Privacy policy

Scope: www.leonite.ch and the associated online shop (hereinafter the “Website” or “Online Shop”)

Version: 9 August 2026

1. CONTROLLER

E-Commerce Tavic (sole proprietorship), trading under the fashion label “LEONITE®”
Weiherstrasse 17
CH-5015 Erlinsbach (SO)

Tel.: +41 79 646 53 13
Email: support@leonite.ch

Registered in the Commercial Register of the Canton of Solothurn.
Enterprise Identification Number (UID): CHE-402.414.024

Owner and authorized representative: Stjepan Tavic

2. PURPOSE OF THIS PRIVACY POLICY

This Privacy Policy explains the nature, scope and purpose of the processing of your personal data when you visit our Website, use our Online Shop or make use of our services.

In particular, it explains which personal data we process, the purposes for which we process it, the legal bases on which the processing is carried out, the recipients to whom data may be disclosed, how long data is retained and the rights available to you.

This Privacy Policy applies in particular to customers and visitors from Switzerland, the European Union, the European Economic Area, the United Kingdom and the United States, insofar as the relevant data protection law applies.

3. PERSONAL DATA WE PROCESS

We process personal data that we receive directly from you, that is generated through your use of our Website or that is provided to us by the service providers we use.

This includes, in particular, the following categories of personal data:

  • Master data: name, address, billing address, delivery address, email address and telephone number
  • Order and contract data: shopping cart, products ordered, order number, order history, delivery and billing data, and payment status
  • Payment data: payment method, payment amount, currency, transaction ID, payment status, tokens or comparable payment information; as a rule, we do not store complete credit card or bank account details
  • Communications data: enquiries, messages, emails, chat or messaging content, support requests and correspondence
  • Shipping and logistics data: delivery address, shipping status, tracking number, shipping service provider and delivery information
  • Usage and technical data: IP address, browser and device information, operating system, referring URL, pages visited, access times and log data
  • Cookie and consent data: cookie preferences, consent status, timestamps and technical identifiers
  • Analytics and marketing data: information about page views, product views, shopping-cart activity, purchases, conversions and interactions with emails or advertising, insofar as the relevant tools are used and consent is required
  • Newsletter and marketing data: email address, subscription, unsubscription, consent status, and opening and click data, insofar as newsletters or marketing emails are used

As a rule, we do not process sensitive personal data unless this is exceptionally permitted by law or has been initiated by you.

Where we do not obtain personal data directly from you, it comes in particular from our Shopify shop platform, payment service providers, shipping and logistics companies, communications and marketing service providers, and providers of security and fraud-prevention services.

4. PURPOSES OF PROCESSING

We process personal data in particular for the following purposes:

  • to provide, administer and secure our Website and Online Shop
  • to display products and shop functions
  • to process orders and purchase contracts
  • to process payments and prevent fraud
  • to deliver goods and process shipping
  • to create shipping labels and provide shipment tracking
  • to handle customer enquiries, complaints, returns and support cases
  • to communicate with you, particularly by email, contact form, chat or messaging function
  • to administer customer accounts, where offered
  • to provide digital vouchers or gift cards
  • to ensure IT security and prevent misuse
  • to comply with legal obligations, in particular retention obligations under commercial, tax and accounting law
  • to analyze, improve and commercially optimize our offering
  • to carry out newsletter and email marketing where permitted
  • to measure and optimize advertising where the relevant tools are used and consent is required
  • to establish, exercise or defend legal claims

5. LEGAL BASES FOR PROCESSING

Where Swiss data protection law applies, we process personal data on the basis of the Swiss Federal Act on Data Protection, in particular where this is necessary to perform a contract, comply with legal obligations, pursue overriding private interests or act on the basis of your consent.

Where the EU General Data Protection Regulation, the UK GDPR or comparable data protection rules apply, we rely in particular on the following legal bases:

  • performance of a contract and steps taken before entering into a contract, in particular for orders, payments, deliveries, returns and customer enquiries
  • compliance with legal obligations, in particular obligations under tax, commercial and accounting law
  • legitimate interests, in particular our interests in operating our Online Shop securely, efficiently, conveniently and commercially; preventing fraud; maintaining IT security; providing customer service and direct communications; and establishing, exercising or defending legal claims
  • consent, in particular for optional cookies, analytics and marketing technologies, newsletter subscriptions or certain marketing activities

You may withdraw any consent you have given at any time with effect for the future.

6. SHOP PLATFORM AND HOSTING: SHOPIFY

Our Online Shop is operated using Shopify. The shop platform is provided in particular by Shopify International Limited, Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland. Depending on the processing concerned, data may also be processed by other Shopify companies, in particular Shopify Inc. in Canada, and by Shopify sub-processors.

Shopify provides the technical infrastructure, hosting, shop functions, shopping cart, checkout, order management, payment integration, security functions, analytics functions and other services required to operate our Online Shop.

The following data in particular may be processed in connection with Shopify:

  • name, billing address and delivery address
  • email address and telephone number
  • order and shopping-cart data
  • payment status and transaction-related information
  • IP address and device and browser information
  • log data, security data and technical usage data
  • cookie and consent information
  • communications and support data, insofar as it is processed using Shopify functions

As a rule, Shopify processes personal data on our behalf where this is necessary to provide and operate our Online Shop. For individual functions or enhanced services, Shopify may also act as an independent controller, in particular where data is used to provide, secure, analyze, develop or improve platform-related services.

In connection with Shopify, personal data may be processed both in Switzerland and abroad. The countries of recipients currently relevant to us and the safeguards used for international data transfers are described in section 17.

Further information is available at:

We have entered into the data-processing agreements required under data protection law with Shopify insofar as Shopify processes personal data on our behalf.

7. WEBSITE VISITS AND SERVER LOG DATA

When you use our Website solely for informational purposes, technical data required to operate, stabilize and secure the Website is processed automatically.

This includes in particular:

  • pages or URLs accessed
  • date and time of access
  • volume of data transferred
  • referring URL
  • browser, operating system and device
  • IP address
  • status messages and error logs
  • security and log data

This data is processed to provide the Website, analyze errors, prevent misuse, ensure technical security and maintain the stable operation of our Online Shop.

The processing is carried out in particular through the infrastructure of our Shopify shop platform.

Where server and log data is stored, it is retained only for as long as necessary to provide, stabilize and secure the Online Shop and to analyze errors and prevent misuse. Data may be retained for longer where this is necessary to investigate security incidents, misuse or technical errors, comply with legal obligations, or establish, exercise or defend legal claims. Where storage is carried out by service providers we use, in particular Shopify, the specific retention periods are also governed by their technical and legal requirements.

8. COOKIES AND SIMILAR TECHNOLOGIES

Our Website uses cookies and similar technologies. Cookies are small text files stored on your device that contain certain information.

We distinguish between:

  • strictly necessary cookies and technologies required for the operation of the Online Shop, the shopping cart, checkout, security, sessions, language settings, payment processing or the storage of privacy preferences
  • optional analytics and marketing technologies that help us understand how our shop is used, measure performance, optimize advertising or evaluate marketing activities

Strictly necessary cookies are used to provide the Online Shop and its functions.

We use non-essential cookies and similar technologies only where you have given us your consent, insofar as such consent is legally required. You may withdraw or change your consent at any time with effect for the future through the cookie banner or the relevant settings.

Shopify cookies and similar technologies may be used within the Shopify Online Shop, in particular for the shopping cart, checkout, security, fraud prevention, session management and consent management. Depending on the configuration, Shopify statistics or analytics functions may also be used.

An up-to-date overview of the cookies and similar technologies used, their providers, purposes and retention periods is available in the cookie settings. You can access them at any time using the “Cookie settings” link in the footer of our Online Shop. There you can withdraw previously given consent with effect for the future or change your selection.

9. SHOPIFY EMAIL AND NEWSLETTERS

We use Shopify Email or comparable Shopify functions to send emails, newsletters and marketing messages where you have subscribed or given the corresponding consent.

The following data in particular may be processed when you subscribe and use these services:

  • email address
  • name, where provided
  • consent status
  • date and time of subscription
  • IP address or technical registration data, where collected
  • opening and click data
  • information about interactions with our emails
  • unsubscription status

The newsletter is sent only with your express consent. You may unsubscribe at any time using the unsubscribe link in each marketing email or by emailing support@leonite.ch.

We may use newsletter and email data to send you information about LEONITE®, products, promotions, new releases, product drops, pre-orders or similar content and to measure and improve the performance of our emails.

Newsletter and marketing email processing is based on your consent. You may withdraw your consent at any time with effect for the future, in particular through the unsubscribe link in the relevant marketing email or by emailing support@leonite.ch.

After you withdraw your consent or unsubscribe from the newsletter, you will be removed from the active marketing distribution list. Data required to document your consent and its withdrawal, comply with legal obligations or defend against legal claims may continue to be retained to the extent necessary for those purposes.

10. SHOPIFY MESSAGING / SHOPIFY INBOX AND CUSTOMER COMMUNICATIONS

We use Shopify Inbox or comparable Shopify messaging and chat functions to answer customer enquiries and provide support.

If you contact us using a messaging or chat function, the following data in particular may be processed:

  • name, where provided
  • email address or other contact details
  • content of your message
  • order information, where required to handle your request
  • technical information concerning the use of the messaging function
  • date and time of the communication

The data is processed to handle your enquiry, communicate with you, perform the contract, assist with orders, returns or support cases, and improve our customer service.

11. ORDERS, PAYMENTS AND SHIPPING

When you place an order in our Online Shop, we process the personal data required to perform the contract.

This includes in particular:

  • products ordered
  • shopping-cart and order data
  • billing and delivery address
  • name and contact details
  • communications data
  • payment status and transaction-related information
  • shipping status and shipment-related information

The data is processed to perform the contract, process payments, deliver goods, provide customer service, prevent fraud, handle warranty matters and returns, and comply with legal obligations.

12. PAYMENT PROCESSING

We offer various payment methods in our Online Shop. These may currently include Visa, Mastercard, American Express, Shop Pay, Apple Pay, Google Pay, Klarna, TWINT and PayPal. The payment methods displayed during the relevant checkout process are decisive.

The personal data required to process the payment is transmitted to the payment service provider you select. This may include, in particular, your name, billing and delivery address, email address, payment amount, currency, order information, payment status, transaction ID or token, IP address and technical transaction information. The data is processed in particular to authorize and execute the payment, prevent fraud, process refunds and comply with legal obligations.

Payments made using Visa, Mastercard, American Express, Shop Pay, Apple Pay, Google Pay, Klarna and TWINT are processed through Shopify Payments and the payment processors, card networks, wallet providers or payment service providers involved in each case. Depending on the payment method selected, Shopify, payment processors used by Shopify, and Klarna, TWINT, Apple or Google may receive personal data and may process it partly under their own responsibility under data protection law.

If you select PayPal, the payment is processed through PayPal. The data required for this purpose is transmitted to PayPal. PayPal may process this data under its own responsibility, in particular to process payments, verify identities, prevent fraud and comply with its own legal obligations.

As a rule, we do not receive complete credit card, bank account or wallet access details. In particular, we receive payment confirmations, payment status, transaction identifiers and other information required to process the order, a refund or a complaint.

The privacy terms of the selected payment service provider also apply to further processing.

13. SHIPPING, SWISS POST LABEL AND LOGISTICS

To deliver the goods ordered, we transmit the personal data required for this purpose to the shipping or logistics company commissioned for the relevant shipment.

We use, in particular, shipping and label solutions such as Swiss Post Label, services of Swiss Post or comparable shipping solutions to create shipping labels, process consignments and enable deliveries.

The following data in particular may be processed and transmitted:

  • name
  • delivery address
  • email address or telephone number, where required for shipping information
  • order number or reference number
  • tracking number
  • shipping status
  • parcel and delivery information

The data is processed exclusively for shipping, label creation, delivery, shipment tracking, handling delivery problems and processing returns.

Depending on the country of delivery, shipping and logistics data may also be transmitted to foreign shipping partners, customs authorities, tax authorities or local delivery service providers where this is required for delivery, importation, customs clearance or compliance with legal obligations.

14. TIKTOK PIXEL / TIKTOK EVENTS API

Where activated, we use TikTok Pixel and the TikTok Events API for marketing and analytics purposes. These technologies help us record interactions with our Online Shop, measure the effectiveness of our advertising activities, attribute conversions, create audiences and optimize our advertising.

Recipients of the data may include TikTok Technology Limited, The Sorting Office, Ropemaker Place, Dublin 2, D02 HD23, Ireland, and, for the United Kingdom, TikTok Information Technologies UK Limited, Kaleidoscope, 4 Lindsey Street, London, EC1A 9HP, United Kingdom.

Depending on the configuration, the following data in particular may be processed:

  • IP address
  • device, browser and operating-system information
  • pages viewed and the times at which they were viewed
  • product views and shopping-cart activity
  • purchase, order and conversion events
  • order value, currency and transaction information
  • cookie IDs, pixel identifiers and comparable identifiers
  • hashed contact information such as an email address or telephone number, where Advanced Matching is enabled

For visitors from the European Union, the European Economic Area and the United Kingdom, and in other cases where consent is required by law, this data is processed only after you have given your consent. You may withdraw your consent at any time with effect for the future through the cookie settings.

Depending on the specific processing, TikTok may process personal data as a processor, an independent controller or a joint controller with us. Personal data may also be processed outside Switzerland, the European Union, the European Economic Area or the United Kingdom.

Further information is available at:

15. hCAPTCHA / SPAM AND BOT PROTECTION

hCaptcha is used within our Shopify shop platform to protect our Online Shop and its forms against spam, bots, abusive automated input and other abusive access.

hCaptcha is provided by Intuition Machines, Inc., 1065 SW 8th St #704, Miami, FL 33130, USA.

hCaptcha checks whether input and interactions are made by a natural person or by automated means. The following data in particular may be processed:

  • IP address
  • browser, device and operating-system information
  • referring URL
  • date and time of the interaction
  • time spent on the page
  • mouse, keyboard, touch and other interaction data
  • security-related assessment and verification data

The data is processed to ensure the security and functionality of our Online Shop and to prevent spam and misuse. The processing is based on our overriding private or legitimate interest in operating our Online Shop securely.

Data may also be processed in the United States. The information in section 17 of this Privacy Policy additionally applies to international data transfers.

Further information is available at:

16. RECIPIENTS OF PERSONAL DATA

We disclose personal data only where this is necessary for the purposes stated, a legal obligation applies, you have given your consent or another legal basis exists.

Recipients may include in particular:

  • Shopify and Shopify companies
  • payment service providers such as Shopify Payments, PayPal, Klarna or other payment providers offered at checkout
  • shipping and logistics service providers, in particular Swiss Post or Swiss Post Label
  • providers of email, newsletter and messaging services, in particular Shopify Email and Shopify Messaging/Inbox
  • IT, hosting, security and support service providers
  • analytics and marketing service providers, where used and permitted
  • public authorities, courts, tax advisers, legal advisers or other bodies where legally required
  • customs and tax authorities and local shipping partners for international deliveries

Data is disclosed only to the extent necessary.

17. DISCLOSURE OF DATA ABROAD

In the course of our business activities and use of external service providers, personal data may also be disclosed to recipients abroad or processed there. Based on the current position, this concerns in particular countries of the European Union and European Economic Area, the United Kingdom, Canada, the United States and Singapore. For international deliveries, data may also be transmitted to the relevant country of delivery.

Disclosure abroad may take place in particular in connection with hosting, shop operations, payment processing, shipping, customs clearance, analytics, marketing, email distribution, messaging, security and support.

Where a recipient country has a level of data protection recognized as adequate under the applicable data protection law, disclosure is based on the relevant adequacy decision. This applies only within the material and personal scope of that adequacy decision.

The Swiss–U.S. Data Privacy Framework may be used for transfers from Switzerland to certified companies in the United States. For data subject to the GDPR, the EU–U.S. Data Privacy Framework may be used for appropriately certified companies. For data subject to the UK GDPR, the UK Extension to the EU–U.S. Data Privacy Framework may be used for appropriately certified companies.

Where no recognized adequacy decision exists or a recipient is not appropriately certified, we rely on suitable safeguards. These include, in particular, recognized standard contractual clauses, where appropriate with Swiss amendments, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, and additional technical and organizational safeguards where required.

You may contact us for further information about the safeguards used and request a copy or description of the key safeguards.

18. RETENTION OF PERSONAL DATA

We retain personal data only for as long as required for the relevant purposes or as long as we are legally obliged to do so.

The following principles apply in particular:

  • As a rule, we retain business and accounting records for 10 years in accordance with statutory retention obligations.
  • Order, payment and contract data is retained for as long as necessary to perform the contract, handle warranties and returns, comply with legal obligations or deal with legal claims.
  • Communications and support data is retained for as long as necessary to handle your request, provide customer service or maintain the required documentation.
  • Newsletter and marketing data is generally retained for as long as the relevant consent remains valid and the data is required for the relevant marketing purposes. After consent is withdrawn or you unsubscribe, data may continue to be retained to the extent necessary to document your consent and its withdrawal, comply with legal obligations or defend against legal claims.
  • Technical records and server log data are retained only for as long as necessary to provide, stabilize and secure the Online Shop, analyze errors and prevent misuse. Data may be retained for longer where this is necessary to investigate security incidents, misuse or technical errors, comply with legal obligations, or establish, exercise or defend legal claims.
  • Data from cookies, analytics and marketing tools is stored in accordance with the settings and retention periods of the relevant tools and your consent.

Once personal data is no longer required for the purposes stated and no statutory retention obligations or legitimate interests prevent its deletion, it is deleted or anonymized.

19. YOUR RIGHTS

Subject to the applicable data protection law, you have in particular the following rights:

  • to ask whether we process personal data relating to you
  • to obtain information about the personal data processed
  • to have inaccurate or incomplete personal data corrected
  • to request the deletion or destruction of your personal data where the statutory requirements are met
  • to request restriction of processing where the statutory requirements are met
  • to object to the processing of your personal data where provided for by law
  • to object to processing for direct marketing purposes
  • to request the release or transfer of certain personal data in a commonly used electronic format where the statutory requirements are met
  • to withdraw consent at any time with effect for the future
  • not to be subject to a decision based solely on automated processing where provided for by law

Right to object: Where we process personal data on the basis of legitimate or overriding private interests, you may object to the processing on grounds relating to your particular situation, insofar as the applicable data protection law provides for this. You may object at any time to the processing of your personal data for direct marketing purposes. This also applies to related profiling. Following your objection, we will no longer process your personal data for those purposes.

Automated decision-making: As a rule, we do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. Payment or fraud-prevention service providers may carry out automated checks under their own responsibility. The privacy information of the relevant service provider also applies.

To exercise your rights, you may contact us at any time using the contact details in section 24.

To protect against misuse, we may request reasonable proof of identity. If you believe that the processing of your personal data infringes data protection law, you may lodge a complaint with the competent data protection supervisory authority. In Switzerland, this is in particular the Federal Data Protection and Information Commissioner (FDPIC). Customers in the EU or the United Kingdom may also contact the competent data protection supervisory authority at their place of residence.

20. DATA SECURITY

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, loss, misuse, alteration or unlawful disclosure.

Our security measures include in particular:

  • encrypted data transmission using TLS/SSL
  • access restrictions and authorization concepts
  • technical safeguards for systems and data
  • security functions provided by our Shopify shop platform
  • appropriate review, maintenance and protection of the IT systems under our control
  • restriction of access to personal data to the persons and service providers who require it

Please note that electronic data transmission over the internet is never completely secure, even where appropriate security measures are in place. Absolute protection therefore cannot be guaranteed.

Where our data processing is carried out through external service providers, in particular Shopify, we ensure that they also implement appropriate security measures.

Where a statutory notification or information obligation applies, we will inform the competent supervisory authority and the affected persons to the extent required by law.

21. REQUIREMENT TO PROVIDE PERSONAL DATA

Certain personal data is required so that we can enter into and perform a purchase contract or provide other services requested by you. This includes, in particular, your name, billing and delivery address, contact details and the information required for the payment method selected and the processing of your order.

Without the required personal data, we may be unable to accept, process, invoice or deliver an order or provide the service you have requested.

Providing personal data for newsletters and optional analytics and marketing purposes is voluntary. Refusing or withdrawing the consent required for these purposes does not affect your ability to use our Online Shop to place orders, provided that the relevant data or technologies are not required to perform the contract or operate the Online Shop in a technically necessary manner.

22. MINORS

As a rule, our offering is intended for adults. We do not knowingly collect personal data from minors who do not have the required consent of their parents or legal guardians.

If we become aware that personal data relating to minors has been processed unlawfully, we will delete that data or restrict its processing in accordance with legal requirements.

Parents or legal guardians who suspect unlawful processing may contact us at any time.

23. THIRD-PARTY WEBSITES AND LINKS

Our Website may contain links to websites, services or content provided by third parties.

The relevant third-party provider is solely responsible for data processing on such external websites or by such third parties.

We have no control over their content, security standards or privacy terms and accept no responsibility for them.

Please therefore review the separate privacy policies and terms of use of the relevant third parties.

24. CONTACT

If you have questions about data protection or wish to exercise your rights under data protection law, you may contact us at any time:

E-Commerce Tavic
Weiherstrasse 17
CH-5015 Erlinsbach (SO)
Switzerland

Tel.: +41 79 646 53 13
Email: support@leonite.ch
Subject: Data Protection

Where necessary to handle your request, we may ask you to provide reasonable proof of your identity.

25. AMENDMENTS TO THIS PRIVACY POLICY

We may amend this Privacy Policy at any time with effect for the future, in particular if we change our Website, Online Shop, services, tools used or processing activities, or if legal requirements change.

The current version published on our Website applies in each case.

In the event of material changes, we will draw attention to the updated version in an appropriate manner.