Privacy policy

Your data.
Handled with care.

This policy explains what personal data we collect, how we use it, and your rights under the Swiss Data Protection Act (nDSG). It also covers our use of cookies on kessential.ch.


Data controller
The data controller responsible for your personal data is KESSENTIAL, operated by Yona Lee, Rue de Bourg 27, 1003 Lausanne, Canton of Vaud, Switzerland. Contact: hello@kessential.ch
Data we collect and why
We collect your name, delivery address and email address to fulfil and deliver your order. We collect payment information solely to process your purchase — payment data is handled by Shopify, PayPal or Twint and we do not store card details on our systems. We collect your IP address, browser type and pages visited through Google Analytics to understand how visitors use our website. If you subscribe to our newsletter, we collect your email address to send you marketing communications. We retain transaction records for 10 years in compliance with Swiss accounting obligations. Newsletter subscriptions are retained until you unsubscribe. Analytics data is retained for 14 months per Google Analytics default settings. Return and complaint correspondence is retained for 3 years.
Legal basis for processing
We process your personal data on the following legal bases under the nDSG: contract performance for order fulfilment and delivery; legal obligation for retention of transaction records under Swiss accounting law; legitimate interest for website analytics via Google Analytics, where data is anonymised and aggregated; and consent for newsletter communications, which may be withdrawn at any time by clicking unsubscribe in any marketing email we send you.
Third parties and data sharing
We do not sell your personal data. We share it only with service providers necessary to operate our shop: Shopify Inc. (Canada), our e-commerce platform and hosting provider (privacy policy); PayPal (Europe) for payment processing (privacy policy); Twint AG (Switzerland) for payment processing (privacy policy); Google Ireland Limited for website analytics via Google Analytics 4, data may be transferred to Google servers in the United States under standard contractual clauses (privacy policy); Swiss Post for delivery and return shipping. Where data is transferred internationally, appropriate safeguards including standard contractual clauses recognised under Swiss law are in place.
Cookies
Our website uses cookies. Strictly necessary cookies — including Shopify session, cart and checkout cookies — are required for the shop to function and cannot be disabled. Analytics cookies — including Google Analytics cookies (_ga, _ga_*, _gid) and Shopify analytics cookies (_shopify_y, _y) — are used to collect anonymised data about how visitors use our site. IP anonymisation is enabled on Google Analytics. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on. You can manage cookies through your browser settings. Note that blocking strictly necessary cookies will prevent the shop from functioning. If we introduce additional cookies in the future we will update this policy and seek your consent where required. When you first visit kessential.ch you will be asked to accept or decline analytics cookies via our cookie consent banner.
Your rights
Under the Swiss Data Protection Act (nDSG) you have the right to access a copy of the personal data we hold about you; to request correction of inaccurate or incomplete data; to request deletion of your data, subject to our legal retention obligations; to receive your data in a structured machine-readable format; to object to processing based on legitimate interest including direct marketing; and to withdraw consent for newsletter communications at any time. To exercise any of these rights contact us at hello@kessential.ch. We will respond within 30 days. If you believe your rights have not been respected you may lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) at edoeb.admin.ch.
Security
All data transmitted through kessential.ch is encrypted using SSL/TLS. Our shop is hosted on Shopify which maintains industry-standard security certifications including PCI DSS compliance for payment data. We do not store payment card details on our systems. We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or destruction.
Changes to this policy
We may update this privacy policy from time to time. The current version will always be available at kessential.ch/policies/privacy-policy. Material changes will be communicated by email where we hold your email address, or by a notice on our website. Your continued use of kessential.ch following any changes constitutes acceptance of the updated policy.