years after the event, to defend claims and prevent repeat abuse;
  • marketing data: until you unsubscribe or 2 years after your last interaction;
  • analytics and log data: typically 14 to 26 months, depending on the tool.

Longer retention may apply where data is needed for ongoing litigation, an investigation, or a legal hold.

6. Security

We use encryption in transit, access controls, vendor due diligence and other safeguards appropriate to the sensitivity of the data. No online system is completely secure, and we cannot promise that unauthorized access will never occur. If a breach affecting your data creates a risk to you, we will notify you and any required authority in accordance with applicable law.

7. Your Choices and Rights

Subject to the law of your place of residence, you may have the right to:

  • find out whether we hold data about you and obtain a copy;
  • have inaccurate data corrected;
  • have data deleted;
  • restrict or object to certain processing, including profiling for marketing;
  • receive your data in a portable format;
  • withdraw a consent you previously gave;
  • opt out of targeted advertising, "sale" or "sharing" of personal data under applicable US state laws;
  • not be treated differently for exercising these rights;
  • lodge a complaint with a supervisory authority.

To exercise any of these rights, email support@solfaus.com with the subject line "Privacy Request". We will verify your identity before acting, which may require you to confirm details associated with your account or order. Authorized agents must provide written proof of authority. We respond within the period required by law.

Where required, we honor browser-based opt-out signals such as Global Privacy Control.

You can leave our marketing list at any time by clicking the unsubscribe link in any email or replying STOP to any text message. Transactional messages about your order will continue to be sent.

8. Transfers Across Borders

Solfaus operates from Austria and serves customers internationally. Your data may be stored and processed in the United States, the European Economic Area, and other countries where we or our vendors operate. Where data leaves a jurisdiction with data-protection laws that require it, we use approved transfer tools such as standard contractual clauses or adequacy decisions.

9. External Websites

The Platform may link to websites, social media or services run by others. We have no control over how those parties handle your data, and this Policy does not apply to them. Review their policies before sharing information with them.

10. Amendments

We may change this Policy at any time. The revised version applies from the moment it is published on solfaus.com. Where a change materially reduces your rights, we will give you notice as required by law.

11. Contact

Solfaus Privacy Team
support@solfaus.com