Privacy Policy

Data protection is a matter of trust, and your trust is important to us. We respect your privacy and personal integrity. The responsible and lawful handling of personal data is a major concern for San Marvelle.

San Marvelle ("we", "us") is the operator of sanmarvelle.com and the controller of the data described here. Our business address is Wagnergasse 16, 8008 Zurich, Switzerland. For any question about your data, write to team@sanmarvelle.com.

When you visit our website, place an order, or contact us, we may process the following data:

Order data. When you place an order, our payment processor (Stripe) collects the name, email address, delivery address, and payment details you enter at checkout. We receive the resulting name, email, delivery address, the items ordered, and the total. Payment-card details never reach our servers.

Contact-form messages. When you write to us through the contact form we receive the name and email address you enter, the subject you choose, and your message. The form has no other fields. Your message is delivered to our mailbox by our email provider and we answer it from there.

Newsletter subscription. The newsletter form asks for your email address only. If you subscribe, we store that address so that we can send you the newsletter.

Technical data your browser sends with each request — IP address, browser type, time of access — which is held in our hosting provider's server logs.

Delivery region. We sell in Swiss francs to Switzerland and in euro to the European Union, at prices set separately for each. To show you the right one, our server reads the country your internet connection reports and stores the result in your browser, as described in section 4. The country is used at that moment and is not stored, logged, or combined with anything else, and we do not attempt to locate you more precisely than the country. You can change our guess at any time using the currency control at the foot of every page.

Cart contents, which are kept in your own browser (see section 4) and are never sent to us.

Aggregate page-view counts, which are anonymised — no IP addresses, no identifiers, and no profile of you.

We do not collect data we do not need. We do not run advertising trackers. We do not sell your information.

We use your data to:

Process, deliver, and support your order, including sending you the order confirmation and shipping notification.

Respond to your enquiries.

Send you the newsletter, if you have subscribed to it.

Show you prices in the currency of your delivery region and keep the shop working.

Understand, in aggregate, how the website is used.

Newsletter. By entering your email address and choosing Join you agree to receive our occasional letter. You can unsubscribe at any time through the link in every letter, by replying to one, or by writing to team@sanmarvelle.com; we then remove the address.

Legal basis. Order processing rests on the performance of the sales contract you enter into. The newsletter rests on your consent, which you may withdraw at any time. Answering your enquiry, delivery-region detection, server logs, aggregate analytics, and keeping the forms free of automated abuse rest on our legitimate interest in running a working shop and replying to the people who write to us, balanced by keeping the data minimal and, for analytics, anonymised.

We do not set advertising or tracking cookies, and we do not use cookies to build a profile of you or to follow you across other websites. You can manage cookies in your browser settings.

We set three small cookies, all of which exist only to make the shop work. `sm_region` records whether prices are shown to you in Swiss francs or in euro. `sm_ship` records whether your country is one we can deliver to, so we can tell you before you reach payment rather than after. `sm_region_ack` records that you have already answered the currency question, so we stop asking. Each lasts one year, none is shared with anyone, and none leaves our own website.

Your cart contents are held separately in your browser's localStorage under the key `sm-cart`. This stays on your device; we cannot read it.

We consider all of the above strictly necessary to provide the shop you asked for, and therefore exempt from consent. If you would rather not keep them, you can clear or block cookies for this site in your browser — the shop will still work, and will simply ask you which currency you want each time you visit.

For page-view counts we use Vercel Analytics, which does not set cookies and does not record IP addresses or identifiers.

When you send a form, our hosting provider checks from technical signals in the request that it comes from a browser rather than an automated script. This creates no profile of you and is used for nothing else.

We do not share your data with third parties unless:

it is necessary to process your request or your order, or

we are legally required to do so.

To run the shop we rely on the following providers, each of which processes only what is needed for its task and is bound by data-protection obligations: Stripe (Stripe Payments Europe Ltd, Ireland) processes payments; Resend (Resend Inc., USA) sends our emails; Google (Google Ireland Ltd) hosts the team@sanmarvelle.com mailbox in which contact-form messages and your replies to our emails are kept; Supabase (Supabase Inc., USA) hosts our order database in the EU region; Vercel (Vercel Inc., USA) hosts the website and provides the anonymised analytics; and the delivery carrier receives your name and delivery address in order to deliver your parcel.

Where data leaves Switzerland or the EEA, transfers rely on the EU Standard Contractual Clauses or equivalent safeguards recognised under Swiss data-protection law.

We protect your data using appropriate technical and organisational measures. Data is deleted as soon as it is no longer required for the purpose for which it was collected, subject to the following:

Order records are retained for ten years, as required by Swiss commercial-law accounting rules.

Contact-form messages are retained until the conversation is closed, plus six months for follow-up. You may ask for earlier deletion at any time.

Your newsletter email address is retained until you unsubscribe.

Server logs and aggregate analytics are retained for the periods set by our hosting provider — currently a rolling 90 days for analytics.

You have the right to obtain information about your data and to request its correction or deletion. Under Swiss data-protection law and, where it applies, the GDPR, you may also restrict processing, receive your data in a portable format, object to processing based on legitimate interest, and withdraw any consent you have given. You may lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (edoeb.admin.ch) or, in the EU, with your local supervisory authority.

For questions or to exercise your rights: team@sanmarvelle.com.

This privacy policy may be updated. The current version will always be available here on our website.