Privacy

Privacy Policy

pernoire AG | Hochbergerstrasse 158, 4057 Basel, Switzerland

Last updated: 24 September 2026

1. Introduction

pernoire AG ("pernoire," "Company," "we," "us," or "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our website www.pernoire.com (the "Website"), place an order, subscribe to our communications, or otherwise interact with us.

This policy applies to all visitors, customers, and users of our Website and services, regardless of location.

We process personal data in compliance with the Swiss Federal Act on Data Protection (FADP/nDSG) and, where applicable, the EU General Data Protection Regulation (GDPR).

Data Controller: pernoire AG Hochbergerstrasse 158 4057 Basel, Switzerland Email: info@pernoire.com Commercial Register No: CHE-466.736.967

2. Information We Collect

2.1 Information You Provide Directly

When you place an order, create an account, subscribe to our newsletter, contact us, or otherwise interact with us, we may collect:

Identity data: First name, last name
Contact data: Email address, phone number, billing address, shipping address
Payment data: Payment method details (processed securely by our payment provider; we do not store full credit card numbers)
Order data: Products purchased, order history, order value, shipping preferences
Communication data: Messages, emails, and correspondence you send to us, including customer service inquiries
Account data: Username, password, account preferences
Marketing preferences: Your consent status and communication preferences

2.2 Information Collected Automatically

When you visit our Website, we may automatically collect:

Technical data: IP address, browser type and version, operating system, device type, screen resolution, language settings
Usage data: Pages visited, time spent on pages, click patterns, referral source, exit pages
Location data: Approximate geographic location derived from your IP address
Cookie data: Information collected through cookies and similar tracking technologies (see Section 7)

2.3 Information from Third Parties

We may receive information about you from third parties, including:

Payment processors (transaction confirmations and fraud prevention data)
Shipping carriers (delivery status and tracking information)
Marketing platforms (engagement data from email campaigns)
Social media platforms (if you interact with us through social media)
Analytics providers (aggregated website usage data)

3. How We Use Your Information

We use your personal data for the following purposes:

3.1 Order Fulfilment & Service Delivery

Processing and fulfilling your orders
Arranging shipping and delivery
Processing payments and refunds
Communicating about your order status, delivery updates, and tracking information
Handling returns, exchanges, and customer service requests

Legal basis: Performance of a contract (GDPR Art. 6(1)(b), where applicable). We also comply with the Swiss FADP.

3.2 Customer Account Management

Creating and managing your account
Maintaining your purchase history and preferences
Providing personalised shopping experiences

Legal basis: Performance of a contract; legitimate interest

3.3 Marketing & Communications

We use your contact details to send news, product introductions and offers where you have consented or where the limited existing-customer exception described in Section 9 applies. We may tailor content to your purchases and stated preferences where permitted. The same marketing rules apply to promotional surveys and requests for feedback.

Legal basis: Your consent (GDPR Art. 6(1)(a)) or, only where marketing law permits the existing-customer exception, our legitimate interest in maintaining customer relationships (GDPR Art. 6(1)(f)), where the GDPR applies. You can object to direct marketing at any time.

3.4 Website Improvement, Analytics & Security

We use technical and usage information to improve our website, test features, understand how it is used, and protect it against fraud and misuse.

Legal basis: Our legitimate interest in operating and protecting our website (GDPR Art. 6(1)(f), where applicable), to the extent the processing is necessary and lawful. Where analytics, personalisation or advertising technologies require consent, we obtain it first; see Section 7. A legitimate interest does not replace a legally required cookie consent.

3.5 Legal & Compliance

Complying with applicable laws, regulations, and legal processes
Enforcing our Terms of Service, Shipping Policy, and Return & Refund Policy
Preventing fraud, chargebacks, and other abusive behaviour
Protecting the rights, property, and safety of pernoire, our customers, and others

Legal basis: Legal obligation (GDPR Art. 6(1)(c)); legitimate interest

4. Who We Share Your Information With

We do not sell your personal data to third parties. We may share your information with the following categories of recipients, strictly for the purposes described in this policy:

4.1 Service Providers

E-commerce platform: Shopify Inc. (order processing, website hosting)
Payment processors: Shopify Payments, and other payment providers as applicable (payment processing)
Shipping carriers: DHL, FedEx, DPD, and other carriers as applicable (order delivery)
Fulfilment partners: RMD Logistics GmbH & Co. KG (warehousing, order picking, and shipping)
Email marketing: Klaviyo Inc. (newsletter delivery and marketing communications)
CRM: HubSpot Inc. (customer relationship management)
Analytics: Google Analytics and similar tools (website analytics)
Customer communication tools: Email service providers for transactional communications

4.2 Professional Advisors

Accountants, legal advisors, auditors, and insurers where necessary to provide their professional services.

4.3 Legal & Regulatory Authorities

Courts, law enforcement, tax authorities, or regulatory bodies where required by law or to protect our rights.

4.4 Business Transfers

In the event of a merger, acquisition, reorganisation, or sale of all or part of our assets, your personal data may be transferred as part of that transaction. We will notify you of any such change.

Where a provider processes data on our behalf, we require appropriate contractual safeguards and processing in accordance with our instructions and applicable data protection law. Some providers, such as payment services, may also act as independent controllers for their own legal obligations; their privacy notices apply to that processing.

5. International Data Transfers

pernoire is based in Switzerland, which is recognised by the European Commission as providing an adequate level of data protection.

Some of our service providers are based outside of Switzerland and the European Economic Area (EEA), including in the United States. Where personal data is transferred to countries that do not provide an adequate level of data protection, we ensure appropriate safeguards are in place, including:

EU Standard Contractual Clauses (SCCs)
The service provider's participation in recognised data protection frameworks
Other legally recognised transfer mechanisms

By using our Website and services, you acknowledge that your data may be processed in Switzerland and, where necessary, in other countries as described above.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention periods are:

Order and transaction data: Where these form part of accounting records, 10 years from the end of the relevant financial year under Swiss accounting law; other order data is retained only for as long as needed for its lawful purpose

Account data: For the duration of your account, plus 2 years after account closure or last activity

Marketing data: For marketing purposes, until you withdraw consent or object, or the lawful purpose ends. We then stop that marketing use. We may retain the minimum records needed to honour your opt-out, document consent or meet legal obligations; these records are not used to continue sending marketing

Customer service communications: 5 years from the date of the last communication

Website analytics data: Up to 26 months under our general retention policy, unless a shorter period applies; information that is irreversibly anonymised is no longer personal data

Cookie data: For the duration of the relevant cookie or identifier, which varies by its purpose and configuration; see Section 7 for your choices

After the applicable retention period expires, your data will be securely deleted or anonymised.

7. Cookies & Tracking Technologies

We use cookies and similar technologies to operate the shop, remember preferences and, where permitted, understand website use and measure advertising.

7.1 Cookie Categories

Necessary cookies support features such as the basket, checkout and security. Where legally exempt, these do not require consent. Blocking them in your browser may prevent these features from working.

Preference cookies remember choices such as language or recently viewed products. Analytics cookies help us understand visits and website use, including through Shopify Analytics and Google Analytics where enabled. Marketing cookies help measure campaigns or show relevant advertising and may be set by advertising partners.

Where consent is legally required, these optional technologies are used only after that consent. Your choices also apply to the related processing of personal data. Cookie duration depends on the technology and its configuration; session cookies expire when the session ends, while persistent cookies remain until they expire or are deleted.

7.2 Your Cookie Choices

You can review or change your choices using Cookie settings in the footer of our website. You can also refuse or delete cookies in your browser. Withdrawing consent does not affect processing that was lawful before withdrawal. Blocking necessary cookies may limit the shop's functionality.

7.3 Do Not Track

Our website does not currently respond to browser Do Not Track signals. You can use the cookie settings and the marketing opt-out described in Section 9. This does not limit any rights that apply to you.

8. Your Rights

Depending on your location and applicable law, you have the following rights regarding your personal data:

8.1 Under the Swiss FADP (nDSG)

Right of access: You may request information about whether and what personal data we process about you.
Right to rectification: You may request that inaccurate or incomplete data be corrected.
Right to deletion: You may request deletion of your data, subject to legal retention obligations.
Right to data portability: You may request a copy of your data in a commonly used, machine-readable format.
Right to object: You may object to the processing of your data in certain circumstances.

8.2 Under the EU/UK GDPR (for EU/UK residents)

In addition to the rights above, you also have the right to:

Restrict processing: You may request that we limit the processing of your data.
Withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Lodge a complaint: You have the right to lodge a complaint with your local data protection authority.

8.3 How to Exercise Your Rights

To exercise any of the above rights, please contact us at:

Email: info@pernoire.com

We respond within the applicable legal deadline; under the GDPR, generally within one month. If a lawful extension is necessary, we explain why within that initial period. We may ask you to verify your identity before processing your request. In certain circumstances, we may be unable to fulfil your request (e.g. where we are required to retain data by law), in which case we will explain the reasons.

9. Email Marketing & Order Communications

We use Klaviyo for email marketing. Order communications and marketing have different purposes and are handled separately.

9.1 Messages About Your Order

We send messages needed to process and fulfil your purchase, such as order confirmations, shipping updates and refund notifications. These do not require newsletter consent. Marketing opt-out does not prevent necessary messages about your order.

9.2 Marketing With Your Consent

If you subscribe, we may send product news, offers, brand updates and event invitations within the scope of your consent. Signing up is optional. Declining marketing does not affect your ability to buy from us.

9.3 Offers for Existing Customers

Where the law applicable to you permits it, we may email you about our own similar products without a separate newsletter sign-up, but only if all of these conditions are met:

We obtained your email address in connection with an actual purchase from us.
The email promotes pernoire's own products or services similar to those you purchased.
We clearly informed you when collecting the address, and in every marketing email, how to object simply and without charge beyond ordinary transmission costs.
You have not objected to that use.

A purchase alone is not a general marketing consent. Creating an account or leaving a checkout unfinished does not, by itself, meet this existing-customer exception. We require consent wherever that exception is unavailable or its conditions are not met. This exception does not by itself authorise advertising cookies or uploading customer details to third-party advertising audiences.

9.4 Unsubscribe or Object at Any Time

You can withdraw consent or object to direct marketing at any time using the unsubscribe link in a marketing email or by emailing info@pernoire.com. There is no charge from us. Once you object, we stop using your data for direct marketing, including related profiling. Withdrawing consent does not affect the lawfulness of earlier processing. We may keep limited suppression records to ensure your choice is respected; see Section 6.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

SSL/TLS encryption for all data transmitted between your browser and our Website
Secure payment processing through PCI-DSS compliant payment providers
Access controls limiting who within our organisation can access personal data
Regular security reviews and updates

While we take reasonable precautions to protect your data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

11. Children's Privacy

Our Website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child under 16, we will take steps to delete such data promptly. If you believe a child has provided us with personal data, please contact us at info@pernoire.com.

12. Third-Party Links

Our Website may contain links to third-party websites and services. We are not responsible for the privacy practices, content, or security of any third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. The updated policy will be posted on this page with a revised "Last updated" date.

This policy explains our processing; using the website does not by itself give consent to marketing or optional tracking. Where a change requires a new consent, we will request it separately.

For material changes that significantly affect how we process your personal data, we will make reasonable efforts to notify you (e.g. via email or a prominent notice on our Website).

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

pernoire AG Hochbergerstrasse 158 4057 Basel, Switzerland

Email: info@pernoire.com