Privacy Policy

Last updated: May 2026

This Privacy Policy explains how KIMCHIC KLG (“KIMCHIC”, “we”, “us” or “our”) collects and processes personal data when you visit our website, place an order, create an account, subscribe to our newsletter, use our wishlist or waitlist features, or otherwise interact with us.

We process personal data in accordance with the Swiss Federal Act on Data Protection (“FADP”) and, where applicable, the EU General Data Protection Regulation (“GDPR”).

1. Controller

The controller responsible for the processing of personal data is:

KIMCHIC KLG

c/o Yacine Elkhamlichi

Kirchgasse 50

8706 Meilen

Switzerland

Email: contact@kimchic.ch

Website: www.kimchic.ch

Commercial register number: CH-020.2.010.204-4

UID / IDE number: CHE-380.009.222

2. Personal data we collect

We collect personal data that you provide to us directly, as well as technical data generated when you use our website. Depending on how you interact with us, we may process the following categories of personal data:

• Name and contact details: First name, last name, email address, phone number, billing address, and shipping address.
• Customer account data: Email address, login credentials, and order history.
• Order data: Products purchased, variations, order value, delivery info, payment method, and status.
• Payment-related data: Payment status, transaction reference, and confirmation.
• Delivery data: Shipping address, delivery method, tracking number, and barcode/label information.
• Newsletter data: Name, email, subscription date, and preferences.
• Waitlist/Wishlist data: Email address, products requested, variations, and stock status.
• Language preferences: Data regarding your preferred language stored via cookies (e.g., googtrans).
• Communication data: Messages sent through our contact form or by email.
• Technical data: IP address, browser type, device info, operating system, access time, pages visited, and cookies.

We do not intentionally collect customer notes during checkout.

3. Purposes of processing

We process personal data for the following purposes:

• To operate and maintain our website and online store;
• To create and manage customer accounts;
• To process, ship, and deliver orders;
• To provide localized content and display language-specific popups;
• To process payments, refunds, and manage accounting records;
• To provide wishlist and back-in-stock features;
• To send transactional and marketing communications;
• To protect our website from spam, fraud, and security risks;
• To comply with legal, tax, and regulatory obligations.

4. Legal basis for processing

Where the GDPR applies, we rely on:

• Performance of a contract: Necessary for orders and account management.
• Legal obligation: For tax and accounting records.
• Legitimate interests: For website security, fraud prevention, and service improvements.
• Consent: For newsletters, non-essential cookies, and marketing tracking.

Under Swiss law, we adhere to the principles of lawfulness, transparency, and proportionality.

5. Data required to place an order

Certain data is necessary to complete a purchase (name, email, address, payment method). Without this info, we cannot process your order or manage returns.

6. Customer accounts

Customers may create an account to manage details and view order history. You may request account deletion at any time, subject to legal retention obligations for accounting records.

7. Payments

Payments are processed via SumUp (including PayPal integration). Full card details are processed by the provider and never stored by KIMCHIC. We receive only confirmation data (status, transaction reference).

8. Shipping and delivery

We use Swiss Post for shipping. We share necessary data (name, address, tracking) for barcode generation and address validation. Tracking numbers are stored in WooCommerce.

9. Newsletter and marketing communications

We use MailerLite for newsletters. We collect your name and email. MailerLite helps us deliver localized forms and popups based on your language preference. You can unsubscribe via the link in any email.

10. Contact form and communications

We use Contact Form 7. Submissions (name, email, message) are sent to our mailbox to respond to your enquiries.

11. Waitlist / back-in-stock notifications

We use YITH WooCommerce Waitlist. We process your email and product preference to notify you when items are available.

12. Wishlist

We use YITH WooCommerce Wishlist. Data includes products, price, and stock status, linked to your account or browser session.

13. Cookies and similar technologies

We use cookies to help our website function and to remember your preferences.

• Necessary Cookies: Required for cart functionality, checkout, login, security, and reCAPTCHA.
• Functional Cookies: We use the googtrans cookie (via GTranslate) to remember your language selection. This ensures our content and MailerLite popups are displayed in your preferred language.
• Analytics Cookies: We use Google Analytics (via Site Kit) to understand website usage. These are blocked until you provide consent via the CookieYes banner.
• Marketing Cookies: We use Meta Pixel to measure marketing performance. These are blocked until consent is given.

You can customize your preferences at any time via the Cookie Settings link on our website.

14. Analytics and Meta tracking

Google Analytics and Meta tracking help us improve our store. These services are only activated upon your explicit consent via our consent management tool.

15. Spam protection and security tools

We use Google reCAPTCHA v3 to prevent abuse. It processes technical data (IP, browser info) to verify human interaction. We also use Wordfence, Really Simple Security, and WP Armour for general site protection.

16. Website hosting, emails and backups

Our site is hosted by Infomaniak in Switzerland. Transactional emails are sent via Google Mail SMTP. Backups are stored by Infomaniak for 7 days for security and restoration purposes.

17. Fonts and external embeds

Google Fonts are loaded locally. We do not currently use external embeds like YouTube or Instagram feeds.

18. Recipients of personal data

We may share data with:

• IT/Hosting: Infomaniak.
• E-commerce tools: WordPress, WooCommerce.
• Payment: SumUp, PayPal.
• Shipping: Swiss Post.
• Communications: MailerLite, Google Mail, GTranslate/Google.
• Consent/Security: CookieYes, Wordfence, Google reCAPTCHA.
• Authorities: Where legally required.

We do not sell personal data.

19. International transfers

Some providers (Google, Meta, MailerLite, CookieYes) may process data outside Switzerland or the EEA. We rely on adequacy decisions or standard contractual clauses to ensure a sufficient level of data protection.

20. Retention periods

• Accounting/Tax records: 10 years (Swiss law).
• Customer account: Until account is deleted.
• Newsletter/Waitlist: Until you unsubscribe or the notification is sent.
• Language Preference (googtrans): Typically stored for the duration of the browser session or up to 1 year.
• Backups: 7 days.

21. Data security

We use encrypted transmission (SSL), secure hosting, access controls, and regular updates to protect your data from unauthorized access or loss.

22. Your rights

You have the right to access, rectify, or erase your data, as well as the right to object to processing or withdraw consent. Contact us at contact@kimchic.ch to exercise these rights.

23. Right to lodge a complaint

You may contact the Swiss Federal Data Protection and Information Commissioner or your local EU/EEA authority if you believe your rights have been infringed.

24. Automated decision-making

We do not use automated decision-making that produces legal or significant effects.

25. Changes to this Privacy Policy

We may update this policy to reflect changes in our tools or legal requirements. The version on our website is always the most current.