Privacy Policy

1. Controller

The data controller responsible for the processing of your personal data on this website is:

2. What Data We Collect

When you visit this website or place an order, we may collect the following categories of personal data:

• Contact data: name, email address, phone number
• Order data: delivery address, billing address, order history
• Payment data: processed securely via our payment provider — we do not store card details
• Usage data: IP address, browser type, pages visited, time of visit (collected via server logs and analytics tools)
• Communication data: any messages you send us via contact forms or email

3. Legal Basis for Processing (GDPR Art. 6)

We process your personal data on the following legal bases:

• Contract performance (Art. 6(1)(b)): to process and fulfil your orders, handle returns, and communicate about your purchase
• Legal obligation (Art. 6(1)(c)): to comply with tax, accounting, and consumer protection requirements
• Legitimate interests (Art. 6(1)(f)): to protect our website from fraud and abuse, and to improve our services
• Consent (Art. 6(1)(a)): for marketing emails and non-essential cookies — only where you have given explicit consent

4. How We Use Your Data

• Processing and delivering your orders
• Customer service and support
• Sending transactional emails (order confirmations, shipping updates)
• Marketing communications (only with your consent, and you may opt out at any time)
• Improving our website and services
• Complying with legal obligations

5. Data Sharing

We do not sell your personal data. We may share it with the following third parties only to the extent necessary:

• Shopify Inc. — our e-commerce platform (data processed under Shopify's data processing agreement)
• Payment processors — for secure payment processing
• Shipping providers — to deliver your order
• Email service providers — for transactional and marketing communications
• Analytics providers — for website performance measurement (where consent is given)

All processors are bound by data processing agreements and are required to handle your data in accordance with GDPR.

6. International Transfers

Some of our service providers are based outside the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure appropriate safeguards are in place (e.g. EU Standard Contractual Clauses) in accordance with GDPR Chapter V.

7. Cookies

This website uses cookies and similar technologies. These include:

• Essential cookies: required for the website and shopping cart to function — no consent needed
• Analytics cookies: help us understand how visitors use the site — only placed with your consent
• Marketing cookies: used to show relevant advertisements — only placed with your consent

You can manage your cookie preferences at any time via our cookie settings.

8. Retention Periods

We retain personal data only for as long as necessary for the purposes for which it was collected:

• Order and customer data: 10 years (statutory retention for tax/accounting purposes)
• Marketing data: until you withdraw consent or unsubscribe
• Analytics data: 26 months (or as set by the respective tool)

9. Your Rights (GDPR Art. 15–22)

As a data subject under GDPR, you have the right to:

• Access the personal data we hold about you (Art. 15)
• Rectify inaccurate or incomplete data (Art. 16)
• Erasure ("right to be forgotten") where applicable (Art. 17)
• Restriction of processing in certain circumstances (Art. 18)
• Data portability — receive your data in a structured, machine-readable format (Art. 20)
• Object to processing based on legitimate interests or for direct marketing (Art. 21)
• Withdraw consent at any time without affecting prior processing (Art. 7(3))

To exercise any of these rights, please contact us at privacy@swissglow.beauty. We will respond within 30 days.

You also have the right to lodge a complaint with your national data protection authority.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction, including SSL/TLS encryption for all data transmissions.

11. Changes to This Policy

We may update this privacy policy from time to time. The latest version is always available on this page. We will notify you of material changes where required by law.

12. Contact

For any questions or concerns regarding this privacy policy or the processing of your personal data, please contact us at:
privacy@swissglow.beauty