Privacy policy

Last updated: November 3, 2026

This privacy policy explains what personal data Melvua collects when you visit our website, sign up to our email list or order from us, what we use it for and what rights you have.

Controller

Melvua, operated by Dylan Chanon Johner (sole proprietorship), Weinbergstrasse 4, 6330 Cham, Switzerland. Contact for privacy questions: info@melvua.com.

What data we collect

  • Email list: your email address when you sign up, plus basic information on whether our emails are opened.
  • Contact and order data: name, email address, delivery and billing address, phone number (if provided) and what you ordered.
  • Payment data: processed by our payment providers. We never see or store your full card number.
  • Messages: what you write to us by email or through a contact form. If you send a return request, we use the details you enter and any photos you attach only to handle it. The form is delivered to us as an email through the service FormSubmit.
  • Photos for the satisfaction guarantee: if you request a refund under our satisfaction guarantee, you send us a before photo and an after photo of your skin together with your order number. We use these photos only to check your request and do not publish them or pass them on for other purposes. Please only send the part of the image that is needed.
  • Technical data: device, browser, IP address and how you use the website, collected through cookies.

Please do not send us health data, for example about skin conditions, unless it is truly necessary to answer your question.

What we use your data for and on what basis

  • Newsletter and news about the launch: your consent, which you can withdraw at any time using the unsubscribe link in every email.
  • Processing and delivering your order, taking payment, supporting you and handling the satisfaction guarantee: performance of our contract with you.
  • Record keeping, taxes and accounting: legal obligation.
  • Protecting the website, preventing fraud and misuse: our legitimate interest.
  • Understanding and improving the website: our legitimate interest or your consent, where the law requires it.

Cookies

We use cookies and similar technologies. Necessary cookies make the website and shop work, for example for the cart, language setting and security. We only set cookies for statistics and marketing if you agree when you enter the website. You can change your choice at any time via "Cookie settings" in the footer. You can also block or delete cookies in your browser. Some features of the website may then not be available.

How long we keep data

  • Email list: until you unsubscribe.
  • Order, payment and invoice data: as long as the law requires, up to 10 years for accounting.
  • Messages: as long as needed to handle your request.
  • Photos for the satisfaction guarantee: until your request has been handled. We then delete them.

Who we share data with

Only with service providers who work for us: our store and hosting platform (Shopify), payment providers, the suppliers and shipping partners who deliver your order, email delivery and, if enabled, analytics tools. We also share data where the law requires it or to protect our rights. We do not sell your personal data.

Disclosure abroad

We are based in Switzerland. Our service providers may process your data in Switzerland, in the EU and EEA, in the United States and in other countries where they operate. Where necessary, we rely on adequacy decisions or standard contractual clauses so that your data stays protected.

Your rights

Depending on where you live, you can request access to your data, have it corrected or deleted, receive a copy, restrict or object to its processing and withdraw consent at any time. Write to info@melvua.com. We reply within one month.

  • Switzerland, EU and United Kingdom: you can also complain to your data protection authority, for example the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland.
  • USA (for example California): you can ask what data we hold, request its deletion or correction and object to its sale or sharing. We do not sell personal data. We respect the Global Privacy Control signal.
  • Other countries: you have the rights your local law gives you. Contact us and we will gladly help.

Children

Our website is intended for people aged 18 and over. We do not knowingly collect data from younger people. If you believe a child has sent us data, let us know and we will delete it.

Security

We take appropriate technical and organisational measures. No system is completely secure, so please do not send us confidential information.

Changes

We may update this privacy policy. The date above shows the current version. We will inform you of material changes where the law requires it.

Contact

info@melvua.com