Privacy Policy
Last updated: August 2026
The protection of your personal data is important to us. This Privacy Policy informs you about what data we collect, how we use it, and what rights you have. It applies in accordance with the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (nFADP).
1. Data Controller
The party responsible for data processing on this website is:
WiMSY Jewelry
Holzmoosrütistrasse 8B
8820 Wädenswil
Switzerland
Email: hello@wimsy.ch
Website: wimsy.ch
2. Data We Collect
We collect and process the following categories of data:
- Order data: Name, delivery address, billing address, email, phone number
- Payment data: Payment method, transaction data (credit card details are processed directly by the payment provider and not stored by us)
- Usage data: IP address, browser type, pages visited, date and time of visit
- Communication data: Content of emails or messages you send us
3. Purpose of Data Processing
We process your data for the following purposes:
- Processing your order and delivery
- Communication with you (e.g. order confirmation, shipping updates)
- Customer service and complaint handling
- Improving our online store (analysis of user behaviour)
- Fulfilling legal obligations (e.g. accounting, taxes)
4. Legal Basis for Processing (GDPR)
- Contract performance (Art. 6(1)(b) GDPR): Order processing
- Legitimate interests (Art. 6(1)(f) GDPR): Fraud prevention, shop improvement
- Consent (Art. 6(1)(a) GDPR): Newsletter, cookies (where you have given consent)
- Legal obligation (Art. 6(1)(c) GDPR): Tax and accounting obligations
5. Disclosure to Third Parties
We only share your data where necessary:
- Shopify Inc. (technology partner / hosting): Your shop runs on the Shopify platform. Shopify processes data in accordance with their own privacy policy. More information: shopify.com/legal/privacy
- Payment providers (e.g. Shopify Payments, Stripe, PayPal): Processing payments
- Shipping service providers (e.g. Swiss Post, DHL): Delivery of your order
- [Other third-party providers, e.g. Google Analytics — please add if applicable]
We do not pass on data to third parties for advertising purposes.
6. Data Transfer to Third Countries
Some of our partners (e.g. Shopify) are based in countries outside the EU/Switzerland (in particular the USA). Such transfers are carried out on the basis of standard contractual clauses pursuant to Art. 46 GDPR and in accordance with the requirements of the nFADP.
7. Retention Period
We store your data for as long as necessary for the respective purpose or as required by statutory retention periods (in Switzerland generally 10 years for accounting records).
8. Cookies
Our shop uses cookies and similar technologies to ensure functionality and improve your shopping experience. Necessary cookies are set without consent; optional cookies (e.g. for analytics) are only set with your agreement.
You can disable cookies in your browser settings at any time, though this may limit the functionality of the shop.
9. Your Rights
You have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR / Art. 25 nFADP): You may request information about the data we process at any time.
- Right to rectification (Art. 16 GDPR): You may request the correction of inaccurate data.
- Right to erasure (Art. 17 GDPR): You may request the deletion of your data, unless statutory retention obligations apply.
- Right to restriction of processing (Art. 18 GDPR): You may request that processing be restricted.
- Right to data portability (Art. 20 GDPR): You may request your data in a common machine-readable format.
- Right to object (Art. 21 GDPR): You may object to processing based on legitimate interests.
- Right to withdraw consent: You may withdraw any consent given at any time with effect for the future.
To exercise your rights, please contact us at: hello@wimsy.ch
10. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection authority:
- Switzerland: Federal Data Protection and Information Commissioner (FDPIC)
- EU: The competent data protection authority in your EU country of residence
11. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy as needed. The current version is always available on this page. The date stated above is authoritative.
This Privacy Policy is a template and does not constitute legal advice. We recommend having the text reviewed by a lawyer specialising in data protection law.