Privacy Policy

PRIVACY POLICY

Last updated: April 30, 2026

1. Data Controller

basic Natural Sàrl
Rue de la Pontaise 18
1018 Lausanne, Switzerland
IDE: CHE-253.371.660
Email: cs@basicbrand.ch

2. Legal Framework

This privacy policy is governed by the Swiss Federal Act on Data Protection (nFADP), which came into force on September 1, 2023, as well as its implementing ordinance (nFADPO). It applies to all personal data collected via the website basic-cosmetics.bio.

3. Data Collected

We collect the following data as part of our activity:

Data provided directly by you:

  • First and last name
  • Shipping and billing address
  • Email address
  • Phone number (if provided)
  • Content of messages sent via the contact form or by email

Automatically collected data:

  • IP address
  • Browser type and operating system
  • Pages viewed, visit duration, and navigation path
  • Cookie data and similar technologies (see section 7)

4. Purposes of Processing

Your personal data is processed for the following purposes:

  • Order fulfillment: processing, shipping, and tracking your orders
  • Customer relationship management: responding to your requests, after-sales service
  • Newsletter and marketing communications: sending information about our products and promotions (only with your consent)
  • Loyalty program: managing your loyalty account and benefits
  • Website improvement: analyzing traffic and browsing behavior to improve user experience
  • Legal obligations: fulfilling our accounting and tax obligations

5. Third-party Services

To ensure the proper functioning of our site and services, we use the following providers:

  • Shopify (Shopify International Ltd, Ireland): website hosting, order and payment management. Shopify Privacy Policy
  • Shopify Payments: secure payment processing. We do not have access to your bank details.
  • Klaviyo (Klaviyo Inc., United States): newsletter and email marketing communications management. Klaviyo Privacy Policy
  • Supabase (Supabase Inc., United States): hosting of the loyalty program database. Supabase Privacy Policy
  • Google Analytics (Google LLC, United States): website traffic analysis. Data is anonymized. Google Privacy Policy
  • Meta Pixel (Meta Platforms Inc., United States): performance measurement of advertising campaigns on Facebook and Instagram. Meta Privacy Policy

Some of these providers are located outside of Switzerland, notably in the United States and Canada. Data transfer to these countries is governed by standard contractual clauses or equivalent protection mechanisms in accordance with the nFADP.

6. Retention Period

Your personal data is stored for the duration necessary for the purposes for which it was collected:

  • Order data: 10 years (Swiss accounting obligations, Art. 958f CO)
  • Newsletter data: until you unsubscribe
  • Loyalty program data: as long as your account is active, then deleted after 2 years of inactivity
  • Browsing data: maximum 26 months (Google Analytics)
  • Contact data: 3 years after the last exchange

7. Cookies

Our site uses cookies to ensure its proper functioning and improve your experience. The cookies used are:

  • Essential cookies: necessary for the operation of the site (cart, session, preferences). They cannot be disabled.
  • Analytical cookies (Google Analytics): help us understand how you use the site. Anonymized data.
  • Marketing cookies (Meta Pixel): allow us to measure the performance of our advertising campaigns and offer you relevant advertisements.

You can manage your cookie preferences at any time via your browser settings or the consent banner displayed during your first visit.

8. Your Rights

In accordance with the nFADP, you have the following rights:

  • Right of access: obtain confirmation that data concerning you is being processed and receive a copy of it
  • Right to rectification: request the correction of inaccurate data
  • Right to erasure: request the deletion of your data when it is no longer necessary
  • Right to object: object to the processing of your data for direct marketing purposes
  • Right to data portability: receive your data in a structured, commonly used format

To exercise these rights, please contact us at cs@basicbrand.ch. We will respond within 30 days.

If you believe that the processing of your data does not comply with the law, you can file a complaint with the Federal Data Protection and Information Commissioner (FDPIC): www.edoeb.admin.ch.

9. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. Our site uses the HTTPS protocol to secure data exchanges.

10. Newsletter

By subscribing to our newsletter, you consent to receive marketing communications by email. Each email contains an unsubscribe link. You can unsubscribe at any time, and your data will then be deleted from our mailing list within 48 hours.

11. Modifications

We reserve the right to modify this privacy policy at any time. The current version is the one published on the basic-cosmetics.bio website. We will inform you of any substantial changes by email or via a notification on the website.

12. Contact

For any questions regarding the protection of your data:

basic Natural Sàrl
Rue de la Pontaise 18
1018 Lausanne, Switzerland
Email: cs@basicbrand.ch