Privacy Policy

Die Datenschutzerklärung in deutscher Sprache finden Sie hier.

Summary

We, the Open Home Foundation, Grabenstrasse 25, 6340 Baar, Switzerland, are the operator of the merch store at https://store.openhomefoundation.org and are responsible for the data processing described in this privacy policy, unless stated otherwise below.

Privacy is one of the Open Home Foundation's three fundamental principles that are at the core of everything we do – including this merch store.

To fulfill merch store orders we do need to collect some personal data from you, such as your address (for delivery), phone number/email (for delivery notifications), and clothing size if you order apparel.

However, the Open Home Foundation will never use this data for anything else than order fulfillment and accounting purposes.

As we operate from Switzerland, we comply with the Swiss Federal Act on Data Protection (FADP) as well as the EU General Data Protection Regulation (GDPR) for our website visitors and customers in the European Economic Area.

This website is currently hosted by Squarespace, headquartered at 225 Varick Street, New York, USA. They set cookies for platform functionality, analytics, and potential remarketing. While the Open Home Foundation minimizes data collection where possible, these cookies are inherent to our hosting platform.

1. Data Processing Activities

a. Contacting us

If you contact us through our contact addresses and channels (e.g., by email, phone, or contact form on our website), your personal data will be processed. We process the data you provide us with, such as your name, email address, order number and your request. Additionally, the time of receipt of the request will be documented. Mandatory fields are marked in contact forms as “(required)”. We process this data to address your request (e.g., providing information about our products and services, assisting with contract processing, incorporating your feedback into the improvement of our products and services, etc.).

For handling contact requests through the website contact form, we use a software application provided by Squarespace. Therefore, your data may be stored in a database of Squarespace, which may allow Squarespace to access your data if this is necessary for providing the software and supporting its use.

It may be that Squarespace wishes to use some of this data for its own purposes (e.g., delivering marketing emails or conducting statistical analysis). For these data processing operations, Squarespace is the controller and must ensure compliance with data protection laws in connection with these data processing operations. Information about data processing by Squarespace can be found at Privacy Policy — Squarespace.

b. Ordering on our website

When you buy something on this website, we collect personal information from you to enter into a sales contract and to fulfill your order. We may collect information like your:

  • Billing and shipping address

  • Details relating to your purchase (for example, your shirt size)

  • Email address

  • Name

  • Phone number

We store this information together with the relevant order details (time, order number) and information regarding the fulfilment of the contract (delivery details, product returns) in our warehousing system provided by OGOship Ltd, Palkkatilanportti 1, 00240 Helsinki, Finland, so that we can ensure correct order processing and fulfilment. This information is also shared with Squarespace, our online store hosting provider, so that they can provide data storage services to us and deliver the relevant data to OGOship Ltd.

For website users in the EEA, the legal basis for this data processing is the performance of a contract with you within the meaning of Article 6(1)(b) of the GDPR.

It may be that OGOship wishes to use some of the data it obtains for its own purposes (e.g., delivering advertising content or conducting statistical analysis). For these data processing operations, OGOship is the controller and must ensure compliance with data protection laws in connection with these data processing operations. Information about data processing by OGOship can be found at Privacy Policy - OGOship.

As you go through checkout, this website may auto-complete your shipping and billing address by sharing what you type with the Google Places API and returning suggestions to you to improve your checkout experience. When you use these features, certain data (such as your IP address and selected location details) is transmitted to Google. For website users in the EU, this processing is based on Article 6(1)(b) GDPR (performance of a contract) and, where applicable, Article 6(1)(a) GDPR (your consent). Google acts as an independent controller for this data; you can review Google’s privacy policy at: Google Privacy Policies.

c. Payments

When you make a purchase from us on this website, we use Squarespace Payments as our payment solution. Squarespace Payments is a fully integrated, native payment solution provided to us by our online store service provider Squarespace.

For website users in the EEA, the legal basis for this data processing is the performance of a contract with you within the meaning of Article 6(1)(b) of the GDPR.

Squarespace Payments makes use of the following third party service providers which will also receive your personal information and process it in accordance with their privacy policies:

d. Order emails

We may email you with messages about your order. For example, we may email you to tell you that:

  • You have made a purchase

  • Your order has shipped

It’s not possible to unsubscribe from these messages. We share your contact information with Squarespace, our website hosting provider, so they can send these emails to you on our behalf.

For website users in the EEA, the legal basis for this data processing is the performance of a contract with you within the meaning of Article 6(1)(b) of the GDPR.

e. Shipping

To deliver your order to you, we share your name, address, and phone number with our shipping partners GLS/FedEx (depending on location) solely for the purpose of logistics and delivery.

For website users in the EEA, the legal basis for this data processing is the performance of a contract with you within the meaning of Article 6(1)(b) of the GDPR.

Please refer to the respective shipping partners’ privacy polices:

f. Analytics

This website is hosted by Squarespace. Squarespace collects personal data when you visit this website, including:

  • Information about your browser, network and device

  • Web pages you visited prior to coming to this website

  • Web pages you view while on this website

  • Your IP address

This information may also include details about your use of this website, including:

  • Clicks

  • Internal links

  • Scrolling

  • Searches

  • Timestamps

This data enables you to use our website (establishing a connection), and allows us to ensure the long-term security and stability of the system and carry out error and performance analysis and optimisation of the website.

We share this information with Squarespace, our website analytics provider, to learn about site traffic and activity. Squarespace also uses this data to run the website, and to protect and improve its platform and services. Squarespace analyzes the data in a de-personalized form.

For website visitors from the EEA, the legal basis for this data processing is our legitimate interest within the meaning of Article 6(1)(f) of the GDPR in the purposes described above.

g. Cookies

This website uses cookies, which are small files or pieces of text that download to a device when a visitor accesses a website or app, and similar technologies. For information about viewing the cookies dropped on your device, visit https://www.squarespace.com/privacy.

We use cookies for various purposes that are technically necessary for the use of the website. For example, the provision of ordering functions relies on the use of cookies. These necessary and required cookies are always used: The cookies Squarespace uses – Squarespace Help Center.

For non-essential cookies, we ask for your consent when you access the website. These analytics and performance cookies are used on the website only when you click “Accept” on the cookie banner: The cookies Squarespace uses – Squarespace Help Center.

For a full breakdown of cookie usage, please visit https://support.squarespace.com/hc/en-us/articles/360001264507-The-cookies-Squarespace-uses.

For website users in the EEA, the legal basis for this data processing is our legitimate interest within the meaning of Article 6(1)(f) of the GDPR in providing a user-friendly and up-to-date website.

You may also be able to configure your browser to prevent cookies from being stored on your computer or receive a notification whenever a new cookie is being sent. Via the following links, you will find instructions on how to configure cookie settings for selected browsers.

Disabling cookies may prevent you from using all the features of our website. .

h. Fonts

This website serves font files from and renders fonts using Google Fonts and Adobe Fonts to ensure a consistent and visually appealing display of text. To properly display this site to you, these third parties may receive personal information about you, including:

  • Information about your browser, network, or device

  • Information about this site and the page you’re viewing on it

  • Your IP address

For website users in the EEA, the legal basis for this data processing is our legitimate interest within the meaning of Article 6(1)(f) of the GDPR in providing an optimised website.

Google and Adobe act as independent controllers for this data; you can review Google’s privacy policy at https://policies.google.com/privacy and Adobe’s privacy policy at https://www.adobe.com/privacy.html. Data may be transferred by Google or Adobe outside the EEA or Switzerland in compliance with the EU Standard Contractual Clauses. You can prevent this by disabling web fonts in your browser settings, though this may affect site functionality.

i. Social Media

Our website contains links to our profiles on the social networks of the following providers:

  • Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, Privacy Policy;

  • X Internet Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland, X Privacy Policy;

If you click on the icons of the social networks, you will be automatically redirected to our profile on the respective network. This establishes a direct connection between your browser and the server of the respective social network. As a result, the social network receives information that you have visited our website with your IP address and clicked on the link. This may also involve the transfer of data to servers abroad, e.g., in the USA (for information on the absence of an adequate level of data protection and the proposed safeguards, see the Section below on International Data Transfers).

If you click on a link to a social network while you are logged into your user account on that social network, the content of our website can be associated with your profile, allowing the social network to directly link your visit to our website to your account. If you want to prevent this, please log out of your account before clicking on the respective links. A connection between your access to our website and your user account will always be established if you log in to the respective social network after clicking on the link. The data processing associated with this is the responsibility of the respective provider in terms of data protection. Therefore, please refer to the privacy notices on the social network's website.

2. International Data Transfers

We operate from Switzerland. Our store is hosted on Squarespace and uses service providers (like Google and Stripe) located in the United States. Consequently, your personal data may be transferred to and processed in countries outside of Switzerland and the European Economic Area (EEA) that do not provide an adequate level of data protection from a Swiss or EU perspective.

We ensure the transfers of data to the United States rely on legal frameworks recognized by the Swiss Federal Data Protection and Information Commissioner (FDPIC) and the European Commission, such as the Data Privacy Framework (DPF) or Standard Contractual Clauses (SCCs) and will, if necessary, ensure additional appropriate safeguards are in place so that your data is adequately protected at our third-party service providers.

3. Retention Periods

We only store personal data for as long as it is necessary to carry out the processing described in this privacy policy within the scope of our legitimate interests.

For contractual data, we are required by law to retain business communication, concluded contracts, and accounting documents. According to these regulations, records must be retained for up to 10 years. If we no longer need this data to provide services for you, the data will be blocked. This means that the data may then only be used if this is necessary to fulfil the retention obligations or to defend and enforce our legal interests. The data will be deleted as soon as there is no longer any legal obligation to retain it and no legitimate interest in its retention exists.

4. Your Rights

Under the GDPR and FADP, you have the right to:

  • Access: Ask for information at any time and free of charge about your personal data stored by us.

  • Correction: Ask us to fix incorrect data.

  • Deletion: Ask us to delete your data. Under certain circumstances this right may not be available, for example where we are legally required to keep data records.

  • Restriction: Ask us to limit how we use your data.

  • Portability: Receive your data in a structured, commonly used format.

  • Withdraw consent: Where the legal basis for processing your data is your consent, you have the right to withdraw that consent at any time. However, processing activities based on your consent in the past will not become unlawful due to your withdrawal.

To exercise any of these rights, please contact us at hello@openhomefoundation.org.

5. Effective Date

This privacy policy was last updated on 2025-12-16.