Privacy Policy

1. Who We Are

Caviar of Switzerland GmbH (“we”, “us”, “our”) is the data controller for personal data collected through this website. We are a Swiss company with registered offices in Zug, Switzerland. As we sell to customers in the European Union and United Kingdom, we comply with the EU General Data Protection Regulation (GDPR) and the UK GDPR, as well as the Swiss Federal Act on Data Protection (nFADP).

2. What Data We Collect

Account and Order Data

When you create an account or place an order, we collect:

• Name and email address
• Billing and delivery address
• Phone number (if provided)
• Order history and product preferences
• Payment method details (processed and stored by our payment provider — we do not store card numbers)

Newsletter and Marketing

If you subscribe to our newsletter or opt in to marketing communications, we collect your email address and, if provided, your first name. We use Klaviyo to manage email communications. Subscription is always opt-in; you may unsubscribe at any time via the link in any email.

Website Usage Data

We collect standard website analytics data including pages visited, time on site, referring URL, and device/browser type. This data is collected in aggregate and is not linked to identifiable individuals unless you have an account and are logged in. We use this data to improve the website experience.

Customer Service

If you contact us via email or the contact form, we retain the content of that correspondence and your contact details for the purpose of responding to and resolving your enquiry.

3. How We Use Your Data

• To process and fulfil your order — including sharing necessary details with our fulfilment, shipping, and payment partners. Legal basis: contract performance.
• To send order and shipping confirmations — transactional emails related to your purchase. Legal basis: contract performance.
• To send marketing communications — only if you have opted in. You may withdraw consent at any time. Legal basis: consent.
• To comply with legal obligations — including tax, accounting, and regulatory requirements. Legal basis: legal obligation.
• To improve our website and services — using aggregated analytics data. Legal basis: legitimate interest.
• To prevent fraud and maintain security — monitoring for suspicious activity. Legal basis: legitimate interest.

4. Who We Share Your Data With

We do not sell your personal data. We share it only with service providers who process it on our behalf, under data processing agreements that require them to protect it:

• Payment processors (Stripe) — for secure payment processing. Stripe is PCI-DSS Level 1 certified.
• Shipping partners (DHL, FedEx, Swiss Post) — name and delivery address to fulfil your order.
• Email marketing (Klaviyo) — for newsletter and marketing email delivery, if you have subscribed.
• Website hosting and analytics — our hosting provider and analytics platform. Analytics data is anonymised or pseudonymised.
• Legal and regulatory authorities — where required by law, court order, or regulatory requirement.

5. Data Retention

We retain personal data for as long as necessary for the purposes for which it was collected, subject to legal retention obligations:

• Order and account data is retained for 10 years to comply with Swiss and EU accounting and tax law.
• Marketing consent records are retained for the period of the subscription plus 3 years to demonstrate consent.
• Customer service correspondence is retained for 3 years after the matter is resolved.
• Website analytics data is retained in anonymised aggregate form indefinitely.

6. Your Rights

Under the GDPR and Swiss nFADP, you have the following rights regarding your personal data:

• Right of access — to receive a copy of the personal data we hold about you.
• Right to rectification — to correct inaccurate data.
• Right to erasure — to request deletion of your data, subject to legal retention obligations.
• Right to restrict processing — to limit how we use your data in certain circumstances.
• Right to data portability — to receive your data in a machine-readable format.
• Right to object — to processing based on legitimate interest, including direct marketing.
• Right to withdraw consent — at any time, where processing is based on consent (e.g. newsletter).

To exercise any of these rights, email privacy@caviarofswitzerland.com. We will respond within 30 days. You also have the right to lodge a complaint with the relevant supervisory authority — in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); in the EU, your national data protection authority.

7. Cookies

Our website uses cookies to enable essential functionality (session management, shopping cart), analytics (anonymised traffic data), and, where you have consented, marketing personalisation. You can manage your cookie preferences via the cookie settings link in the website footer. Disabling non-essential cookies will not affect your ability to browse or purchase.

8. International Data Transfers

Some of our service providers are based outside Switzerland and the EEA (for example, Klaviyo is a US company). Where we transfer personal data internationally, we ensure appropriate safeguards are in place — such as Standard Contractual Clauses approved by the European Commission, or transfers to countries with an adequacy decision. Switzerland has an adequacy decision from the EU Commission; transfers from Switzerland to the EU and vice versa proceed without restriction.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. Material changes will be communicated to existing customers by email. Continued use of the website after a policy update constitutes acceptance of the revised policy.

10. Contact

For any questions about this Privacy Policy or your personal data, contact our privacy team: