Privacy Policy
Last updated: 23 September 2026
With this Privacy Policy, we inform you about how we process personal data at Iseul Match.
Personal data is information relating to an identified or identifiable natural person.
We process personal data in accordance with applicable Swiss data protection law, in particular the Federal Act
on Data Protection (FADP) and the Data Protection Ordinance (DPO). Where the General Data Protection Regulation (GDPR)
applies – in particular to offers made to persons in Liechtenstein or in the European Economic Area –
we also comply with its requirements.
Table of Contents
-
What is the purpose of this Privacy Policy?
-
When does this Privacy Policy apply?
-
Who is responsible for processing personal data?
-
How can you contact us regarding data protection?
-
What rights do you have?
-
What personal data do we process and where does it come from?
-
For what purposes do we process personal data?
-
On what legal bases do we process personal data?
-
To whom do we disclose personal data?
-
Is personal data transferred abroad?
-
Do we process sensitive personal data?
-
Skin Match Quiz and personalised recommendations
-
Profiling and automated decisions
-
How long do we retain personal data?
-
How do we protect personal data?
-
Website, hosting and technical log data
-
Cookies and consent management
-
Google Analytics and Google Tag Manager
-
Shopify, checkout and Shop Pay
-
Payment service providers
-
Shipping and Swiss Post
-
Contact form, email and file uploads
-
Newsletter and marketing communications
-
Social media
-
Planned features
-
Minors
-
Changes to this Privacy Policy
1. What is the purpose of this Privacy Policy?
Data protection and the transparent handling of personal data are important to us. This Privacy Policy explains
in particular what data we process, for what purposes this takes place, which service providers may be involved in the
processing of personal data, whether data may be transferred abroad, how long we retain data
and what rights you have.
2. When does this Privacy Policy apply?
This Privacy Policy applies in particular when you:
-
visit our website iseulmatch.com;
-
view products in our online shop, add them to the shopping cart or place an order;
-
use our Skin Match Quiz;
-
use our contact form or contact us by email;
-
submit a complaint or send us photos or files;
-
make a payment using a payment service offered by us;
-
use a delivery or shipment tracking service;
-
sign up for marketing or newsletter communications once this function is actively used;
-
use additional functions offered by us in the future, such as wish lists, product reviews or shopping-cart reminders.
3. Who is responsible for processing personal data?
My Skin Lab KlG
Brand: Iseul Match
Bahnhofstrasse 8
8447 Dachsen
Switzerland
Website: iseulmatch.com
Email: support@iseulmatch.com
My Skin Lab KlG generally determines the purposes and means of the processing activities described in this Privacy Policy,
unless a service provider used by us is itself responsible for certain processing activities.
4. How can you contact us regarding data protection?
If you have any questions about data protection or wish to exercise your data protection rights, you can contact us at
support@iseulmatch.com.
5. What rights do you have?
Under applicable data protection law, you may in particular request information about whether and which
personal data we process about you. You may also request the correction of inaccurate data and – where the
legal requirements are met – the deletion or destruction of your personal data.
Where the GDPR applies, you may additionally have, in particular, rights to restriction of processing,
objection to certain processing activities, data portability and withdrawal of consent previously given.
A withdrawal takes effect for the future and does not affect the lawfulness of processing carried out up to that point.
To prevent misuse, we may request appropriate proof of identity before processing a data protection request.
In Switzerland, you may contact the Federal Data Protection and Information Commissioner (FDPIC) regarding data protection matters.
Where the GDPR applies in Liechtenstein, you may also contact the Data Protection Authority of Liechtenstein.
6. What personal data do we process and where does it come from?
Depending on how you use our services, we may in particular process the following categories of personal data:
-
Master and contact data: name, email address, telephone number, delivery and billing address;
-
Order and transaction data: products ordered, shopping cart, order value, order time, payment method, order and shipping status;
-
Payment information: information about the selected payment method, payment status and transaction references. Full card details are generally processed by the relevant payment service providers;
-
Communication data: content of emails, contact forms, complaints and support requests, as well as any photos or files submitted;
-
Quiz data: voluntary name, age group, information about skin type, skin needs, skin reactivity, current routine, skin goals, preferred routine length and tolerance of fragrances;
-
Technical data: IP address, browser, device type, operating system, access time, pages viewed, session and cookie identifiers, and technical log data;
-
Usage and analytics data: information about how our website and its functions are used, to the extent the relevant analytics are enabled and legally permissible;
-
Marketing data: marketing consent, newsletter registration and – where activated in the future – information about the sending and use of our marketing communications.
We receive most data directly from you, for example when you place an order, complete a form,
use the Skin Match Quiz or contact us. Technical data may be generated automatically when you visit our
website. Payment and shipping information may also come from the respective payment and
logistics service providers.
7. For what purposes do we process personal data?
We process personal data in particular for the following purposes:
-
providing, operating, securing and further developing our website and online shop;
-
displaying products, the shopping cart and checkout;
-
receiving, processing and fulfilling orders;
-
processing payments and refunds;
-
shipping, delivery and shipment tracking;
-
processing contact requests, complaints and transport damage;
-
generating a personalised cosmetic product recommendation through the Skin Match Quiz;
-
technical error analysis, system security and prevention of misuse;
-
analysing and improving our online offering, where the required consent has been obtained;
-
complying with legal obligations, in particular commercial, tax and accounting requirements;
-
sending newsletters or marketing information if you register for them or where otherwise legally permitted;
-
safeguarding and enforcing legal claims.
8. On what legal bases do we process personal data?
Under Swiss data protection law, we process personal data in accordance with the statutory data processing principles.
Where a justification is required in an individual case, the processing may in particular be based on your
consent, the initiation or performance of a contract, a legal obligation or an overriding private
interest.
Where the GDPR applies, depending on the purpose, we base the processing in particular on the performance of a
contract or pre-contractual measures, compliance with legal obligations, our legitimate interests
or your consent.
9. To whom do we disclose personal data?
We disclose personal data only to the extent necessary for the purposes described, required by law
or otherwise permitted. Recipients may in particular include the following categories of service providers:
-
Shop and e-commerce service providers, in particular Shopify;
-
Hosting and infrastructure service providers, in particular Vercel;
-
Domain and email service providers, in particular Infomaniak;
-
Payment service providers, in particular Shopify Payments, PayPal, Klarna, TWINT and providers of card and wallet payments;
-
Shipping and logistics service providers, in particular Swiss Post;
-
Analytics and technical service providers, in particular Google Analytics and Google Tag Manager, where activated;
-
IT and development service providers, where technical support is required;
-
Advisers, authorities or courts, where this is legally required or necessary to safeguard legal claims.
Certain service providers process data on our behalf. Other service providers – in particular payment providers such as
PayPal, Klarna, TWINT or operators of wallet services such as Shop Pay – may process certain personal data under their own
data protection responsibility. For such independent processing, the
privacy policies of the respective provider apply in addition.
10. Is personal data transferred abroad?
As part of our technical infrastructure and the use of international service providers, personal data may also
be processed outside Switzerland. This may in particular include countries in the European Economic Area, the
United States, Canada, Singapore and – in the case of expressly authorised technical support cases – Sri Lanka.
Shopify initially processes personal data of customers from Switzerland and the European Economic Area
through Shopify International Limited in Ireland and may use additional affiliated
companies and subprocessors in other countries to provide its services.
Where data is transferred to a country that is not recognised by the Swiss Federal Council or – where applicable – by the European Commission
as providing an adequate level of data protection, we ensure that the legal requirements for such a
transfer are complied with. This may in particular be achieved through recognised Standard Contractual Clauses, binding
corporate rules or other guarantees or exceptions provided for by law.
Technical access by external IT service providers from countries without a recognised adequate level of data protection is
permitted only where this is necessary for a specific support case and the data protection requirements
for such access are met.
11. Do we process sensitive personal data?
Our online shop is not designed to collect sensitive personal data. However, individual information in the
Skin Match Quiz – for example regarding skin reactivity or certain skin conditions – may, depending on the content,
allow conclusions to be drawn about health-related aspects.
We use such information exclusively for cosmetic product and routine recommendations. The Skin Match Quiz
does not constitute medical diagnosis, treatment or advice. Please do not provide medical diagnoses
or other particularly sensitive information in the quiz that is not necessary for a cosmetic product recommendation.
Where a quiz response qualifies in a specific case as sensitive personal data or as a special category of
personal data, we process it only to the extent permitted by law and obtain – where
required – explicit consent.
12. Skin Match Quiz and personalised recommendations
Iseul Match offers a Skin Match Quiz to suggest a cosmetic skincare routine and product selection
that are as suitable as possible based on the information you provide.
The quiz can be used without a customer account and entirely anonymously. Providing a name is voluntary and can
be skipped. An email address or telephone number is not required for the quiz. Age is requested only in
age groups.
The evaluation takes into account, in particular, information about skin type, skin needs, skin reactivity, current routine,
skin goals, preferred routine length and tolerance of fragrances. The recommendation may use rule-based as well as
AI-supported components.
Under the currently intended concept, quiz responses are processed only to generate the recommendation and
are not permanently stored as an individual skin profile. The result is displayed directly on the website.
The recommendation does not constitute a medical diagnosis and does not guarantee that a product will be individually tolerated.
If you have known allergies, skin conditions or medical concerns, you should consult an appropriately
qualified professional and review product information and ingredient lists.
13. Profiling and automated decisions
Iseul Match currently does not carry out high-risk profiling. The Skin Match Quiz generates a personalised
product recommendation based on your information, but it does not have legal or similarly significant effects on you.
We ourselves do not make decisions based solely on automated processing that produce legal effects
concerning you or similarly significantly affect you.
Certain payment service providers may use automated identity, fraud, risk or
creditworthiness checks for their own services. This applies in particular to Klarna payment methods. Such decisions are made under the
responsibility of the respective payment service provider and are subject to its privacy policy.
14. How long do we retain personal data?
We retain personal data only for as long as necessary for the relevant purpose or where we are legally
required to retain it for longer.
Operational customer and order data that are no longer required after completion of an order and are not subject to a statutory
retention obligation are generally intended to be deleted or anonymised no later than approximately 60 days afterwards.
Legally relevant contractual, invoice, accounting and business records are generally retained for ten years
where required by Swiss law.
Contact and support requests are deleted after the respective matter has been completed, unless further retention
is required for contract performance, evidence preservation or due to legal obligations.
Marketing data are generally retained until withdrawal or unsubscribe, or for as long as they are required for the
relevant marketing purpose. Technical log, cookie and analytics data are retained in accordance with the retention periods configured
for the respective service or for as long as required for operation, security and analysis.
15. How do we protect personal data?
We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access,
misuse, alteration or unlawful disclosure. Depending on the system, these include in particular encrypted
data transmission, access restrictions, authorisation concepts and security measures of our technical service providers.
Our website is provided over an encrypted HTTPS connection. Despite appropriate security measures,
absolute security cannot be guaranteed when transmitting data over the Internet.
16. Website, hosting and technical log data
Our website uses a custom-developed Next.js frontend that is provided via Vercel. Shopify serves
as the commerce backend for products, shopping cart, checkout, orders and other shop functions. Our domain and
business email addresses are managed via Infomaniak.
When the website is accessed, technically necessary data may be processed, for example IP address, browser and
device information, operating system, URL accessed, access time, referrer information and technical
log data. These data are required in particular to deliver the website, ensure stability and security,
analyse technical errors and detect abusive access.
Our website also has a search or autocomplete function. Search terms may be processed technically
to display suitable content and products. We do not use search terms to create a personal
skin or customer profile.
17. Cookies and consent management
Our website uses cookies and comparable technologies. These include in particular technologies
required for the shopping cart, checkout, language settings, security and other basic shop functions.
In addition, depending on your settings, analytics and, in the future, potentially marketing technologies may be used.
To manage your choices, we use Shopify's privacy and cookie settings. Through the
cookie banner, you can accept, reject or manage non-essential data processing through the settings.
Consent that has been given can be changed or withdrawn for the future through the privacy settings.
Necessary cookies may be used where they are required to provide a function requested by you.
Analytics or marketing technologies are used only in accordance with the applicable legal requirements
and – where required – only activated after the corresponding choice or consent.
18. Google Analytics and Google Tag Manager
For the purpose of analysing and improving our website, we use Google Analytics 4. The provider is Google; for
customers in the European Economic Area and Switzerland, Google Ireland Limited is in particular involved in
the processing of data.
Google Analytics may in particular process information about page views, interactions, devices and browsers used,
approximate location information, online identifiers and other usage events. We use the data to
understand how our shop is used, make technical and content improvements and evaluate the performance of our
website.
Google Analytics is used only in accordance with your cookie or privacy settings and the applicable legal
requirements.
For the technical management of tags and measurement services, we use Google Tag Manager. Non-essential
measurement or tracking services integrated through Tag Manager are intended to respect the choices made in the cookie banner.
At the time of this Privacy Policy, we do not use a Meta/Facebook Pixel or TikTok Pixel on our website.
Google Ads Conversion Tracking is also not currently intended as an active tracking function. If we activate such
technologies in the future, we will update our cookie settings and this Privacy Policy accordingly.
19. Shopify, checkout and Shop Pay
We use Shopify as our e-commerce platform. In connection with providing our shop, Shopify processes in particular
order, contact, shopping cart, checkout, payment, device and technical usage data.
For personal data of customers from Switzerland and the European Economic Area, the initial
processing takes place through Shopify International Limited in Ireland. Shopify may use additional affiliated companies and
subprocessors.
Our shop currently allows guest orders; a dedicated Iseul Match customer account is not planned for launch.
Shop Pay may be available as an accelerated checkout function. If you use Shop Pay or other Shopify Consumer Services,
there is an additional direct relationship between you and Shopify. Shopify may process personal data
under its own responsibility in accordance with the privacy provisions applicable to Shop or Shop Pay.
20. Payment service providers
For payment processing, we offer, depending on availability, in particular the following payment methods:
Visa, Mastercard, American Express, UnionPay, Apple Pay, Google Pay, PayPal, Klarna and TWINT.
Card payments and certain wallet payments are processed via Shopify Payments or the payment providers connected to it.
Depending on the payment method, the data required for the payment are transmitted to the respective payment service provider
or collected directly by that provider. These may in particular include name, billing address, email address,
transaction amount, order reference, device information and payment data.
We generally do not receive all complete payment information such as full credit card numbers,
but rather in particular information about the selected payment method, the payment status and the transaction.
With Klarna, depending on the payment method offered by Klarna and selected by you, in particular
immediate payment or “Pay later” may be available. Klarna may carry out identity, fraud, risk
and creditworthiness checks under its own responsibility and may use additional data sources for this purpose.
For independent processing by the respective payment providers, their privacy policies apply in addition.
21. Shipping and Swiss Post
We currently deliver to Switzerland and Liechtenstein. For shipping, we use in particular Swiss Post.
For the purpose of delivery and, where applicable, shipping or delivery notifications, we may in particular
transmit your name, delivery address, email address, telephone number and shipment information to the shipping service provider.
The shipping service provider processes this information within the scope of its own legal and contractual
responsibilities.
22. Contact form, email and file uploads
If you use our contact form, we process the data you provide in order to respond to your request.
The contact form asks in particular for your full name, email address, subject and message.
The telephone number is optional.
Contact requests are sent to support@iseulmatch.com. Our business emails are provided through
Infomaniak.
Where the upload function is enabled, you may send us photos or other files where necessary, for example
to document a complaint or transport damage. Please provide only information that is necessary for
processing your request.
Contact and complaint data are generally deleted after the respective case has been completed, unless further
retention is required for contractual, evidentiary or legal purposes.
23. Newsletter and marketing communications
Newsletter and marketing emails are planned as a function. If you register for them or voluntarily
indicate during checkout that you would like to receive news and offers by email, we may use your email address and your
marketing consent for corresponding communications.
Shopify or Shopify Email is intended in particular for sending such communications. Newsletter sending may still
be disabled at launch and activated at a later date.
You may withdraw consent at any time with effect for the future, in particular via the unsubscribe link in the
relevant message or by contacting support@iseulmatch.com.
Shopping-cart reminders or SMS marketing are not actively used at launch. If such functions are activated in the future,
we will use them only to the extent permitted by law and obtain consent where
required.
24. Social media
We may provide links on our website to our profiles on Instagram and TikTok. As long as you do not
click such a link, the mere presence of the link does not generally activate any direct social-media function on our website.
If you click a link and visit the respective platform, further processing of data is carried out by the
respective platform operator in accordance with its own privacy policy.
At the time of this Privacy Policy, we do not directly embed Instagram or TikTok feeds into the website.
25. Planned features
We continuously develop our online shop. In the future, features may include wish lists/favourites, product reviews,
product-sharing functions, shopping-cart reminders or SMS communications.
Such functions will only be activated once the required data protection and security settings
have been implemented. If a new function introduces additional service providers, categories of data, recipient countries or
processing purposes, we will update this Privacy Policy accordingly.
26. Minors
Our offering is not specifically directed at minors. The main target group of Iseul Match is adult
customers. Where, in an individual case, the consent of a minor is required for a specific processing activity,
we comply with the applicable legal requirements.
27. Changes to this Privacy Policy
We may amend this Privacy Policy if our business activities, the technical services we use,
our processing activities or the legal situation change. The version currently published on our website
applies.
My Skin Lab KlG – Iseul Match
Bahnhofstrasse 8
8447 Dachsen
Switzerland
Email: support@iseulmatch.com