Privacy policy

Version dated 18 September 2026.

1. Controller and contact

The data controller is Lion Sport SA, Chemin de l’Étoile 1a, 1053 Cugy VD, Switzerland. For any question or request: contact@parfum4you.ch.

2. Data processed

Depending on your use, we process:

  • your name, addresses, email, telephone number, account and preferences;
  • products, prices, discounts, invoicing, payment, delivery, tracking, returns and refunds;
  • your requests, chat conversations, marketing subscriptions, reviews and appointments;
  • IP address, cookie or pixel identifiers, device, browser, approximate location, pages, searches, clicks, basket, order, traffic source and advertising interactions.

Data needed for payment is processed by Shopify Payments, card networks, supported wallets and TWINT. We do not necessarily receive the full card number. Do not provide sensitive data in free-text fields, chat or reviews.

3. Purposes and grounds

We use this data to manage your order and account, process payments, arrange delivery and returns, respond to your requests, prevent fraud, secure the shop and meet our accounting and legal obligations.

Depending on the services used and your choices, it is also used to arrange appointments, collect reviews, send offers, measure audience and purchases, assess campaigns and personalise recommendations and advertising. Providing data needed for an order does not in itself authorise its use for all advertising purposes.

We process data in accordance with the Swiss Federal Act on Data Protection (FADP). Where consent is required, it must be obtained separately and may be withdrawn for the future.

4. Shopify and Network Intelligence

Shopify hosts the shop and processes the data needed for sales, payments, customer accounts, security and analytics. Shopify Network Intelligence is enabled. Shopify may combine your interactions with our shop, Shopify and other merchants to provide enhanced services, including measurement, recommendations and personalised advertising. Shopify may act as a processor or as a separate controller. See Shopify Privacy, Cookies and DPA.

5. Measurement and advertising

Google & YouTube, Meta/Facebook/Instagram and TikTok are connected to the shop through the browser and on the server side. Analyzely also facilitates transmission to Google Analytics. These tools may receive browsing and purchase events, online identifiers, IP addresses, device information and, depending on matching settings, hashed contact details. They are used for statistics, conversion measurement, campaign optimisation and personalised advertising.

Recipients include Google Ireland Limited and Google companies, Meta Platforms Ireland Limited and Meta companies, and TikTok and the TikTok entities associated with the advertising account. See the policies of Google, Meta and TikTok.

Analyzely is provided by GroPulse, whose provider listing indicates an establishment in Bangladesh. See its privacy policy.

6. Functional service providers

  • Chatty, AVADA GROUP COMPANY LIMITED, Vietnam: automated chat, messages, contact details and relevant order data. Chatty states that data is stored in the United States and accessed from Vietnam. Policy and subprocessors.
  • CWILL INC, United States: ParcelPanel/CWILL Post-Purchase and SendWILL for tracking, notifications, subscriptions, campaigns and measurement of opens, clicks, bounces and unsubscribes. Policy and DPA.
  • Judge.me Ltd, United Kingdom: requesting, verifying and displaying reviews; names, emails, reviews, orders, delivery, IP addresses and email interactions may be processed. Policy and DPA.
  • Penida SARL, France: Cowlendar appointments. Policy and providers.

7. Other recipients

Necessary data is shared with the postal service handling delivery, payment providers and authorised persons managing your order or request. Our IT, security and advisory providers may access it to the extent necessary for their work. Data may be disclosed to authorities or courts where required by law or to assert rights.

Providers may act on our behalf or as separate controllers, particularly for their payment or security obligations or their own services. Their policies explain this processing.

8. Processing abroad

Some providers process data abroad. Shopify processes Swiss customer data particularly in Ireland, Canada, the United States and Singapore; its other subprocessors and countries are listed in its subprocessor list. Google, Meta and TikTok services may involve processing in Ireland, the United States and other countries mentioned in their privacy documents.

For support, tracking and marketing services, documented countries include the United States and Vietnam for Chatty, the United States for CWILL, the United Kingdom for Judge.me, France for Cowlendar and Bangladesh for GroPulse. These providers’ subprocessors may operate from other countries.

A transfer to a country whose protection is not recognised as adequate by Switzerland requires appropriate safeguards or an applicable statutory exception. Provider documents describe, among other things, standard contractual clauses, Swiss adaptations and, for Shopify, binding corporate rules. You may ask us for information about the recipients, countries and safeguards applicable to your data.

9. Cookies and preferences

Cookies and similar technologies are used to manage the basket, payment, security and preferences, as well as statistics, support and advertising. Advertising pixels may transmit events from your browser; some integrations also transmit events from servers.

The website banner lets you accept, reject or customise optional cookies. The “Cookie preferences” button, available on shop pages, lets you change these choices at any time. Our manager passes your choices to Shopify’s consent tools; cookies strictly necessary for the shop to operate remain active. You can also delete cookies or block their storage in your browser; blocking necessary cookies may disrupt the basket or payment. Providers offer their own advertising settings. Deleting cookies from your device does not in itself erase data already received by a provider.

To withdraw consent or request that processing stop, email contact@parfum4you.ch. Withdrawal applies to the future and does not affect the lawfulness of earlier processing. For data processed under Shopify’s own responsibility, its privacy portal also lets you exercise your rights.

10. Direct marketing

We send commercial communications with your consent or, where permitted by law, to existing customers for similar offers. Each message identifies the sender and offers a simple, free way to unsubscribe. Messages necessary for an order, security or customer service may still be sent.

11. Retention

Accounting records and supporting documents subject to statutory retention requirements are kept for ten years from the end of the relevant financial year. Other data is retained for as long as necessary for its purpose:

  • account data: while the account is in use, then for closure and outstanding obligations;
  • customer service and returns: while the matter is being handled and for the period needed to establish or defend rights;
  • marketing: during the subscription, with limited retention of information needed to demonstrate and respect choices, particularly an unsubscribe request;
  • statistics, conversations, appointments and logs: according to their usefulness and the periods configured in the relevant services.

Once the necessary period has ended, data is deleted or anonymised unless retention is required by law or necessary in connection with a dispute. You may request details of the retention periods applicable to your data.

12. Security

We apply measures proportionate to the risks, including access restrictions, authentication, encryption of transmissions, backups and incident management. No online service guarantees absolute security.

13. Your rights

Under the Swiss FADP, you may in particular ask whether we process your data, access it, have inaccurate data corrected, object to certain processing, request its deletion or destruction, and obtain its release or transmission when statutory conditions are met. You may withdraw consent for the future. Identity verification may be requested.

Email contact@parfum4you.ch. You may bring proceedings before the competent court and report a situation to the Federal Data Protection and Information Commissioner. If the GDPR applies, its additional rights also apply, including restriction of processing and the right to lodge a complaint with the competent authority.

14. Automation and changes

Automated tools are used particularly for recommendations, fraud analysis, advertising and chat responses. If a decision based exclusively on automated processing produces a legal effect or significantly affects you, the rights under the FADP to information, to express your point of view and to review by a person apply, subject to statutory exceptions.

We update this policy when services, processing or obligations change. The date indicates the latest version. Changes do not constitute consent to new processing that requires it.