Privacy Policy

Effective Date: 20 July 2025

Last reviewed: 16 December 2025

Swiss Cosmetics and Nutrition Labs AG (“we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your data when you visit or shop on our website.

Who We Are

• Name: Swiss Cosmetics and Nutrition Labs AG
• Address: Dammstrasse 16, 6300 Zug, Switzerland
• Email: hello@swisscosmeticslab.com

What Personal Data We Collect

We collect and process personal data only as needed to provide our services:

a. When You Place an Order

• Full name
• Billing and shipping address
• Email address
• Phone number (optional)
• Order details
• Payment information (processed securely via our payment service provider Wallee; we do not store your card details)

b. When You Create an Account

• Name
• Email address
• Password (securely encrypted)
• Order history

c. When You Contact Us

• Name, email, and any message you send

d. When You Subscribe to Our Newsletter

• Email address
• First name (optional)

Website Hosting and Technical Data

Our site is hosted on WordPress.com (Automattic Inc.). Some technical data (e.g. IP address, browser type) may be processed automatically to ensure site security and functionality.

For more information on how Automattic processes personal data, please see Automattic’s Privacy Policy: https://automattic.com/privacy/.

Website Analytics with Google Analytics

We use Google Analytics (GA4), a web analytics service provided by Google LLC, to understand how visitors use our website and to improve its performance, usability, and marketing effectiveness. Google Analytics processes information such as:

• IP address (anonymised before storage)
• Device and browser information
• Pages visited and interactions
• Approximate location (country or city level)

IP anonymisation is enabled before any data is stored or processed.

The legal basis for the use of Google Analytics is your explicit consent, which you can provide or withdraw at any time via our cookie preferences. Google Analytics is used as a data processor acting on our behalf.

Google may process analytics data on servers located outside Switzerland or the EU/EEA, including in the United States. Such transfers are safeguarded by legally recognised mechanisms, including Standard Contractual Clauses (SCCs) approved by the European Commission.

You can opt out of Google Analytics tracking at any time through our cookie settings or by using browser-based opt-out tools provided by Google.

Analytics data is retained for a limited period in accordance with our Google Analytics retention settings and then automatically deleted.

For more information on how Google processes data, please see Google’s Privacy Policy: https://policies.google.com/privacy.

Email Marketing with MailerLite

We use MailerLite, an email marketing and automation platform, to manage our newsletter subscriptions and non-transactional customer communications.

When you subscribe to our newsletter or receive marketing or informational emails:

• We process your email address and, if provided, your name
• Your data is stored securely by MailerLite
• You can unsubscribe at any time using the link included in every email

MailerLite may collect limited engagement data (such as email opens and link clicks) to help us improve communication effectiveness.

MailerLite processes data in accordance with applicable data protection laws, including GDPR, and uses appropriate safeguards for international data transfers.

See MailerLite’s Privacy Policy for further details: https://www.mailerlite.com/legal/privacy-policy.

The legal basis for sending marketing emails is your explicit consent, which you may withdraw at any time.

Transactional Emails (Order Communications)

Order-related emails (such as order confirmations, payment confirmations, shipping notifications, and invoices) are sent directly via our e-commerce platform (WooCommerce) and its integrated service providers. These emails are necessary to fulfil your purchase contract and are not used for marketing purposes.

The legal basis for processing this data is the performance of a contract (Art. 6(1)(b) GDPR).

Payment Processing with Wallee

Payments are processed securely via Wallee AG, a Swiss-based payment service provider. Your payment details are encrypted and processed directly by Wallee and are never stored on our servers. Wallee complies with applicable payment security standards and data protection regulations.

See Wallee’s Privacy Policy for further details: https://en.wallee.com/legal/privacy-policy.

Cookies and Consent Management

We use cookies and similar technologies to ensure the proper functioning of our website and, with your consent, to analyse website usage and improve our services. Cookies and similar technologies used on this site fall into the following categories:

• Essential cookies – required for core functionality such as shopping cart, checkout, user login, and security
• Analytics cookies – used only with your consent to collect aggregated usage statistics via Google Analytics

Analytics cookies are only activated after you have given explicit consent through our cookie banner.

You may accept, reject, or customise your cookie preferences at any time and withdraw your consent without affecting the lawfulness of prior processing.

You can also manage or delete cookies through your browser settings.

How We Use Your Data

We use your personal data to:

• Process orders and deliver products
• Create and manage your account
• Send newsletters (if subscribed)
• Respond to inquiries
• Fulfil legal and tax obligations
• Analyse website usage and improve performance and marketing effectiveness (with consent)

Data Storage and Security

Your data is securely stored and only retained for as long as necessary to fulfill our obligations or comply with legal requirements. We use appropriate technical and organizational measures to protect your information.

Sharing of Data

We only share data with trusted third parties necessary for the operation of our services:

• Google LLC (website analytics, with consent)
• Wallee AG (payment processing)
• MailerLite (email communications)
• WordPress.com / Automattic (site hosting and security)
• Logistics providers (order fulfilment)

All partners comply with applicable data protection regulations.

Your Rights (GDPR)

If you are located in Switzerland, your data is processed in accordance with the Swiss Federal Act on Data Protection (nFADP). In Switzerland, the competent supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC).

If you are located in the EU/EEA, you have the right to:

• Access your personal data
• Request correction or deletion
• Withdraw consent (e.g., for newsletters)
• Object to processing
• Request data portability
• You may withdraw your consent for analytics or marketing communications at any time via our cookie settings or unsubscribe links.
• Lodge a complaint with a supervisory authority

To exercise these rights, contact us at hello@swisscosmeticslab.com.

International Data Transfers

Swiss Cosmetics and Nutrition Labs AG is based in Switzerland. If you are located in the EU or EEA, please note:

• Your data may be processed in Switzerland, which is recognised by the European Commission as providing an adequate level of data protection under GDPR.
• Some of the services we use (such as website hosting through WordPress.com / Automattic Inc. or email delivery through MailerLite) may involve the transfer of data outside Switzerland and the EU/EEA, including to the United States.
• In these cases, your data is protected through legally valid mechanisms, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or equivalent safeguards.

Updates to This Policy

We may update this policy to reflect legal or operational changes. The latest version will always be published on this page with the effective date shown above.