Privacy policy

Privacy Policy

Last Updated: October 14, 2026

1. Who We Are

The party responsible for processing personal information in connection with this online store is:

Cmaadu Lipstick Company
Operated by: Mattia Pellegrini
Business Location: Switzerland
Email: cmaadusupport@gmail.com

This Privacy Policy explains what personal information we collect and process when you use our online store, why we process it, how we protect it, and what rights you may have regarding your personal information.

Our online store is powered by Shopify, which provides the technical infrastructure necessary to operate our website and online shopping services.

2. Applicable Privacy Laws

We process personal information in accordance with applicable Swiss data protection laws, including the Swiss Federal Act on Data Protection (FADP) and its implementing regulations.

As we may provide products and services to customers in the United States, we also comply with applicable U.S. federal and state privacy laws to the extent they apply to our business and data processing activities.

Where other privacy regulations, including the European Union's General Data Protection Regulation (GDPR), apply, we will comply with their applicable requirements.

3. Personal Information We Collect

Depending on how you interact with our online store and services, we may collect and process the following categories of personal information:

Contact and identification information: Your name, billing address, shipping address, email address, and phone number.
Order and transaction information: Products purchased, order numbers, purchase amounts, returns, refunds, exchanges, and canceled orders.
Payment information: Payment methods, payment status, and transaction details. Certain payment information may be processed directly by third-party payment providers.
Account information: Information associated with your customer account, if you choose to create one.
Communication information: Information you provide when contacting customer support, requesting returns, submitting complaints, or communicating with us.
Technical information: IP addresses, browser types, device information, and technical usage data.
Website usage information: Information about how you browse, access, and interact with our online store and its features.
Return and complaint information: Order details, descriptions, photographs, and other information you provide in connection with returns, damaged or defective products, incorrect deliveries, or our 30-day money-back guarantee.

4. How We Collect Personal Information

We may collect personal information from the following sources:

Directly from you: When you place an order, contact us, request a return, or submit a complaint.
Automatically through our website: Through cookies and similar technologies when you browse or interact with our online store.
Shopify and our service providers: Through the services and infrastructure used to operate our store.
Payment service providers: When payments are processed.
Shipping and logistics providers: In connection with order fulfillment and delivery.
Other service providers and business partners: Where necessary for the operation of our online store.

5. How We Use Your Personal Information

We process personal information for the following purposes:

Order Processing and Fulfillment

We use personal information to receive and process orders, manage payments, send order confirmations, and deliver purchased products.

Shipping and Delivery

We may share the information necessary to deliver your order, including your name, shipping address, and relevant contact details, with shipping and logistics providers.

Returns, Complaints, and Our 30-Day Money-Back Guarantee

We process personal information to manage returns, refunds, customer complaints, and requests related to our voluntary 30-day money-back guarantee.

If you report a damaged, defective, missing, or incorrect item, we may process your order number, contact details, description of the issue, and any photographs you provide.

Customer Support and Communication

We use personal information to respond to inquiries, provide customer support, and communicate with you regarding your orders, our products, or our services.

Security and Fraud Prevention

We may process personal information to detect, prevent, and investigate fraudulent, abusive, or unlawful activities and to maintain the security of our online store and customers.

Improving Our Online Store

We may analyze technical and usage information to improve our website, products, customer experience, and services.

Marketing and Advertising

Where permitted by applicable law, we may use personal information to send promotional communications, inform you about products and special offers, or display relevant advertisements.

You can unsubscribe from promotional emails at any time by clicking the unsubscribe link included in the email.

Where required by applicable law, we will obtain your consent before sending marketing communications or using certain tracking technologies.

Legal Obligations and Enforcement

We may process personal information when necessary to comply with legal obligations, enforce our rights, resolve disputes, or establish, exercise, or defend legal claims.

6. Shopify

Our online store is hosted and powered by Shopify.

Shopify provides the e-commerce platform and technical services that allow us to operate our online store.

As part of providing these services, Shopify may process personal information relating to your access to and use of our website.

Personal information may be processed or transferred internationally and may be shared with Shopify's authorized service providers.

For more information about how Shopify processes personal information, please review the Shopify Privacy Policy:

https://www.shopify.com/legal/privacy

7. Payment Service Providers

To process purchases, we use the payment methods and payment service providers available during checkout.

Depending on your selected payment method, personal information may be transmitted directly to and processed by the relevant payment provider.

This information may include payment details, transaction information, your name, billing information, and other details necessary to complete the payment.

The privacy policies of the respective payment service providers may also apply to their processing of your information.

8. Shipping and Logistics Providers

To fulfill and deliver orders, we share necessary personal information with the shipping and logistics providers responsible for delivery.

This information may include your name, shipping address, contact details, and relevant shipment information.

We only share information to the extent reasonably necessary to arrange and complete delivery.

9. Cookies and Similar Technologies

Our online store may use cookies and similar tracking technologies.

Certain cookies are necessary for essential website functions, including shopping cart functionality, checkout processes, and security features.

Depending on the services we use and your preferences, additional cookies or similar technologies may be used for analytics, personalization, and marketing purposes.

Where required by applicable law, you may manage your cookie preferences through the options provided on our website.

You can also restrict or delete cookies through your browser settings. However, disabling certain cookies may affect the functionality or performance of our online store.

10. Sharing Personal Information

We may share personal information with third parties where necessary for the purposes described in this Privacy Policy.

These third parties may include:

Shopify and its associated service providers.
Payment processing companies.
Shipping and logistics providers.
IT, hosting, and cloud service providers.
Analytics and marketing service providers, where such services are used.
Government authorities or other recipients where disclosure is legally required.
Professional advisers and other service providers where necessary to protect or enforce our legal rights.

We do not sell personal information in exchange for monetary compensation.

However, certain advertising or analytics activities may be classified as a sale or sharing of personal information under applicable U.S. state privacy laws, even when no money is exchanged.

Where such laws apply, we will provide the required notices and privacy choices.

11. International Data Transfers

Because Cmaadu Lipstick Company operates from Switzerland and uses international service providers, including Shopify, personal information may be processed or transferred outside Switzerland.

This may include transfers to the United States and other countries where our service providers operate.

Where required by applicable data protection laws, we implement appropriate safeguards or rely on a legally permitted basis for international data transfers.

These safeguards may include recognized standard contractual clauses or other legally approved data protection mechanisms.

12. Data Retention

We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy or to comply with applicable legal requirements.

Retention periods may vary depending on the type of information, the purpose of processing, contractual relationships, and applicable legal or recordkeeping obligations.

We may retain certain information for longer periods when necessary to establish, exercise, or defend legal claims.

13. Data Security

We implement reasonable technical and organizational measures designed to protect personal information against loss, misuse, unauthorized access, alteration, or unauthorized disclosure.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

While we take appropriate precautions, we cannot guarantee absolute security.

14. Your Privacy Rights

Depending on your location and applicable privacy laws, you may have certain rights regarding your personal information.

These rights may include:

Right to access: Request information about the personal information we process about you.
Right to correction: Request correction of inaccurate personal information.
Right to deletion: Request deletion of personal information, subject to applicable legal exceptions.
Right to data portability: Request a copy or transfer of certain personal information where legally required.
Right to object or restrict processing: Object to or request restrictions on certain processing activities where permitted by law.
Right to withdraw consent: Withdraw previously provided consent for future processing where processing is based on consent.
Additional U.S. state privacy rights: Where applicable, request information about certain data disclosures or exercise available rights to opt out of qualifying sales, sharing, or targeted advertising.

To exercise your privacy rights, please contact us at:

cmaadusupport@gmail.com

We may request reasonable information to verify your identity before processing your request.

Your rights may be subject to applicable legal limitations and exceptions.

We will not unlawfully discriminate against customers for exercising privacy rights provided under applicable law.

15. Children's Privacy

Our online store is not specifically directed toward children.

We do not knowingly collect personal information from children in circumstances prohibited by applicable law.

If a parent or legal guardian believes that a child has provided us with personal information in violation of applicable privacy laws, they may contact us at cmaadusupport@gmail.com.

We will review the request and take appropriate action as required by applicable law.

16. Third-Party Websites and Services

Our online store may contain links to third-party websites or services.

These external websites and services generally operate under their own privacy policies and practices.

We are not responsible for privacy practices outside our control.

We encourage you to review the privacy policies of any third-party websites or services you visit.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data processing activities, online store operations, service providers, or applicable legal requirements.

The most current version will be published on our online store.

The date at the top of this Privacy Policy indicates when it was last updated.

18. Contact Us

If you have questions about this Privacy Policy, how we process personal information, or how to exercise your privacy rights, please contact: