Legal
Privacy
What we collect, who touches it, how long it stays, and how to make us delete it.
In short
Four numbers, before the eight sections
Each one is set out with its conditions further down, and the retention periods are drafts until the fiduciary confirms them.
7
Processors, none contracted
Each one described by the role it plays until the contract is signed and it can be named.
30
Days of server logs
The IP address, the page requested and the time. Then deleted.
10
Years of order records
The invoice and the order record, kept because accounting law requires it.
1
Month to answer you
Access, correction, deletion, portability. It costs you nothing.
What this site does today
There is no shop, no account system and no advertising on it. It sets no cookies and it loads nothing from another company's servers: the typeface, the images and every file are served from this domain. The rest of this notice describes the shop as it is being built, so you can read it before you are asked to trust it rather than after.
If you write to info@shilajatu.com, that email sits in an inbox read by one person and is used to answer you.
Who is responsible
The controller is Nico Jaroszewski, Schlosstalstrasse 202, 8408 Winterthur, Switzerland, trading as Shilajatu. Questions about data go to info@shilajatu.com and are answered by a person, not a ticket queue.
The business is small enough that no data protection officer is required. Whether an EU representative has to be appointed for a Swiss seller shipping into the EU is part of the same open question as the tax position, and this page is updated the day it is answered.
What we collect and why
To send you an order. Your name, delivery address, email address and, if you give one, a phone number for the carrier. The legal basis is performance of the contract. Without this there is no order.
To take the money. The payment provider handles the card details. We see the amount, the currency, the last four digits and whether it worked. Legal basis: performance of the contract.
To keep the books. The invoice and the order record, because tax law says to. Legal basis: a legal obligation.
To answer you. Whatever you put in an email or the contact form. Legal basis: our legitimate interest in replying to someone who wrote to us, or the contract if you are asking about an order.
To send the Newsletter letter. Your email address, the date you asked, and the wording of the request you agreed to. Legal basis: your consent, which you can withdraw from any letter or by writing to us, and withdrawing it does not affect what was sent before.
To keep the site up. Server logs with the IP address, the page requested and the time. Legal basis: our legitimate interest in a site that works and is not being attacked.
We do not profile you, we do not sell anything to anybody, and there is no automated decision making with legal effects for you. We ask for no special category data and you should not send us any.
Who processes it for us
Each of these acts on our written instructions under a processor contract. They are described by role because none of them are engaged yet, and naming a company we have not signed with would be worse than saying so.
- Commerce platform
- Runs the checkout, holds the order record, the delivery address and the order history.
- Payment provider
- Takes the payment. Holds the card data, which never reaches us or this site.
- Fulfilment partner
- Picks, packs and hands the parcel to the carrier. Receives your name and delivery address, nothing else.
- Carrier
- Delivers the parcel. Receives your name, address and, where you give one, a phone number for the delivery notice.
- Email platform
- Sends order emails and, if you asked for it, the Newsletter letter. Holds your address and whether you opened it.
- Hosting provider
- Serves this site. Holds short lived server logs including the IP address of the request.
- Analytics provider
- Counts pages, once one is connected. Cookieless, no identifier, no profile.
Where the data goes
Data sits in Switzerland and the EU wherever the provider offers it. Some of the platforms a small shop can realistically use are American, and where personal data reaches a country without an adequacy decision the transfer is covered by the European Commission's standard contractual clauses together with the Swiss addendum. We will name each destination on this page once each contract is signed.
How long we keep it
- Order and invoice records: ten years, because accounting law requires it.
- Delivery address at the fulfilment partner and the carrier: deleted once the order is closed and the return window has passed.
- Emails you send us: two years, then deleted, unless they concern an open matter.
- Newsletter address and its consent record: until you unsubscribe, then the consent record alone is kept for three years so we can show the request was lawful.
- Server logs: 30 days.
Your rights
You can ask for a copy of what we hold, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, object to processing based on legitimate interest, and ask for your data in a portable file. Where processing rests on consent you can withdraw it at any time.
Write to info@shilajatu.com. We answer within one month and it costs you nothing. We may ask a question to confirm it is really you, and that question will never be more intrusive than the data you are asking about. Deleting an order record is the one request we can partly refuse, because tax law makes us keep it, and if that happens we say which record and for how long.
How to complain
Tell us first, because we can usually fix it faster. If that does not satisfy you, you can complain to a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner, and if you live in the EU or the UK, the authority for the country you live in. You do not need our permission and you do not have to tell us you are doing it.
The questions everyone asks
What is shilajit, actually?
A dark resin that seeps out of rock at altitude in the Himalaya, made of plant matter pressed and broken down over a very long time. What comes off the rock is not the product. Shodhana, the purification step, is what separates the resin from everything it was sitting in, and that is the step worth asking a seller about.
Why does fulvic acid matter?
Fulvic acid is a carrier molecule. It binds trace minerals and is studied as a way of getting them across a cell membrane, which is why the interesting question about a mineral is not how much is in the jar but how much of it arrives. That is the mechanism the research is built on. It is a line of study, not a settled fact, and nobody should sell it to you as one.
How much do I take, and when would I notice anything?
A rice-grain portion, dissolved in warm water or under the tongue, once a day. A 30g jar lasts two to three months at that dose. Shilajit is not a stimulant and nothing here works like one, so the honest unit of time is a month rather than an afternoon. If you want the caffeine experience this will disappoint you.
Resin or capsules?
Resin is the whole-spectrum mineral load and it tastes like it does. Capsules are 500mg split evenly between a standardised active and purified resin, in a vegan HPMC shell with no rice flour, no magnesium stearate and no bulking agent. Six blends, each built on the same resin. One caution: the Sea Moss and Bladderwrack blend is naturally high in iodine, so if you have Hashimoto’s or any diagnosed thyroid condition, take that one to your doctor rather than to the checkout.
Where does it come from, and how do I know it is clean?
Collected at altitude in Nepal and purified in a GMP-certified facility. Rock carries whatever the rock carried, which in the Himalaya can mean lead, arsenic and mercury, so every batch is tested for heavy metals by a third-party laboratory and a certificate of analysis is held for the batch you receive. A jar that cannot show you what came out the other side is asking you to take that on faith.
Do you ship outside Europe?
The launch markets are the EU, the UK and Switzerland. Australia, New Zealand, Canada and Ireland get shipping rates without a localised site. Rates and delivery times go up once fulfilment confirms them.
