Your privacy matters to us. This Privacy Policy explains how Léon Chocolat collects, uses, and protects your personal data when you visit our website, place an order, or otherwise interact with us. We handle your data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR).
1. Who Is Responsible for Your Data
Léon Chocolat, based in Basel, Switzerland, is the controller responsible for your personal data. If you have any questions about this policy or how we handle your information, please contact us using the details on our contact page.
2. Information We Collect
We collect information that you provide to us directly, including:
- your name, email address, telephone number, and delivery or billing address when you place an order;
- your email address when you subscribe to our newsletter;
- the content of any message you send us through our contact form;
- details of your orders, bookings, and preferences.
We also collect limited technical information automatically when you use our website, such as your device type, browser, and how you interact with our pages. Payment card details are processed securely by our payment provider and are not stored by us.
3. How and Why We Use Your Information
We use your personal data to:
- process, fulfil, and deliver your orders and bookings;
- communicate with you about your orders and respond to your enquiries;
- send you our newsletter and offers, where you have asked to receive them;
- improve our products, services, and website;
- meet our legal, tax, and accounting obligations; and
- prevent fraud and keep our website secure.
We rely on your consent, the performance of our contract with you, our legitimate business interests, and our legal obligations as the bases for processing your data.
4. Sharing Your Information
We do not sell your personal data. We share it only where necessary with trusted service providers who act on our behalf — for example payment processors, delivery partners, email and hosting providers — and only so they can perform their services for us. We may also disclose information where required by law or to protect our legal rights.
5. International Transfers
Some of our service providers may process data outside Switzerland or the European Economic Area. Where they do, we take appropriate steps to ensure your data receives an adequate level of protection, such as standard contractual clauses.
6. How Long We Keep Your Data
We keep your personal data only for as long as necessary for the purposes described in this policy, including to meet legal, tax, and accounting requirements. Order records, for example, are retained for the retention period required by Swiss law. When we no longer need your data, we securely delete or anonymise it.
7. Your Rights
Depending on your location, you have rights over your personal data, including the right to access it, to have it corrected or deleted, to object to or restrict certain processing, to data portability, and to withdraw consent at any time. You can unsubscribe from our newsletter using the link in any email. To exercise any of these rights, please contact us. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local supervisory authority.
8. Cookies
We use cookies and similar technologies as described in our Cookie Policy. You can accept, reject, or customise optional cookies at any time using the "Cookie Settings" link in the footer.
9. Security
We use appropriate technical and organisational measures to protect your personal data against loss, misuse, and unauthorised access. No method of transmission over the internet is completely secure, but we work hard to safeguard your information.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "last updated" date.
11. Contact Us
If you have any questions or concerns about your privacy, please contact us. We will be glad to help.