Last updated: 12 November 2026

1. Who is responsible

Swiss Kombucha AG (trading as Swiss Kombucha Company), Hinterbergstrasse 56, 6312 Steinhausen, Switzerland (“we”, “us”) is responsible for the processing of personal data on this website, https://swisskombuchacompany.ch, and for our online shop. You can reach us at info@swisskombuchacompany.ch.

This policy follows the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) applies to a visitor, we also follow it.

2. What data we process, why, and on what basis

Visiting the website. Our servers record technical data when you visit: IP address, date and time, pages requested, browser and device type, and referring page. We need this to deliver the site, keep it secure and fix errors (our legitimate interest).

Orders and payment. When you order, we process your name, delivery and billing address, email address, phone number (if you give one), the items ordered and your payment details. We use this to process your order, deliver it, invoice you and handle questions (performance of a contract). Card and wallet details are handled by the payment providers, not stored by us. If you give a phone number, we also use it to send SMS order notifications.

Subscriptions. For subscription plans we also process your chosen plan, billing interval (weekly or monthly), delivery schedule and any pause you request, to deliver and bill your subscription (performance of a contract).

Customer account. If you create an account, we store your login and order history so you can reorder and manage your subscription.

Contact. If you write to us or use a contact form, we process the details you send so we can answer you (legitimate interest, or pre-contractual steps).

Contact via messaging and social media. If you contact us through WhatsApp, Instagram or Facebook, or respond to one of our ads, we process the details you send (such as your name, phone number and messages) to answer you. These platforms are operated by Meta, which processes data under its own terms.

Newsletter. If you subscribe, we process your email address (and name, if given) to send news and offers. We use Mailchimp for this (see section 4). You consent when you sign up, and you can unsubscribe at any time using the link in every email. We first send you a confirmation email and only add you once you click the link (double opt-in).

Marketing emails to customers. If you buy from us, we may use your email address to tell you about similar Swiss Kombucha products (legitimate interest). You can object at any time, for example with the unsubscribe link in every message.

Advertising. We use the Meta Pixel to measure and improve our advertising on Facebook and Instagram. You can refuse it at any time with the “Cookie settings” link in the footer.

Embedded content. Google Maps and our Instagram feed load content from Google and Meta. When this content loads, these providers receive your IP address and may set cookies.

Accounting and legal duties. We keep order and invoice data to meet Swiss accounting, tax and commercial law obligations (legal obligation).

3. Cookies and similar technologies

We use two kinds:

  • Necessary: needed for the shop to work (cart, checkout, language, login, security). These do not need consent.
  • Marketing: Meta Pixel, to measure and target ads. You can refuse it at any time.

You can accept, refuse or change your choice at any time with the “Cookie settings” link in the footer. You can also block cookies in your browser settings, but parts of the shop may then stop working. Refusing never affects your ability to buy.

4. Who receives your data

We only share data where needed, and with providers bound by contract.

  • Website maintenance and hosting: cyon GmbH (Basel, Switzerland) hosts the website; Wordcare maintains it
  • Payments: Mame / TWINT (Switzerland) for TWINT; PayPal and Braintree (a PayPal company, USA) for PayPal and credit card payments
  • Delivery: Swiss Post and other delivery partners we use from time to time, who receive your name, address, phone and email to deliver your order
  • Email marketing: Mailchimp (The Rocket Science Group LLC, a US company)
  • Advertising: Meta (Pixel, Facebook and Instagram)
  • Other site services: Google Maps and reCAPTCHA (maps and spam protection), Jetpack by Automattic (site statistics and security), Instagram feed
  • SMS order notifications: ClickSend (Australia), which receives your phone number and the notification text
  • Email: Microsoft 365 (Microsoft), through which our order and service emails are sent
  • Advisers and authorities: accountants, auditors, lawyers or authorities, where required

We do not sell your data.

5. Transfers abroad

Some providers named above (Google, Meta, Mailchimp, PayPal/Braintree, Automattic/Jetpack and Microsoft) are based in the USA, and ClickSend is based in Australia. We only use them where there is a safeguard for your data, such as the provider’s certification under the Swiss-US Data Privacy Framework or standard contractual clauses recognised in Switzerland. You can ask us for a copy of the safeguards at info@swisskombuchacompany.ch.

6. How long we keep data

  • Orders, invoices and accounting records: 10 years, as required by Swiss law.
  • Customer account: until you ask us to delete it, subject to the legal retention above.
  • Newsletter: until you unsubscribe.
  • Contact enquiries: as long as needed to answer you, then deleted or archived within a reasonable time.
  • Server logs: kept for a limited period, normally no longer than 90 days.
  • Cookies: for the lifetime shown in the cookie settings.

7. Your rights

You have the right to ask us for access to your data, correction, deletion, restriction of processing, and a copy of the data you gave us in a common format. You can object to processing based on our legitimate interest and withdraw any consent at any time, with effect for the future. Write to info@swisskombuchacompany.ch; we normally reply within 30 days. We may need to verify your identity first, and some data we must keep by law.

You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch) or, if you are in the EU/EEA, to your local data protection authority.

8. Data security

We use technical and organisational measures to protect your data, including encrypted connections (HTTPS), access controls and regular software updates. No online transmission is completely secure.

9. Automated decisions

We do not make decisions that have legal effect on you based solely on automated processing.

10. Changes

We may update this policy. The version published on this page applies.