Privacy Policy

Last updated: October 2026

This Privacy Policy explains how KIMCHIC KLG (“KIMCHIC”, “we”, “us” or “our”) collects and processes personal data when you visit our website, place an order, create an account, subscribe to our newsletter, use our wishlist or waitlist features, participate in surveys, attend KIMCHIC events or otherwise interact with us.

We process personal data in accordance with the Swiss Federal Act on Data Protection (“FADP”) and, where applicable, the EU General Data Protection Regulation (“GDPR”).

1. Controller

The controller responsible for the processing of personal data is:

KIMCHIC KLG
c/o Yacine Elkhamlichi
Kirchgasse 50
8706 Meilen
Switzerland

Email: contact@kimchic.ch
Website: www.kimchic.ch

Commercial Register Number: CH-020.2.010.204-4
UID / IDE: CHE-380.009.222

2. Personal Data We Collect

Depending on how you interact with us, we may process:

name, email address, telephone number, billing and shipping addresses;
customer-account and login information;
order history, products purchased, variations, order value and delivery information;
payment status, transaction reference and payment confirmation;
shipping and tracking information;
newsletter subscriptions and communication preferences;
wishlist and back-in-stock preferences;
language preferences;
communications submitted through our contact form or email;
technical information including IP address, browser, device, operating system, access time and pages visited;
cookie and consent information;
survey information, including email address, age group and responses where provided;
review-related information;
identifiable photographs taken at KIMCHIC events; and
other information you voluntarily provide to us.

3. Purposes and Legal Bases

We process personal data to:

operate and maintain our website and online store;
create and manage customer accounts;
process payments, orders, deliveries, returns and refunds;
provide wishlist and back-in-stock services;
communicate with customers;
send newsletters and marketing where permitted;
conduct surveys and analyse customer feedback;
invite customers to submit reviews;
display recommendations and promotional offers;
measure website and advertising performance;
protect our website against fraud, spam and security threats;
manage and document KIMCHIC events;
comply with accounting, tax and other legal obligations; and
establish, exercise or defend legal claims.

Where the GDPR applies, the applicable legal basis may include:

performance of a contract;
compliance with a legal obligation;
legitimate interests, where those interests are not overridden by your rights; and
consent, including where required for marketing, non-essential cookies, tracking technologies or particular uses of identifiable photographs.

4. Customer Accounts

Customers may create an account to manage their details and view relevant order information.

You may request deletion of your account, subject to information KIMCHIC must retain for legal, accounting or other legitimate purposes.

5. Payments

Online payments are currently processed through Stripe and PayPal, depending on the method selected at checkout.

Stripe may also provide supported digital wallets such as Apple Pay, Google Pay and Link. Additional methods such as TWINT may be offered where available.

Physical pop-up or other in-person payments may be processed through SumUp.

Full payment-card information is processed by the relevant payment provider and is not stored by KIMCHIC.

6. Shipping

KIMCHIC currently uses Swiss Post for shipping.

We disclose information necessary to fulfil an order, such as:

name;
delivery address;
relevant contact details;
parcel information; and
tracking information.

Tracking numbers may be stored within WooCommerce.

7. Newsletter and MailerLite

KIMCHIC currently uses MailerLite for newsletters, subscription forms and related marketing communications.

MailerLite may process your name, email address, subscription status, consent information and communication preferences.

You may unsubscribe through the link contained in our marketing emails.

8. Surveys

KIMCHIC may use Tally to conduct voluntary customer surveys.

Survey data may include email address, age group and survey responses.

We use this information to analyse customer feedback and improve our products, website, events and services.

9. Trustpilot

KIMCHIC uses Trustpilot to collect service and customer reviews.

Where we invite you to submit a review, information such as your name, email address and order information may be provided to Trustpilot for the administration of the invitation.

10. Product Recommendations

KIMCHIC currently uses UpsellWP to display relevant recommendations, complementary products, upsells, cross-sells and promotional offers based on interactions with our online store.

11. Contact Forms and Email

Our current website uses Contact Form 7.

Information provided through a form, such as your name, email address and message, is processed to respond to your enquiry.

KIMCHIC business email is handled through Google Workspace/Gmail.

12. Wishlist and Back-in-Stock

Our current WooCommerce website uses YITH WooCommerce Wishlist and YITH WooCommerce Waitlist.

Depending on the feature used, information may include:

email address;
products and variants selected;
wishlist products;
stock status; and
browser/account information necessary to provide the feature.

13. Cookies and Consent

Cookies are small files stored on your device that enable websites to remember information such as sessions, preferences, consent choices and, where permitted, analytics or advertising activity.

Our current WordPress website uses CookieYes to manage cookie preferences.

Cookies may include:

necessary cookies for cart, checkout, accounts and security;
functional cookies, including language preferences such as googtrans;
analytics cookies associated with Google Analytics; and
marketing cookies, including Meta Pixel.

Where required, non-essential analytics and marketing technologies are blocked until you give the relevant consent.

14. Google Analytics and Meta

Our current website uses Google Analytics, including implementations through tools such as Google Site Kit and PixelYourSite, to understand website usage.

We also use Meta Pixel, including through PixelYourSite, to measure advertising performance and website interactions.

Depending on the technology used, Google and Meta may process information such as:

IP address;
device and browser information;
pages viewed;
product interactions;
purchases; and
other website events.

These technologies are subject to the choices made through our CookieYes consent system where consent is required.

15. Security and Spam Protection

Our current website uses tools including:

Google reCAPTCHA v3;
Wordfence;
Really Simple Security; and
WP Armour.

These services may process technical information necessary to protect the website, identify malicious activity and prevent spam or abuse.

16. Hosting and Backups

Our current WordPress website is hosted by Infomaniak in Switzerland.

Backups may be retained by Infomaniak for a limited period for security and restoration purposes.

17. Authorised Freelancers and Overseas Support

KIMCHIC uses authorised freelancers for technical, operational, creative and customer-support activities.

Certain freelancers are located outside Switzerland and the EEA, including in Pakistan and the Philippines.

Depending on their assigned work, they may process limited personal data including:

customer email addresses;
customer-service communications; and
photographs from previous KIMCHIC events.

Our Pakistan-based freelancer also assists with the technical migration of KIMCHIC from WooCommerce to Shopify and may therefore receive or access information necessary for that migration where authorised by KIMCHIC.

Our Philippines-based freelancer does not currently have direct access to the Shopify customer database but may receive limited information necessary for authorised support or creative activities.

Freelancers are required to process personal data only for authorised KIMCHIC purposes, according to KIMCHIC’s instructions and subject to appropriate confidentiality and data-protection requirements.

18. Event Photographs

KIMCHIC may take photographs during pop-ups and other events.

Where a person is identifiable, a photograph may constitute personal data.

Photographs may be used for:

documenting events;
maintaining KIMCHIC’s event archive; and
KIMCHIC communications or promotional activities where legally permitted.

Where consent is required for a particular use, KIMCHIC will rely on the appropriate consent.

If you have a concern regarding an identifiable photograph of you, please contact contact@kimchic.ch.

19. Recipients

Depending on your interaction with KIMCHIC, recipients may include:

WordPress / WooCommerce;
Infomaniak;
Stripe;
PayPal;
SumUp;
Swiss Post;
MailerLite;
Google;
Meta;
Tally;
Trustpilot;
CookieYes;
authorised freelancers;
security and technical providers; and
authorities or professional advisers where legally required.

We disclose personal data only to the extent reasonably necessary for the relevant purpose.

20. International Transfers

Some service providers and authorised freelancers may process personal data outside Switzerland or the EEA.

This includes, where applicable, providers such as Google, Meta, MailerLite, Stripe, PayPal, Tally, Trustpilot and CookieYes, as well as authorised freelancers in Pakistan and the Philippines.

Where required by Swiss or European data-protection law, KIMCHIC relies on appropriate contractual, technical or organisational safeguards or another legally permitted transfer mechanism.

21. Retention

We retain personal data only for as long as necessary for the relevant purpose or legal requirement.

Examples include:

accounting and tax records: generally up to 10 years where required under Swiss law;
customer accounts: while active and thereafter where necessary;
newsletter information: until unsubscribe, subject to retaining minimal suppression information;
waitlist information: until the notification is completed or no longer required;
customer-service communications: for as long as reasonably necessary;
survey data: for as long as reasonably necessary for analysis;
backups: according to our hosting provider’s applicable backup period;
consent records: as necessary to document privacy choices; and
event photographs: while reasonably relevant to the purpose for which they were collected.

22. Security

We use reasonable technical and organisational measures including encrypted transmission, access controls, website-security tools and secure hosting.

No technical system can, however, be guaranteed to be completely secure.

23. Your Rights

Depending on applicable law, you may have rights to:

access your personal data;
obtain correction;
request deletion;
object to certain processing;
request restriction;
obtain data portability where applicable; and
withdraw consent.

You may exercise your rights by contacting contact@kimchic.ch.

24. Complaints

You may contact the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, where applicable, the competent EU/EEA supervisory authority if you believe your data-protection rights have been infringed.

25. Changes

We may update this Privacy Policy when our tools, processing activities or legal obligations change.

26. Contact