Privacy policy

Last updated: August 27, 2026

1. Data controller

The controller responsible for the processing described in this policy is:

Nathan Dumas
Operator of Memory Chest Co.
Route de Belmont 40
1741 Cottens, Switzerland

For any question or request concerning your personal data, you can write to info@memorychestco.com.

2. Contact for persons located in the European Union

Persons located in the European Union may send their questions and requests concerning the protection of their personal data directly to info@memorychestco.com.

3. Purpose and scope

This policy explains how Memory Chest Co. collects, uses, discloses, transfers and retains your personal data when you:

browse the online store;
create or use a customer account;
add products to your cart;
place or pay for an order;
request a cancellation, return, refund or warranty service;
subscribe to marketing communications;
use available tracking or personalization features;
contact our customer service.

Processing is carried out in accordance with the Swiss Federal Act on Data Protection (“FADP”). The European Union General Data Protection Regulation (“GDPR”) also applies where its territorial requirements are met.

4. Personal data we process

Depending on how you use the store, we may process the following categories of data:

identity and contact details: first and last name, shipping address, billing address, email address and phone number;
orders and customer relationship: products ordered, quantities, prices, discounts, dates, delivery, tracking, returns, refunds, warranties, preferences and communications with customer service;
payment and fraud prevention: selected payment method, transaction status and reference, security checks and information required to prevent fraud;
customer account: login details, order history, settings and preferences associated with the account;
communications: messages, forms, requests, replies, subscriptions to marketing communications and marketing preferences;
technical and usage data: IP address, device, operating system, browser, language, region, pages viewed, interactions, date and duration of visits, security logs and data generated by cookies or similar technologies;
consent data: choices relating to cookies, marketing, data sharing and personalization.

We generally do not receive your full payment card number. It is processed by the payment provider in accordance with its own security and privacy rules.

We do not seek to collect sensitive personal data unless it is voluntarily provided and strictly necessary to handle a request.

5. Sources of data

We mainly receive data:

directly from you, including when you place an order, create an account, submit a form or communicate with customer service;
automatically, when you use the store and its necessary technologies;
from Shopify and the applications actually enabled on the store;
from payment and fraud-prevention providers;
from suppliers, carriers and logistics partners responsible for preparing or delivering an order;
from technical partners where necessary for the operation, security or measurement of the store.

6. Purposes and legal bases

We process your data for the following purposes and on the following legal bases:

Performance of a contract or pre-contractual measures

Processing necessary to:

display products and manage the cart;
verify, confirm and fulfill an order;
process payment;
prepare, ship and track delivery;
manage a customer account;
answer a question before purchase;
handle a cancellation, return, refund, complaint or warranty claim.

Certain data is essential to entering into or performing the order. If you do not provide, for example, your identity, shipping address or the information required for payment, we will not be able to process the order.

Legal obligations

Processing necessary to:

comply with accounting and tax obligations;
retain mandatory records;
respond to a legally competent authority;
comply with obligations relating to security, consumer protection and the prevention of unlawful activities.

Legitimate interests

Subject to a balancing of our interests against your rights and freedoms, we may process certain data in order to:

secure the store, accounts and transactions;
prevent abuse, fraud and technical incidents;
respond to requests and improve customer service;
measure the overall operation of the store;
improve products, navigation and performance;
establish, exercise or defend legal claims.

Consent

Where your consent is required, it may in particular form the legal basis for:

the use of optional cookies;
certain audience-measurement activities;
advertising personalization;
certain marketing communications;
certain processing carried out as part of Shopify's enhanced services.

You may withdraw your consent at any time for the future, including through cookie preferences, the unsubscribe link or by contacting us.

7. Shopify and Shopify Network Intelligence

The store is hosted and operated using Shopify services. Shopify processes data in order to provide, among other things, the ecommerce platform, checkout, payment features, security, technical support and the features enabled on the store.

Depending on the processing concerned, Shopify may act as a service provider on our behalf or as an independent controller for certain processing activities.

Where Shopify Network Intelligence and associated enhanced services are enabled, information about your activity on our store may be shared with Shopify and combined with data from Shopify or other merchants. This processing may in particular allow Shopify and our store to:

provide a more personalized experience;
understand the use of the store and advertising;
improve services, security and performance;
present more relevant advertising where legally permitted.

Shopify may process this data with its service providers in different countries. Where your consent is required for non-essential purposes, the choices made through our cookie banner are transmitted to Shopify.

You can consult:

Shopify’s consumer privacy policy;
Shopify’s privacy portal, which allows you to exercise certain choices directly with Shopify.

8. Payments

Payment is processed by Shopify and/or the relevant provider for the payment method selected at checkout.

We receive only the information necessary to confirm and administer the transaction, process a refund and prevent fraud. The payment provider may process certain data under its own responsibility in accordance with its privacy policy.

9. Recipients of data

To the extent necessary for the purposes described in this policy, data may be disclosed to the following categories of recipients:

Shopify, its affiliates and subprocessors;
payment providers, financial institutions and fraud-prevention services;
suppliers and fulfillment centers responsible for preparing orders;
carriers and logistics partners;
hosting, messaging, support, security and analytics providers;
Shopify applications actually installed and enabled;
professional advisers, insurers, authorities or courts where disclosure is legally required or necessary to defend rights.

Recipients should receive only the data necessary for their role. Some may have their own legal obligations. Where they act on our behalf, they must comply with our instructions and applicable contractual safeguards.

10. Order preparation and delivery

To prepare and deliver an order, we may transmit to the supplier, fulfillment center or carrier the data strictly necessary, including:

your name;
your shipping address;
useful contact details;
the product ordered;
instructions required for delivery;
tracking information.

This data must not be used by the supplier or carrier for their own marketing activities.

11. International transfers of data

The use of Shopify, its affiliates and subprocessors may result in data being processed outside Switzerland or the European Economic Area.

The current list of countries and subprocessors concerned can be consulted in Shopify’s list of subprocessors.

Other international disclosures may occur depending on the payment provider, supplier, carrier or application actually used.

Where a country does not benefit from an applicable adequacy decision, transfers are governed by safeguards recognized under applicable law, including contractual data-protection clauses, binding corporate rules or, exceptionally, a statutory derogation where the transfer is necessary for the performance of the order.

You can contact us for further information about the safeguards applicable to a particular transfer.

12. Cookies and similar technologies

The store uses cookies and similar technologies.

Necessary cookies

They enable, among other things:

the operation and security of the store;
the preservation of the cart;
checkout;
remembering essential choices;
fraud prevention;
language or region selection.

Functional cookies

They may remember optional preferences and improve ease of use.

Analytics cookies

They may be used to measure traffic, page performance and use of the store.

Marketing cookies

They may be used to measure campaigns, limit repeated ads or personalize advertising where these features are enabled.

Where your consent is required, the relevant optional cookies are only used after you have made your choice. You may accept, reject or change your preferences through the banner or the “Cookie Preferences” link available on the store.

Rejecting optional cookies does not prevent you from placing an order, but certain non-essential features may be limited.

You may also limit or delete cookies in your browser settings. To learn more about cookies that may be used by Shopify, please consult Shopify’s cookie policy.

13. Marketing communications

If you subscribe to our marketing communications, we use your email address, your phone number where this option is offered, and your preferences to send the communications requested.

You may unsubscribe at any time:

using the link included in each email;
using the function provided in the relevant message;
by writing to info@memorychestco.com.

Unsubscribing does not prevent us from sending messages necessary for order processing, security, payment, delivery or after-sales service.

14. Retention periods

We retain data only for as long as necessary for the purposes described, after which we delete or anonymize it, subject to backups and legal obligations.

In particular:

order, billing and accounting data is generally retained for ten years, in accordance with Swiss record-retention obligations;
data relating to a return, warranty, complaint or dispute is retained for the time necessary to handle the matter and defend the rights concerned;
customer-account data is retained while the account remains active, then deleted or anonymized when retention is no longer necessary;
data used for marketing communications is retained until you unsubscribe, subject to minimal information necessary to respect your objection;
technical and security logs are retained for a period proportionate to their purpose;
cookie-related data is retained according to its function and the settings indicated in the preferences panel.

15. Security

Together with Shopify and the other providers concerned, we apply technical and organizational measures appropriate to the risk in order to protect data against:

loss;
unauthorized access;
alteration;
misuse;
destruction;
unauthorized disclosure.

Data transmitted between your browser and the store is protected, among other measures, by an encrypted HTTPS connection. No information system can, however, guarantee absolute security.

16. Your rights

Within the limits and under the conditions provided by applicable law, you may in particular request:

information about the processing of your data;
access to your data;
correction of inaccurate data;
deletion of certain data;
restriction of processing;
withdrawal of your consent for the future;
objection to certain processing based on a legitimate interest;
objection to any processing used for direct marketing;
delivery or transmission of certain data in a commonly used electronic format;
review of an individual automated decision where provided by law.

To exercise a right, write to info@memorychestco.com and describe your request.

We may request information reasonably necessary to verify your identity. We respond within the time limits provided by applicable law, in principle within one month where the GDPR applies. This period may be extended where permitted, including where the request is complex.

Legal retention obligations and the rights of third parties remain reserved.

You may also lodge a complaint with:

the Swiss Federal Data Protection and Information Commissioner (FDPIC);
the competent data-protection authority in your country of residence, where the GDPR applies.

17. Automated decisions

We do not make individual decisions producing legal effects or similarly significant effects exclusively on the basis of automated processing.

Payment or fraud-prevention providers may, however, carry out automated checks to assess a transaction.

If an individual automated decision subject to an information obligation were to be used, we would inform you of its existence, its main consequences and the review options provided by law.

18. Data relating to minors

The store is not specifically directed at children and we do not seek to knowingly collect personal data from a child who does not have the legal capacity required to take the relevant action independently.

If you believe that a minor has provided us with data inappropriately, you can contact us so that we can review the situation.