The short version: we collect your name, address, email, and order history because we need them to ship gummies and answer your questions. We never sell your data, never use third-party advertising trackers without your consent, and you can request deletion at any time at support@swissgummies.ch.
Who is the data controller
Swiss Nutri GmbH, registered in Küssnacht am Rigi, Schwyz canton, is the controller for personal data processed via swissgummies.ch.
Postal: Swiss Nutri GmbH, Fänn West 10, 6403 Küssnacht am Rigi (SZ), Switzerland.
Email for data matters: support@swissgummies.ch.
Commercial register UID: CHE-397.657.671.
What data we collect
We only collect what we need to fulfil your order or answer your question.
When you order
- Name, shipping address, billing address (used to dispatch and invoice).
- Email and phone (used for order updates and delivery notifications).
- Order history (used for refund requests, returns, and subscription management).
- Payment details (handled by our payment processor — we never see or store your card number).
When you write to us
- The contents of your message and any attachments you choose to send.
- Your email and name to reply to you.
When you visit the site
- Anonymised analytics (page views, country, device class) — only after you accept analytics cookies.
- Essential session data (cart contents, login state) — required to make the site work.
Why we process it
Each piece of data has one of these legal bases:
- Contract performance — to ship orders, manage subscriptions, process refund requests.
- Legal obligation — to keep invoicing records under Swiss tax law (10 years).
- Consent — for newsletter, analytics cookies, and marketing emails. Withdrawable any time.
- Legitimate interest — to prevent fraud, secure the site, and reply to support messages.
How long we keep it
- Order & invoicing data — 10 years (Swiss tax law).
- Customer account — until you delete it. We deactivate accounts inactive for 5+ years.
- Newsletter consent — until you unsubscribe.
- Analytics — 14 months (GA4 default).
- Support emails — 3 years for warranty/compliance reference, then deleted.
Your rights
Under Swiss FADP and EU GDPR you have the right to:
- Access your data and request a copy.
- Correct inaccurate data.
- Erase your data (subject to legal retention rules above).
- Restrict or object to processing.
- Port your data to another controller.
- Withdraw consent at any time, without affecting prior lawful processing.
- Lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local EU supervisory authority.
Email support@swissgummies.ch to exercise any of these. We reply within five working days.
International transfers
Some processors (Shopify, Klaviyo, Google) store data in the EU and US. We rely on the Swiss-US Data Privacy Framework, the EU adequacy decision for the US (where applicable), and EU Standard Contractual Clauses to ensure equivalent protection.
Security
We protect your data with TLS encryption in transit, at-rest encryption on Shopify, role-based access, and incident-response procedures. Card data never touches our servers — it goes directly to PCI-DSS-compliant payment processors.
Changes to this policy
We may update this policy to reflect changes in law or our practices. We post the updated version here with a new "Last updated" date. Material changes are also announced by email to active subscribers and customers.







