We collect the minimum necessary to process your orders, and nothing more. We do not sell or rent your data to anyone, and we do not perform profiling or automated decision-making about you.
Who processes your data
Ryan Kraehenbuehl
Avenue de l'Île Heureuse 2
1800 Vevey, Switzerland
Email: kraehenbuehl.business@gmail.com
Processing is subject to the Swiss Federal Data Protection Act (FADP). If you reside in the European Union, the GDPR may also apply; the rights described below are then also available to you under that regulation.
What we collect, and why
| Data | Why | Retention |
|---|---|---|
| First and last name | Process and ship the order, issue the invoice | 10 years |
| Shipping and billing address | Deliver the package, accounting obligations | 10 years |
| Email address | Order confirmation, shipping tracking, answering your questions | 10 years |
| Phone number (optional) | Contact you in case of delivery issues | 10 years |
| Order details | Tracking, warranty, returns, accounting | 10 years |
| Order note (scents chosen) | Prepare the order according to your choice | 10 years |
| Email address for newsletter | Send you our news, if you have consented | Until unsubscription |
| Technical data (IP address, browser, pages viewed) | Operate the site, secure it, measure audience | Depending on the cookies concerned |
Your payment data does not pass through us. Card number, expiration date, security code: everything is processed directly by our payment provider over an encrypted connection. We never have access to it and never store it.
The ten-year retention period results from the Swiss legal obligation to retain accounting documents. After this period, the data is deleted or anonymized.
On what grounds we process them
- Contract performance — for everything related to your order, its delivery, and its tracking. Without this data, we cannot deliver to you.
- Legal obligation — for the retention of accounting documents.
- Your consent — for the newsletter and non-essential cookies. You can withdraw it at any time.
- Legitimate interest — for site security and fraud prevention.
With whom we share them
Only with service providers necessary for the operation of the service, and only for what they need to know:
Shopify
Shop hosting and order management. Shopify International Ltd, Ireland, with servers that may be located in Canada and the United States.
Swiss Post
Package delivery. Receives only the name and shipping address.
Payment provider
Transaction processing. We never see your bank details.
We may also transmit data if required by law or if a competent authority validly requests it.
Transfers outside Switzerland
Our shop is hosted by Shopify, whose infrastructure is located outside Switzerland, notably in Canada, the European Union, and the United States. Some of your data is therefore processed abroad.
These transfers are based either on an adequacy decision recognizing a sufficient level of protection, or on appropriate contractual safeguards — standard contractual clauses — concluded with the relevant provider.
What you can demand from us
At any time, free of charge, you can request:
- Access — to know what data we hold about you and obtain a copy
- Rectification — to have inaccurate data corrected
- Erasure — to have your data deleted, subject to our accounting obligations
- Objection — to object to processing based on our legitimate interest
- Restriction — to request the suspension of disputed processing
- Portability — to receive your data in a common, machine-readable format
- Withdrawal of consent — for the newsletter and cookies, at any time and without justification
Write to kraehenbuehl.business@gmail.com. We will respond within 30 days. We may ask you to prove your identity before transmitting personal data — this is a precaution against impersonation, not an obstacle.
If our response does not satisfy you, you can contact the Federal Data Protection and Information Commissioner (FDPIC) in Bern. Residents of the European Union can contact the supervisory authority in their country.
Our emails
We only write to you if you have subscribed. Each email includes an unsubscribe link that works immediately. We do not use your address for anything else and do not pass it on to anyone.
Receiving your order confirmation and package tracking is not advertising: these messages are part of the contract and you receive them even without subscribing to the newsletter.
What we place on your device
- Technical cookies — essential: they make the shopping cart, your session, and payment security work. Without them, the shop will not function.
- Audience measurement cookies — they tell us which pages are viewed, in an aggregated way, to improve the site.
You can block or delete them from your browser settings. Blocking technical cookies will prevent the order from working.
How we protect them
Exchanges with this site are encrypted end-to-end. Access to order data is limited to those who need it to prepare and ship your package, and administration accounts are protected by authentication.
No system is foolproof. If a security breach posing a high risk to your rights were to occur, we would inform the FDPIC and the affected individuals, as required by law.
Changes to this policy
We may update this text, especially if our tools change. The date below indicates the latest version. In the event of significant changes affecting your rights, we will inform registered customers.
Last updated: September 2026.