Privacy policy

Last updated: 6 October 2026

1. Who we are

This website, sunsubeauty.com, is operated by SunsuBeauty, Rue du Grand-Bureau 35, 1227 Les Acacias, Geneva, Switzerland (email: contact@sunsubeauty.com). We are responsible for the processing of your personal data described here. This policy follows the Swiss Federal Act on Data Protection (FADP); where the EU GDPR applies to you, we also respect it.

2. What data we collect

When you order: name, delivery and billing address, email, phone number, order contents, delivery method and payment status. Payment details (card, TWINT or wallet data) are handled by our payment provider; we never see or store full card numbers.
When you contact us: your email and the content of your message.
When you create a customer account: email, name, addresses and order history.
When you visit the site: device and browser information, IP address, pages viewed, products viewed or added to the cart, referring website, and approximate location, collected through cookies and similar technologies.
When you subscribe to our emails or take our skincare quiz: your email address and, for the quiz, your answers (skin type, concerns).

3. Why we use it, and on what basis

To process and deliver your order, handle returns and support (performance of a contract).
To prevent fraud and keep the shop secure (our legitimate interest).
To keep accounting and tax records as the law requires (legal obligation).
To send you our emails and offers, only if you subscribed; you can unsubscribe at any time with the link in each email (consent).
To measure and improve our website and show our ads to people who visited it (consent where required, otherwise legitimate interest).

4. Who receives your data

We only share what is needed, with:

Shopify (shop platform, checkout, payments via Shopify Payments, customer accounts, order emails).
Our fulfilment partner HyperCape and the carriers (FedEx, postal services), who receive your name, address, phone number and email to prepare and deliver your parcel.
Meta (Facebook and Instagram): through the Meta pixel and Conversions API we share browsing and purchase events (and, in a protected form, contact details) so we can measure and show our ads.
Klaviyo, if you subscribe to our emails.
Instagram feed provider (Socialwidget), which loads our public Instagram posts on the homepage.
Authorities, advisers or courts where the law requires it.

We do not sell your data.

5. Transfers abroad

Some of these providers are located outside Switzerland and the EU, in particular in the United States, Canada and South Korea (our fulfilment warehouse). When we transfer data there, we rely on a recognised adequacy decision or on contractual safeguards (such as standard contractual clauses) and share only what is needed for the service.

6. Cookies and tracking

We use cookies that are needed for the shop (cart, checkout, security) and, with your consent where required, cookies for analytics and advertising (Shopify analytics and the Meta pixel). You can manage or delete cookies in your browser and change your cookie choice through the banner on our site. You can also opt out of targeted advertising at facebook.com/settings/?tab=ads.

7. How long we keep your data

Order and invoice data: 10 years (Swiss accounting law). Customer account data: until you ask us to delete it, as long as no legal duty requires keeping it. Marketing data: until you unsubscribe. Messages: as long as needed to answer you and for our records.

8. Your rights

You can ask us for access to your data, correction, deletion, restriction, a copy in a common format, and you can object to processing or withdraw a consent at any time. Write to contact@sunsubeauty.com; we reply within 30 days. We may need to verify your identity. You also have the right to complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC), edoeb.admin.ch, or to your local authority if you live in the EU.

9. Security

We use technical and organisational measures (such as encrypted connections and limited access) to protect your data. No online service can be 100% secure.

10. Changes

We may update this policy; the current version is always on this page with its date.

11. Contact

SunsuBeauty, Rue du Grand-Bureau 35, 1227 Les Acacias, Geneva, Switzerland, contact@sunsubeauty.com (data protection questions as well).