Privacy Policy

Last updated: August 2026

This Privacy Policy explains how KIMCHIC KLG (“KIMCHIC”, “we”, “us” or “our”) collects and processes personal data when you visit our website, place an order, create an account, subscribe to our newsletter, use our wishlist or waitlist features, or otherwise interact with us.

We process personal data in accordance with the Swiss Federal Act on Data Protection (“FADP”) and, where applicable, the EU General Data Protection Regulation (“GDPR”).

1. Controller

The controller responsible for the processing of personal data is:

KIMCHIC KLG

c/o Yacine Elkhamlichi

Kirchgasse 50

8706 Meilen

Switzerland

Email: contact@kimchic.ch

Website: www.kimchic.ch

Commercial register number: CH-020.2.010.204-4

UID / IDE number: CHE-380.009.222

2. Personal data we collect

We collect personal data that you provide to us directly, as well as technical data generated when you use our website. Depending on how you interact with us, we may process the following categories of personal data:

• Name and contact details: First name, last name, email address, phone number, billing address, and shipping address.
• Customer account data: Email address, login credentials, and order history.
• Order data: Products purchased, variations, order value, delivery info, payment method, and status.
• Payment-related data: Payment status, transaction reference, and confirmation.
• Delivery data: Shipping address, delivery method, tracking number, and barcode/label information.
• Newsletter data: Name, email, subscription date, and preferences.
• Waitlist/Wishlist data: Email address, products requested, variations, and stock status.
• Language preferences: Data regarding your preferred language stored via cookies (e.g., googtrans).
• Communication data: Messages sent through our contact form or by email.
• Technical data: IP address, browser type, device info, operating system, access time, pages visited, and cookies.
• Survey data: Email address, age group and survey responses.

We do not intentionally collect customer notes during checkout.

3. Purposes of processing

We process personal data for the following purposes:

• To operate and maintain our website and online store;
• To create and manage customer accounts;
• To process, ship, and deliver orders;
• To provide localized content and display language-specific popups;
• To process payments, refunds, and manage accounting records;
• To provide wishlist and back-in-stock features;
• To send transactional and marketing communications;
• To protect our website from spam, fraud, and security risks;
• To comply with legal, tax, and regulatory obligations;
• To conduct customer surveys, analyse and segment customer feedback and improve our products, website and events;
• To invite customers to provide feedback or reviews about their purchases and experience with KIMCHIC;
• To measure website usage and advertising performance;
• To display relevant product recommendations, upsells, cross-sells and promotional offers based on interactions with our online store.

4. Legal basis for processing

Where the GDPR applies, we rely on:

• Performance of a contract: Necessary for orders and account management.
• Legal obligation: For tax and accounting records.
• Legitimate interests: For website security, fraud prevention, and service improvements.
• Consent: For newsletters, non-essential cookies, and marketing tracking.

Under Swiss law, we adhere to the principles of lawfulness, transparency, and proportionality.

5. Data required to place an order

Certain data is necessary to complete a purchase (name, email, address, payment method). Without this info, we cannot process your order or manage returns.

6. Customer accounts

Customers may create an account to manage details and view order history. You may request account deletion at any time, subject to legal retention obligations for accounting records.

7. Payments

Payments made through our online store are currently processed by Stripe and PayPal, depending on the payment method selected at checkout.

Through Stripe, customers may also be offered supported payment methods and digital wallets such as Link, Apple Pay and Google Pay. Additional payment methods, including TWINT, may be introduced in the future where available.

Payments made at KIMCHIC physical pop-up events or other in-person sales may be processed through SumUp.

The payment methods displayed to you may vary depending on factors such as your device, browser, location and the payment options available at the time of purchase.

Our payment providers process the information necessary to complete, authenticate and secure the transaction. Full payment card details are processed by the relevant payment provider and are not stored by KIMCHIC. We receive payment-related information such as payment status, transaction reference and confirmation.

KIMCHIC may add, replace or discontinue payment methods or payment service providers from time to time.

8. Shipping and delivery

We use Swiss Post for shipping. We share necessary data (name, address, tracking) for barcode generation and address validation. Tracking numbers are stored in WooCommerce.

9. Newsletter and marketing communications

We use MailerLite for newsletters. We collect your email address and, where provided, your name. MailerLite helps us deliver localized forms and popups based on your language preference. You can unsubscribe via the link in any email.

10. Surveys and customer feedback

We may invite customers and newsletter subscribers to participate in voluntary surveys. We may process your email address, age group and survey responses to analyse and segment customer feedback and improve our products, website and events.

We may also use your email address to identify whether you have completed a survey. Surveys may be hosted using Tally, which processes survey information on our behalf.

11. Customer reviews

We use Trustpilot to collect customer reviews and feedback. Where we invite you to leave a review following a purchase, relevant information such as your name, email address and order information may be provided to Trustpilot for the purpose of sending and administering the review invitation.

12. Product recommendations and upselling

We use UpsellWP within our online store to display relevant product recommendations, complementary products, upsells, cross-sells and promotional offers based on factors such as products viewed, products added to the shopping cart or the value of the shopping cart.

13. Contact form and communications

We use Contact Form 7. Submissions (name, email, message) are sent to our mailbox to respond to your enquiries.

14. Waitlist / back-in-stock notifications

We use YITH WooCommerce Waitlist. We process your email and product preference to notify you when items are available.

15. Wishlist

We use YITH WooCommerce Wishlist. Data includes products, price, and stock status, linked to your account or browser session.

16. Cookies and similar technologies

We use cookies to help our website function and to remember your preferences.

• Necessary Cookies: Required for cart functionality, checkout, login, security, and reCAPTCHA.
• Functional Cookies: We use the googtrans cookie (via GTranslate) to remember your language selection. This ensures our content and MailerLite popups are displayed in your preferred language.
• Analytics Cookies: We use Google Analytics, implemented through tools including Google Site Kit and PixelYourSite, to understand website usage. These are blocked until you provide consent via the CookieYes banner.
• Marketing Cookies: We use Meta Pixel, implemented through PixelYourSite, to measure advertising performance and understand interactions with our website. These are blocked until consent is given.

You can customize your preferences at any time via the Cookie Settings link on our website.

17. Analytics and advertising tracking

We use Google Analytics and Meta Pixel, implemented through tools such as Google Site Kit and PixelYourSite, to understand how visitors interact with our website, measure advertising performance, and improve our website and marketing.

Depending on the technology used, information such as IP address, browser or device information, pages viewed, purchases, and other website interactions may be processed by Google or Meta.

These technologies are activated according to the choices you make through our CookieYes consent banner.

18. Spam protection and security tools

We use Google reCAPTCHA v3 to prevent abuse. It processes technical data (IP, browser info) to verify human interaction. We also use Wordfence, Really Simple Security, and WP Armour for general site protection.

19. Website hosting, emails and backups

Our site is hosted by Infomaniak in Switzerland. Transactional emails are sent via Google Mail SMTP. Backups are stored by Infomaniak for 7 days for security and restoration purposes.

20. Fonts and external embeds

Google Fonts are loaded locally. We do not currently use external embeds like YouTube or Instagram feeds.

21. Recipients of personal data

We may share personal data with trusted service providers where necessary to operate our business and provide our services. These include:

• IT and hosting: Infomaniak
• E-commerce: WordPress and WooCommerce
• Payments: Stripe, PayPal and SumUp
• Shipping: Swiss Post
• Newsletter and communications: MailerLite and Google Mail
• Analytics and advertising: Google and Meta
• Surveys: Tally
• Customer reviews: Trustpilot
• Consent and security: CookieYes, Wordfence and Google reCAPTCHA
• Authorities: Where disclosure is required by law or necessary to protect our legal rights

We only share personal data to the extent necessary for the relevant purpose.

22. International transfers

Some of our service providers, including Google, Meta, MailerLite, Stripe, PayPal, SumUp, Tally, Trustpilot and CookieYes, may process personal data outside Switzerland or the European Economic Area.

Where personal data is transferred to a country that does not provide an adequate level of data protection under Swiss law, we rely on appropriate safeguards or other legally permitted transfer mechanisms to protect your personal data.

23. Retention periods

We retain personal data only for as long as necessary for the purposes for which it was collected, or for as long as required by applicable legal, accounting or regulatory obligations.

• Accounting/Tax records: 10 years, in accordance with Swiss legal requirements.
• Customer account: Until the account is deleted.
• Newsletter/Waitlist: Until you unsubscribe or the notification is sent.
• Language Preference (googtrans): Typically stored for the duration of the browser session or up to 1 year.
• Backups: 7 days.
• Survey data: Retained for as long as reasonably necessary to analyse customer feedback and administer the survey, after which identifiable information may be deleted or anonymised where appropriate.

24. Data security

We use encrypted transmission (SSL), secure hosting, access controls, and regular updates to protect your data from unauthorized access or loss.

25. Your rights

You have the right to access, rectify, or erase your data, as well as the right to object to processing or withdraw consent. Contact us at contact@kimchic.ch to exercise these rights.

26. Right to lodge a complaint

You may contact the Swiss Federal Data Protection and Information Commissioner or your local EU/EEA authority if you believe your rights have been infringed.

27. Automated decision-making

We do not use automated decision-making that produces legal or significant effects.

28. Changes to this Privacy Policy

We may update this policy to reflect changes in our tools or legal requirements. The version on our website is always the most current.