Privacy policy

Last updated: 7 November 2026

This policy explains how Créateur Olfactif 1925 Sàrl (“Créateur Olfactif”, “we”, “us”) handles personal data when you visit createurolfactif.com, buy from us, join Club 1925 or write to us.

Who is responsible

Créateur Olfactif 1925 Sàrl
Ruelle du Midi 3, 1207 Genève, Switzerland
UID CHE-175.443.132
Email: bonjour@createurolfactif.com

We are the controller of your personal data. We have not appointed a data protection officer: please send any privacy question or request to the email address above.

Which law applies

We process personal data in line with the Swiss Federal Act on Data Protection (FADP). Where we offer our perfumes to people in the European Economic Area (EEA) or the United Kingdom, the EU General Data Protection Regulation (GDPR) and the UK GDPR also apply, and you have the rights they give you.

What we collect

When you browse the site: information about your device and your visit, such as IP address, browser and device type, language, the pages you view, the items you add to your bag, and the date and time. Shopify collects this for us, partly through cookies (see “Cookies” below).

When you order: your name, email address, delivery and billing addresses, phone number (if you give it), the items ordered, prices, taxes, discount and credit codes, and what happens to the order afterwards (delivery, return, withdrawal, refund).

When you pay: payment is handled by Shopify and its payment providers. We see the payment method, the last four digits of a card and whether the payment went through. We never see your full card number.

If you use a customer account: your email address and the details saved in the account, such as addresses and past orders.

When you join Club 1925: your email address, your first and last name if you give them, and when and where you signed up.

When you write to us: your name, email address, order number and what you tell us. This includes messages sent with our withdrawal form.

When you buy a gift voucher: the recipient’s name and email address and your message, so that we can send the voucher.

The Perfume Finder: your answers and the perfume suggested. If you order, they are saved with your order. If you ask for your result by email, we also receive your email address.

Content creators: if you work with us as a member of the Inner Circle, we keep your contact details, your public profile and what we agree with you.

Why we use it, and on what legal basis

• To sell and deliver your order: taking payment, delivery, returns, withdrawals, refunds, Discovery Set credit codes, and order and delivery emails. Legal basis: our contract with you (GDPR Art. 6(1)(b)).
• To keep accounting and tax records and meet our other legal duties. Legal basis: legal obligation (Art. 6(1)(c)).
• To answer your messages. Legal basis: our contract with you, or our legitimate interest in answering you (Art. 6(1)(b) or (f)).
• To send the Club 1925 letter and other news by email. Legal basis: your consent (Art. 6(1)(a)). Every email has an unsubscribe link. Our emails may reflect your visits to the shop, for example a reminder of a perfume left in your bag. They tell us whether they were opened and which links were clicked, so that we know what interests our readers.
• To suggest a perfume, send the result you ask for and improve the Perfume Finder. Legal basis: your request (Art. 6(1)(b)) and our legitimate interest (Art. 6(1)(f)); in the EEA and the UK, Google Analytics is used only with your consent (Art. 6(1)(a)).
• To run, secure and improve the site: keeping it working, preventing fraud and measuring visits with Shopify’s analytics. Legal basis: our legitimate interest in a safe shop that works well (Art. 6(1)(f)). In the EEA and the UK, cookies that are not strictly necessary are used only with your consent (Art. 6(1)(a)).
• To work with content creators. Legal basis: our agreement with you, or our legitimate interest in working together (Art. 6(1)(b) or (f)).
• To establish, exercise or defend legal claims. Legal basis: legitimate interest (Art. 6(1)(f)).

Shopify checks orders for signs of fraud. If an order is flagged, a person at Créateur Olfactif decides what happens to it; we do not take decisions about you based solely on automated processing. Payment providers may decline a payment after their own automated checks.

Cookies

The site uses cookies and similar technologies set by Shopify. Some are needed for the shop to work (your bag, checkout, security and your cookie choice). Others measure visits (analytics) or remember your interest in our products (marketing). Shopify lists each cookie, what it does and how long it lasts: Shopify’s storefront cookies.

Through Shopify, our email provider Klaviyo also receives information about your visits: the pages and products you view, the items you add to your bag and the checkouts you start. It can link this to your email address if you have given it to us.

Visitors in the EEA and the UK see a cookie banner: cookies that are not strictly necessary, and the sharing with Klaviyo, happen only if you accept them. To change your choice later, clear this site’s cookies in your browser and the banner will ask you again. In Switzerland, where no banner is shown, they are used unless you block cookies in your browser or tell us that you object. Wherever you are, you can block or delete cookies in your browser settings; parts of the shop may then not work.

We also use Google Analytics to measure visits and the use of the Perfume Finder, within the same cookie choice. We do not currently use advertising tags from Meta, Google or TikTok on this site.

Who receives your data

We share personal data only as far as each recipient needs it:

• Shopify (Shopify International Limited, Dublin, Ireland, and other Shopify group companies, including Shopify Inc. in Canada) hosts the shop, the checkout, customer accounts, analytics and our order emails.
• Payment providers: Shopify Payments and the payment processors Shopify works with (see Shopify’s list of payment processors); PayPal, if you pay with PayPal; Shopify, Apple or Google, if you pay with Shop Pay, Apple Pay or Google Pay. Payment providers also process your data for their own purposes, as set out in their privacy policies.
• Klaviyo, Inc. (United States) and Shopify’s own email service send the Club 1925 letter and other emails. Klaviyo also receives information about your visits (see “Cookies” above).
• Google (Google Workspace) hosts our email, so it holds the messages you send us. Google Analytics (Google Ireland Limited and Google LLC) measures visits and the use of the Perfume Finder.
• Logistics partners and carriers that pack and deliver your order receive your name, delivery address, phone number and email address for delivery updates.
• Authorities and advisers: customs and tax authorities, courts and our accountants or lawyers, where the law requires it or to defend our rights.
• A buyer or successor, if all or part of our business is sold or merged.

We do not sell your personal data.

Shopify

Our shop is hosted by Shopify, which collects and processes personal data about your access to and use of the shop in order to provide and improve it. To help protect, grow and improve our business, we also use certain Shopify enhanced features that combine information from your interactions with our shop with information from other merchants and from Shopify. For these features, Shopify is responsible for the processing of your personal data, including for responding to your requests to exercise your rights over that use. To learn more, read the Shopify Consumer Privacy Policy. You can exercise your rights with Shopify through the Shopify Privacy Portal.

Data outside Switzerland

Some recipients process data outside Switzerland, mainly in the EEA, the United Kingdom, Canada and the United States; payment providers may also process data in other countries. Switzerland recognises the EEA, the United Kingdom and Canada as providing adequate protection, and the EU and the UK recognise Switzerland and Canada.

For the United States and any other country without such recognition, we rely on the recipient’s certification under the Swiss-U.S. Data Privacy Framework, the EU-U.S. Data Privacy Framework or its UK Extension, or on the European Commission’s standard contractual clauses, with the adjustments required by Swiss and UK law. Shopify transfers data within its group under its Binding Corporate Rules. You can ask us for information on the safeguards that apply.

How long we keep it

• Orders, invoices, payment and refund records and the correspondence that goes with them: 10 years from the end of the financial year, as Swiss accounting law requires (Art. 958f Code of Obligations).
• Customer account: until you ask us to close it. Orders placed through it are kept as above.
• Club 1925: until you unsubscribe. We then keep your email address on a do-not-contact list so that we respect your choice.
• Other messages to us: up to 2 years after the matter is settled.
• Inner Circle: for as long as we work together, and up to 2 years after.
• Perfume Finder: answers saved with an order, as long as the order; a result sent by email, for up to 10 years or until you ask us to delete it; Google Analytics, up to 14 months.
• Cookies: as stated in Shopify’s cookie list.

We keep data longer only where the law requires it or to deal with a dispute.

Your rights

You can ask us:

• whether we hold data about you, and for a copy of it (access);
• to correct data that is wrong or incomplete;
• to delete your data or stop processing it;
• to give you the data you provided in a common electronic format, or send it to another company (portability);
• to restrict how we use your data (EEA and UK);
• to stop processing based on our legitimate interests; you can object to direct marketing at any time, without giving a reason;
• to withdraw your consent at any time. This does not affect what we did before.

Write to bonjour@createurolfactif.com. We answer within 30 days and may ask you to confirm your identity first. Some rights have limits: for example, we must keep order records for as long as the law requires.

Complaints

Please tell us first, and we will do our best to put things right. You can also complain to a data protection authority:

• Switzerland: the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, edoeb.admin.ch;
• EEA: the authority in the country where you live or work (list of authorities);
• United Kingdom: the Information Commissioner’s Office, ico.org.uk.

Security

The site uses an encrypted connection, and Shopify’s checkout meets the PCI DSS standard for card payments. Only the people who need your data for their work at Créateur Olfactif can see it. No system is completely secure, so please do not send card numbers or passwords by email.

Children

Our site is not meant for children under 16, and we do not knowingly collect their data. If you think a child has given us personal data, write to us and we will delete it.

Other websites

Links to social networks and other websites take you to services we do not control. Their own privacy policies apply.

Changes to this policy

We may update this policy, for example when we start using a new service. The date at the top shows the current version. Where the law requires it, we will tell you about important changes.