Privacy policy

Last updated: September 18, 2026

This Privacy Policy explains how Greenchill SARL (the “Site”, “we”, “us” or “our”) collects, uses and discloses your personal information when you visit, use our services or make a purchase on www.greenchill.ch (the “Site”) or otherwise communicate with us about the Site (collectively, the “Services”). In this Privacy Policy, “you” and “your” mean you as a user of the Services, whether a customer, website visitor or another person whose information we have collected under this Privacy Policy.

Please read this Privacy Policy carefully.

Changes to this Privacy Policy

We may update this Policy from time to time to reflect changes to our practices or for operational, legal or regulatory reasons. We will publish the revised Policy on the Site, update the “Last updated” date and take any other action required by applicable law.

How we collect and use your personal information

To provide the Services, we collect and have collected over the past 12 months personal information about you from various sources, as described below. The information we collect and use varies depending on how you interact with us.

In addition to the uses below, we may use your information to communicate with you, provide or improve the Services, comply with applicable legal obligations, enforce applicable terms of service, and protect or defend the Services, our rights and the rights of our users or others.

Personal information we collect

The types of personal information we obtain depend on your interactions with our Site and use of our Services. “Personal information” means information that identifies, relates to, describes or can be associated with you. The following sections describe the categories and specific types we collect.

Information we collect directly from you

Information you submit directly through our Services may include:

• Contact details including your name, address, telephone number and email address.
• Order information including your name, billing and shipping addresses, payment confirmation, email address and telephone number.
• Account information including your username, password, security questions and other information used for account security.
• Shopping information including items you view, put in your basket, save in your account or purchase, as well as loyalty points, comments, referrals or gift cards.
  • Saved loyalty points/product reviews/referrals/gift cards
• Customer service information including information you choose to include when communicating with us, for example in messages sent through the Services.

Certain features may require you to provide information directly. You may choose not to do so, but this may prevent you from using or accessing those features.

Information we collect about your use

We may also automatically collect information about your interaction with the Services (“ Usage Data ”). To do so, we may use cookies, pixels and similar technologies (“ Cookies ”). Usage Data may include how you access and use our Site and your account, including device, browser and network connection information, your IP address and other details about your interaction with the Services.

Information we obtain from third parties

We may also obtain information from third parties, including suppliers and service providers that may collect it on our behalf, such as:

• Companies supporting our Site and Services, such as Shopify.
• Our payment processors collect payment information, such as bank account, credit or debit card details and billing address, to process your payment, fulfil orders and provide requested products or services in performance of our contract with you.
• When you visit our Site, open or click our emails, or interact with our Services or advertisements, we or third parties working with us may automatically collect information using online tracking technologies such as pixels, web beacons, software development kits, third-party libraries and cookies.

All information obtained from third parties will be handled under this Policy. See also the section below, Third-party websites and links.

How we use your personal information

• Providing products and Services. We use your information to provide the Services and perform our contract with you, including processing payments, fulfilling orders, sending notices about your account, purchases, returns, exchanges or other transactions, creating, maintaining and managing your account, arranging shipping, facilitating returns and exchanges and other account-related features.
• Marketing and advertising. We may use your information for marketing and promotion, including marketing, advertising and promotional messages by email, SMS or post, and displaying advertisements for products or services. This may include better tailoring the Services and advertising on our Site and other websites. If you reside in the EEA, the legal basis is our legitimate interest in selling our products under Art. 6 (1) (f) GDPR.
• Security and fraud prevention. We use your information to detect, investigate or act on possible fraudulent, illegal or malicious activity. If you create an account, you are responsible for keeping its credentials secure. We strongly recommend not sharing your username, password or other access information. Contact us immediately if you believe your account has been compromised. If you reside in the EEA, the legal basis is our legitimate interest in keeping our website secure for you and other customers under Art. 6 (1) (f) GDPR.
• Communicating with you and improving the Services. We use your information for customer service and to improve our Services. This serves our legitimate interest in being responsive, providing efficient services and maintaining our business relationship with you under Art. 6 (1) (f) GDPR.

Cookies

Like many websites, we use cookies. For details of cookies used to operate our store with Shopify, visit https://www.shopify.com/legal/cookies. We use cookies to operate and improve our Site and Services, including remembering actions and preferences, conduct analytics and understand user interactions, in our legitimate interest in administering, improving and optimising the Services. We may allow third parties and service providers to use cookies to better tailor services, products and advertising on our Site and other websites.

Most browsers accept cookies automatically by default, but browser controls let you delete or reject them. This may impair your experience and cause Services, including particular or general features, to malfunction or become unavailable. Blocking cookies may not entirely prevent our sharing information with third parties such as advertising partners.

Our website also recognises the global privacy signal (Global Privacy Control, GPC), which lets you opt out of certain uses or disclosures. If you communicate your preference through GPC, we treat it as a valid opt-out of sharing or targeted advertising for the associated browser or device. If we can link that device to a Shopify account, we apply it to that account too. To learn more about Global Privacy Control, visit https://globalprivacycontrol.org/. Apart from Global Privacy Control, we do not recognise other “Do Not Track” signals sent by your browser or device.

How we disclose personal information

In certain circumstances, we may disclose your information to third parties to perform contracts, for legitimate purposes and for other reasons covered by this Policy, including:

• Suppliers or other third parties providing services on our behalf, such as IT management, payment processing, analytics, customer service, cloud storage, order fulfilment and shipping.
• Business and marketing partners to provide services and advertising to you. Our business and marketing partners use your information under their own privacy notices.
• When you request or otherwise consent to disclosure to third parties, for example to ship products or through your use of social media widgets or login integrations, with your consent.
• With affiliates or within our corporate group, in our legitimate interest in running a successful business.
• As part of a business transaction such as a merger or bankruptcy, to meet legal obligations including subpoenas, search warrants and similar requests, enforce applicable terms of service, and protect or defend the Services, our rights and those of our users or third parties.

Over the past 12 months the following categories of personal and sensitive personal information about users for the purposes described above in the sections “How we collect and use your personal information” and “How we disclose personal information” :

Category

Recipient categories

Identifiers such as basic contact details and certain order and account information Categories listed in California’s customer records law, such as basic contact details and certain order and account information Commercial information such as order, shopping and customer service information Internet or similar network activity, such as Usage Data Geolocation data such as locations determined by an IP address or other technical measures

Suppliers and third parties providing services on our behalf, such as internet providers, payment processors, fulfilment and customer service partners and analytics providers Business and marketing partners Affiliates

We do not use or disclose sensitive personal information without your consent or to infer characteristics about you.

With your consent, we share personal information for advertising and marketing as follows.

Over the preceding 12 months, we have “sold” and “shared” personal information, as defined by applicable law, for advertising and marketing as follows.

Categories of personal information	Recipient categories
Identifiers such as name, email address and telephone number	Business and marketing partners
Commercial information such as records of products or services purchased	Business and marketing partners
Usage Data	Business and marketing partners

Third-party websites and links

Our Site may link to third-party websites or platforms. If you follow links to sites unaffiliated with or uncontrolled by us, review their privacy, security and other terms. We do not guarantee or accept responsibility for their privacy or security, including the accuracy, completeness or reliability of their information. Information posted in public or semi-public areas, including third-party social platforms, may be visible to other users of the Services or those platforms, without limits on our or third parties’ use of it. Including a link does not itself endorse the platform’s content, owners or operators, except where stated in the Services.

Children’s data

The Services are not intended for children, and we do not knowingly collect children’s personal information. If you are the parent or guardian of a child who has provided information, contact us using the details below to request deletion.

As of this Policy’s effective date, we have no actual knowledge of “sharing” or “selling”, as defined by applicable law, personal information of individuals under 16.

Security and retention of your information

No security measure is perfect or impenetrable, and we cannot guarantee “absolute security”. Information you send us may be unsecured in transit. We recommend not using insecure channels for sensitive or confidential information.

Retention depends on factors such as whether information is needed to maintain your account, provide Services, fulfil legal duties, resolve disputes or enforce applicable contracts and policies.

Your rights

Depending on where you live, you may have all or some of the rights below. These rights are not absolute, may apply only in certain circumstances, and we may refuse requests where the law allows.

• Right of access/to know : You may have the right to request access to information we hold about you, including details of how we use and share it.
• Right to deletion : You may have the right to ask us to delete information we hold about you.
• Right to correction : You may have the right to ask us to correct information we hold about you.
• Right to portability : You may have the right to receive a copy of your information and request transfer to a third party in certain circumstances and subject to exceptions.
• Right to opt out of sale, sharing or targeted advertising : You may have the right to ask us not to “sell” or “share” your information or to refuse processing for “targeted advertising” as defined in privacy laws. If you visit our Site with the opt-out preference signal (Global Privacy Control) enabled, depending on your location, we automatically treat this as an opt-out of “selling” or “sharing” information for the device and browser used to visit the Site.
• Restriction of processing : You may have the right to ask us to stop or restrict processing your information.
• Withdrawal of consent : Where processing relies on your consent, you may have the right to withdraw it.
• Appeal : If we refuse your request, you may have the right to appeal by replying directly to our refusal.
• Managing communication preferences : You can opt out of promotional emails at any time using the unsubscribe option in our emails. We may still send non-promotional emails, such as those about your account or orders.

You can exercise these rights where indicated on our Site or by contacting us using the details below.

We will not discriminate against you for exercising your rights. Before a substantive response, we may need information such as your email address or account details to verify identity. Under applicable law, you may appoint an authorised agent to make requests. Before accepting such a request, we require proof of authorisation and may require you to verify identity directly with us. We respond as promptly as required by applicable law.

Complaints

If you have a complaint about our handling of your information, contact us using the details below. If dissatisfied with our response, depending on your residence you may appeal our decision through those contact details or complain to your local data protection authority. For the EEA, a list of the responsible data protection authorities is available here.

International users

We may transfer, store and process your information outside your country of residence. Employees, third-party service providers and partners in those countries also process it.

For transfers outside Europe, we use recognised mechanisms such as European Commission Standard Contractual Clauses or equivalent contracts issued by the competent UK authority, as applicable, unless the destination country is recognised as providing adequate protection.

Contact

For questions about our privacy practices or this Policy, or to exercise your rights, call us or email greenchill.cbd@gmail.com or contact us at Greenchill Sarl, Chemin de Blandonnet 10, c/o FORVIS MAZARS SA, 1214 Vernier, Switzerland.

For applicable data protection laws, unless expressly stated otherwise, we are the controller of your personal information.