Privacy policy

Last updated: July 12, 2026

Green Passion runs this shop and website, including all related information, content, features, tools, products, and services, to give you a personalized shopping experience (the “Services”). Green Passion is powered by Shopify, which lets us provide you with the Services. This privacy policy explains how we collect, use, or share personal data when you visit, use the website, make a purchase or other transaction using the Services, or otherwise communicate with us. If there’s a conflict between our general terms and this privacy policy, this privacy policy takes priority when it comes to collecting, processing, and sharing your personal data.

Please read this privacy policy carefully. By using or accessing any of the Services, you confirm that you’ve read this privacy policy and agree to the collection, use, and sharing of your data as described here.

What personal data do we collect or process?

When we say “personal data,” we mean information that identifies you or another person, or that can be directly linked to you. Personal data doesn’t include info that’s collected anonymously or anonymized so that it can’t be linked back to you. Depending on how you interact with the Services, where you live, and what the law allows or requires, we may collect or process the following categories of personal data, including insights drawn from this data:

Contact details including name, mailing address, billing address, shipping address, phone number, and email address.
Financial data including credit, debit card and bank account numbers, payment card info, bank account details, transaction details, payment method, payment confirmation, and other payment info.
Account info like username, password, security questions, configurations, and settings.
Transaction info including items you view, add to cart, add to wishlist, buy, return, exchange, or cancel, as well as your past transactions.
Communication with us including info you provide when you contact us, like when you send a request to customer support.
Device info including details about your device, browser, or network connection, IP address, and other unique identifiers.
Usage info including information about how you interact with the Services, like how and when you use or browse them.

Sources of personal data

We may collect personal data from the following sources:

Directly from you We collect data when you create an account, access or use the Services, communicate with us, or otherwise provide us with your personal data.
Automatically through the Services We collect data from your device or when you use our products or Services or visit our website, as well as through the use of Cookies and similar technologies.
From our service providers We collect data when we engage service providers to enable certain technologies, and when they collect or process your personal data on our behalf.
From our partners and other third parties

How do we use your personal data?

Depending on how you interact with us or which Services you use, we may use personal data for the following purposes:

Providing, customizing, and improving the Services. We use your personal data to give you the Services. This includes fulfilling our contract with you, processing your payments, handling your orders, saving your settings and items you’re interested in, sending you notifications related to your account, creating, maintaining, and managing your account, organizing shipping, making returns and exchanges easier, letting you leave reviews, and creating a personalized shopping experience for you—like recommending products based on your purchases. This may also include using your personal data to better customize and improve the Services.
Marketing and advertising. We use your personal data for marketing and advertising, like sending you marketing and promotional messages by email, SMS, or mail, and showing you ads for products or services for the Services or other websites—based on items you’ve bought or added to your cart before, and other activity related to the Services.
Security and fraud prevention. We use your personal data to authenticate your account, provide a secure payment and shopping experience, detect, investigate, or act on possible fraudulent, illegal, unsafe, or malicious activity, protect public safety, and keep our Services secure. If you choose to use the Services and register an account, you’re responsible for keeping your login details safe. We strongly recommend you don’t share your username, password, or other access info with anyone else.
Communicating with you. We use your personal data to provide you with customer support and effective Services, respond to your requests quickly, and maintain our business relationship with you.
Legal reasons. We use your personal data to comply with applicable law or to res

to respond to regular legal procedures, including requests from law enforcement or regulatory authorities, to investigate or participate in civil investigations, potential or actual legal disputes, or other adversarial proceedings, and to investigate or enforce potential violations of our terms or policies.

How do we share personal data?

In certain situations, we may share your personal data with third parties for legitimate purposes as described in this privacy policy. Such situations may include:

For Shopify, this includes providers and other third parties who deliver services on our behalf (like IT management, payment processing, data analysis, customer support, cloud storage, fulfillment, and shipping).
We share personal data with business and marketing partners who provide marketing services for you and show you ads. For example, we use Shopify to support personalized ads with third-party services based on your online activity across different shops and websites. Our business and marketing partners use your data according to their own privacy policies. Depending on where you live, you might have the right to tell us not to share your information for targeted advertising and marketing based on your online activity across different shops and websites.
If you ask us or otherwise give your consent to share certain information with third parties, for example to deliver products to you, or if you use social media widgets or login integrations.
We share personal data with our affiliates or otherwise within our corporate group.
In connection with a business transaction like a merger or bankruptcy, to comply with applicable legal obligations (including responding to subpoenas, search warrants, and similar requests), to enforce applicable terms of service or policies, and to protect or defend the services, our rights, and the rights of our users or others.

Relationship with Shopify

The services are hosted by Shopify, and Shopify collects and processes personal data about your access to and use of the services to provide and improve the services for you. Data you submit to the services is shared with Shopify and with third parties, who may be located in countries other than where you live, to provide and improve the services for you. To protect, grow, and improve our business, we also use certain advanced Shopify features that include data and information from your interactions with our shop, with other merchants, and with Shopify. To provide these advanced features, Shopify may use personal data collected from your interactions with our shop, other merchants, and Shopify. In these cases, Shopify is responsible for processing your personal data, including responding to your requests to exercise your rights regarding the use of your personal data for these purposes. For more information on how Shopify uses your personal data and what rights you have, check out the Shopify Consumer Privacy Policy. Depending on where you live, you can exercise certain rights regarding your personal data listed here Link to the Shopify Privacy Portal.

Third-party websites and links

The services may provide links to websites or other online platforms operated by third parties. If you follow links to websites that aren't affiliate sites or controlled by us, you should review their privacy and security policies and other terms and conditions. We don't guarantee and aren't responsible for the privacy or security of such websites, including the accuracy, completeness, or reliability of information found on those sites. Information you provide in public or semi-public areas, including what you share on third-party social networking platforms, may also be seen by other users of the services and/or users of those third-party platforms, without restrictions on their use by us or by a third party. Including such links doesn't mean we endorse the content of those platforms or their owners or operators, unless this is explicitly stated in the services.

Children's data

The services aren't intended for use by children, and we don't knowingly collect personal data from children who aren't of legal age in your country. If you're the parent or guardian of a child who has given us their personal data, you can contact us using the contact details below to request deletion of that data. As of the effective date of this privacy policy, we aren't aware of sharing or "selling" personal data of anyone under 16 years old (as those terms are defined by applicable law).

Security and retention of your data

Please note that no security measures are perfect or impenetrable, so we can't guarantee "perfect security." Also, information you send to us may be at risk during transmission. We recommend you don't use insecure channels to send us sensitive or confidential information.

How long we keep your personal data depends on several factors. For example, whether we need the data to manage your account, provide you with services, or meet legal obligations,

to resolve disputes or enforce other applicable agreements and policies.

Your Rights and Choices

Depending on where you live, you may have some or all of the rights listed below regarding your personal data. However, these rights are not absolute, may only apply in certain circumstances, and in some cases we may deny your request as permitted by law.

Right to Access. You may have the right to request access to the personal data we hold about you.
Right to Deletion. You may have the right to ask us to delete the personal data we have about you.
Right to Correction. You may have the right to ask us to correct inaccurate personal data we hold about you.
Right to Data Portability. You may have the right to get a copy of your personal data that we hold and to ask us to share it with a third party in certain situations and with certain exceptions.
Managing communication preferences. We may send you promotional emails. You can opt out of receiving these emails at any time by using the unsubscribe option included in our emails. If you opt out, we may still send you non-promotional emails, such as those about your account or orders you've placed.

If you live in the United Kingdom or the European Economic Area, you may, subject to local law exceptions and restrictions, have the following rights in addition to those listed above:

Right to object and right to restrict processing. You may have the right to ask us to stop or restrict processing your personal data for certain purposes.
Withdrawal of consent. If we rely on your consent to process your personal data, you have the right to withdraw that consent. If you withdraw your consent, it won't affect the lawfulness of processing based on your consent before you withdrew it.

You can exercise these rights where indicated in the Services, or by contacting us using the contact details below. For more information about how Shopify uses your personal data and what rights you have, including rights regarding data processed by Shopify, visit https://privacy.shopify.com/en.

Exercising these rights won't put you at any disadvantage. Where permitted or required by law, we may need to verify your identity before processing your requests. In accordance with applicable law, you can appoint an agent to make requests to exercise your rights on your behalf. Before accepting such a request from an agent, we will require proof that you have authorized them to act for you. You may also need to confirm your identity directly with us. We will respond to your request promptly as required by law.

Complaints

If you have complaints about how we handle your personal data, please contact us using the contact details below. Depending on where you live, you have the right to appeal our decision by contacting us at the details below or by filing a complaint with the relevant data protection authority. For the European Economic Area, there is a list of the relevant data protection supervisory authorities. If you want to access it, you can do so here.

International Transfers

Please note that we may transfer, store, and process your personal data outside the country where you live.

If we transfer your personal data outside the European Economic Area or the United Kingdom, we rely on recognized transfer mechanisms such as the European Commission’s Standard Contractual Clauses or equivalent contracts issued by the relevant UK authority, unless the data is transferred to a country that is recognized as providing adequate protection.

Changes to this Privacy Policy

We may update this privacy policy from time to time, for example to reflect changes in our practices or for other operational, legal, or regulatory reasons. We pub

we publish the revised Privacy Policy on this website, update the "Last Revised" date accordingly, and provide any notifications required by law.

Contact

If you have any questions about our privacy practices or this Privacy Policy, or if you want to exercise any of your rights, just give us a call at +41 43 543 33 82, email us at caspar@greenpassion.ch or send us a letter at Wehntalerstrasse 6, 8154 Oberglatt, Switzerland. Under applicable data protection laws, we are the data controller for your personal data.