Privacy Policy

The controller of personal data is:

So You SARL — Boutique Soap Opera by So You Cosmetics, 3 avenue Pictet-de-Rochemont, 1207 Geneva, Switzerland.

Website: www.soyoucosmetics.com — Email: contact@soyoucosmetics.com

For any question relating to the processing of your personal data or the exercise of your rights, you may contact us at the address above.

We collect only the personal data necessary to run our business and provide our services. We gather only the information we genuinely need in order to answer your request, process your order or keep our services working properly.

Depending on the services you use or the requests you send us, the data likely to be collected includes in particular:

• your first name and surname;
• your company name, where applicable;
• your postal address;
• your email address;
• your telephone number;
• information relating to your orders and bookings;
• the messages you send us through our contact form or by email;
• if you open a customer account: your email address, your password — stored hashed, never in clear text — and, if you provide them, your name, telephone number and delivery address. Creating an account is optional: it is not required in order to order.

When you browse our website, certain technical data may also be collected automatically, in particular your IP address, information about your browser, your device or your browsing, as well as cookies or similar technologies necessary for the site to work properly.

Payment data is processed directly by our secure payment services providers. It is never recorded or stored by So You SARL.

Your personal data is used solely to:

• process and fulfil your orders or bookings;
• follow up your order or answer your requests;
• manage your customer account, where you have opened one;
• manage your newsletter subscription where you have consented to it;
• comply with our legal, tax and accounting obligations;
• ensure the proper functioning, security and improvement of our services.

Depending on the circumstances, the processing of your personal data is based on:

• performance of a contract, in particular for processing your orders or bookings;
• your consent, in particular when you subscribe to our newsletter or open an account;
• compliance with our legal obligations;
• our legitimate interest in managing our business, our customer relationships and the proper functioning of our services.

Your personal data is never sold, rented or disclosed to third parties for commercial purposes.

Service providers whose involvement is necessary for our services to work may have access to the data required to carry out their tasks, in particular:

• our secure payment services providers;
• the carriers responsible for delivering your orders;
• our technical providers involved in hosting, maintenance, development, security or the proper functioning of the website and our digital services.

These providers only have access to the data required to carry out their tasks and are bound to respect confidentiality and applicable data protection law.

In the event of a transfer of all or part of So You SARL’s business, personal data may be passed to the acquirer, in compliance with applicable law.

Personal data is mainly hosted in Switzerland. Certain providers used by So You SARL — in particular hosting, email, payment or technical and IT providers — may process data abroad.

Where personal data is processed abroad, transfers are carried out in compliance with applicable Swiss law. Where the law requires it, appropriate safeguards are put in place to ensure an adequate level of protection for the data transferred.

The website uses cookies and similar technologies necessary for it to work properly, in particular to manage the basket, the chosen language and login sessions.

The site sets no advertising or analytics cookies.

The Google Maps map showing the shop’s location is not loaded automatically: it appears only if you click to display it. No data, including your IP address, is sent to Google before that action. Our payment provider sets its own cookies at the time of payment.

You may configure your browser to accept, limit or refuse all or some cookies. Refusing certain cookies may however affect the proper functioning of some features of the site.

Personal data is kept only for as long as necessary for the purposes for which it was collected, or in accordance with applicable legal obligations.

Accounting documents and records are kept for the period provided by Swiss law, currently ten (10) years.

Data relating to your newsletter subscription is kept until you withdraw your consent or unsubscribe.

Customer account data is kept until you delete the account. Deleting it erases your address, your password and your details; it does not erase your orders, which remain subject to the ten-year legal period mentioned above.

So You SARL takes appropriate measures, within its activities and with the help of its technical providers, to protect the personal data processed in the course of its services. The site is served over a secure connection (HTTPS) and customer account passwords are never stored in clear text.

Access to personal data is limited to those people and providers who need it in the course of their duties or tasks.

In accordance with applicable Swiss data protection law, you have the rights provided by law regarding your personal data, in particular the right to access it, to request its rectification or deletion where the law permits, and to object to certain processing where applicable.

If you have opened a customer account, you may view and correct your details, and delete your account yourself at any time from the “My account” page, without having to write to us.

You may exercise these rights by contacting us at: contact@soyoucosmetics.com

If you subscribe to our newsletter, your email address is used solely to send you the information, news or offers you have chosen to receive.

You may withdraw your consent at any time by clicking the unsubscribe link in each newsletter, from the page soyoucosmetics.com/desabonnement, or by contacting us at contact@soyoucosmetics.com.

This Privacy Policy may be amended to reflect legal or technical developments or changes in our business. The applicable version is the one published on the website at the time of your consultation.

For any question relating to this Privacy Policy, you may contact us at contact@soyoucosmetics.com.