Privacy policy
Last updated: 21 October 2026
1. Introduction
MABUYA by Carina Baldi operates this online store and website, including its related information, content, features, tools, products and services (collectively, the “Services”).
Our online store is powered by Shopify, which provides the e-commerce infrastructure through which we offer our products and services.
This Privacy Policy explains how we collect, use, process, store and disclose personal information when you visit our website, make a purchase, communicate with us or otherwise interact with our Services.
We are committed to handling your personal information responsibly, transparently and in accordance with applicable data protection laws, including the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR) and UK data protection legislation.
If there is any conflict between our Terms of Service and this Privacy Policy concerning the processing of personal information, this Privacy Policy shall prevail.
2. Personal Information We Collect
Personal information refers to information that identifies, relates to or can reasonably be associated with an identifiable individual.
Depending on how you interact with our Services, we may collect and process the following categories of information:
- Contact information: Name, email address, telephone number, billing address and shipping address.
- Payment and transaction information: Payment method, payment confirmation, transaction details, purchases, returns, exchanges and order history. Payments are processed through third-party payment service providers.
- Account information: Account credentials, preferences and settings, where customer accounts are used.
- Shopping information: Products viewed, items added to your cart or wishlist, and interactions with our collections.
- Communications: Information you provide when contacting us by email, telephone, contact forms or other communication channels.
- Technical information: IP address, browser type, device information, operating system and technical identifiers.
- Usage information: Information about how you access, browse and interact with our website and Services.
We process personal information only to the extent necessary for the purposes described in this Privacy Policy or as otherwise permitted by applicable law.
3. Sources of Personal Information
We may collect personal information:
- Directly from you when you place an order, create an account, subscribe to communications or contact us.
- Automatically when you interact with our website, including through cookies and similar technologies.
- From service providers that assist with payments, delivery, website operations, analytics and customer support.
- From business, advertising and technology partners where permitted by applicable law.
4. How We Use Your Personal Information
We may process personal information for the following purposes.
Providing Our Services
To process and fulfil orders, accept payments, arrange delivery, manage returns and exchanges, provide customer support and maintain customer accounts.
Improving the Shopping Experience
To understand how customers interact with our website, improve its functionality, remember preferences and provide relevant product information or recommendations.
Marketing and Communications
To send newsletters, product announcements, invitations and promotional communications where you have subscribed or where otherwise permitted by applicable law.
You may unsubscribe from marketing emails at any time using the unsubscribe link included in those communications.
Security and Fraud Prevention
To protect our website, customers and business against fraud, unauthorized access, misuse and other unlawful activities.
Legal and Regulatory Compliance
To fulfil applicable legal obligations, maintain required business records, respond to lawful requests and establish, exercise or defend legal claims.
5. Legal Bases for Processing
Where the GDPR or UK GDPR applies, we rely on one or more of the following legal bases:
- Performance of a contract: Processing necessary to complete purchases, payments, deliveries, returns and related customer services.
- Legal obligations: Processing required to comply with applicable laws and regulations.
- Legitimate interests: Processing necessary for the secure and effective operation of our business, fraud prevention, customer support and service improvements, provided those interests are not overridden by your rights.
- Consent: Where required for marketing communications, non-essential cookies or other processing activities.
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing lawfully carried out before consent was withdrawn.
For processing governed by Swiss law, we comply with the applicable requirements of the Swiss FADP.
6. Sharing Personal Information
We may disclose personal information to third parties where necessary to operate our Services, fulfil contractual obligations or comply with applicable law.
These recipients may include:
- Shopify, which provides our e-commerce platform and related services.
- Payment service providers, which securely process transactions and payment-related information.
- Shipping and fulfilment providers, which assist with preparing and delivering orders.
- Technology and hosting providers, which support the operation, maintenance and security of our website.
- Analytics and advertising partners, where their services are used and the processing is permitted by applicable law.
- Professional advisers and public authorities, where necessary to fulfil legal obligations or protect legitimate legal interests.
We may also disclose information where you specifically authorize us to do so or where disclosure is required in connection with a lawful business transaction.
We take reasonable steps to ensure that service providers handle personal information appropriately and in accordance with applicable data protection requirements.
7. Relationship with Shopify
Our online store is hosted and powered by Shopify.
Shopify processes certain personal information to provide the technology and services necessary for our online store, including checkout, payments, order management, security and other e-commerce functions.
Depending on the service and processing activity, Shopify may act as a data processor or an independent data controller.
Personal information may be processed by Shopify and its authorized service providers in countries outside your country of residence.
For more information about Shopify's processing of personal information, please consult Shopify's Consumer Privacy Policy and Privacy Portal.
8. Cookies and Similar Technologies
We use cookies and similar technologies to operate our website, remember preferences, understand website performance and, where applicable, support marketing activities.
These technologies may include cookies, pixels, tags and other tracking tools.
The categories of cookies that may be used include:
Strictly necessary cookies
These support essential website functions, including shopping carts, checkout, payment processing, security and account access.
Functional cookies
These remember preferences such as language choices and other website settings.
Analytics and performance cookies
These help us understand how visitors use our website and identify opportunities to improve its performance and usability.
Advertising and marketing cookies
These may help us measure advertising effectiveness and display relevant promotional content.
Where required by applicable law, we obtain consent before using non-essential cookies or tracking technologies.
You may manage or withdraw your cookie preferences through the available cookie settings or browser controls.
Disabling certain cookies may affect the functionality of parts of our website.
9. Third-Party Websites and Links
Our website may contain links to external websites, applications or social media platforms.
These services are operated independently and may have their own privacy policies and data-processing practices.
We are not responsible for the privacy practices or content of third-party websites. We encourage you to review their policies before providing personal information.
10. Children's Personal Information
Our Services are not directed at children, and we do not knowingly collect personal information from children without an appropriate legal basis or authorization.
If you are a parent or legal guardian and believe that a child has provided personal information to us without appropriate authorization, please contact us.
Where required, we will take appropriate steps to delete or otherwise address such information in accordance with applicable law.
11. Security of Personal Information
We take reasonable technical, administrative and organizational measures to protect personal information against unauthorized access, loss, misuse, alteration and disclosure.
These measures include using established e-commerce and payment service providers and restricting access to information where appropriate.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
We encourage customers to use secure methods when communicating sensitive information.
12. Retention of Personal Information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or as required by applicable law.
Retention periods depend on the nature of the information and the relevant contractual, accounting, tax, regulatory or operational requirements.
For example, transaction and accounting records may need to be retained for statutory periods, while marketing information may be retained until you unsubscribe or withdraw consent, subject to applicable requirements.
Where information is no longer necessary, we take reasonable steps to delete, anonymize or otherwise dispose of it securely.
13. Your Privacy Rights
Depending on your location and applicable law, you may have the right to:
- Request access to personal information we hold about you.
- Request correction of inaccurate or incomplete information.
- Request deletion of personal information where legally permitted.
- Request restriction of certain processing activities.
- Object to certain processing, including processing for direct marketing.
- Request data portability where applicable.
- Withdraw consent where processing is based on consent.
- Unsubscribe from marketing communications.
These rights may be subject to legal limitations, including obligations to retain certain business or transaction records.
To exercise your rights, please contact us using the details provided below.
We may request reasonable verification of your identity before processing a request.
14. International Transfers of Personal Information
Because we use international technology and service providers, including Shopify, personal information may be transferred to or processed in countries outside Switzerland, the European Economic Area or the United Kingdom.
Where applicable law requires safeguards for international transfers, we rely on appropriate legal mechanisms, which may include adequacy decisions, contractual safeguards or other recognized transfer arrangements.
These arrangements are intended to provide an appropriate level of protection for personal information transferred internationally.
15. Complaints
If you have concerns about how we process your personal information, we encourage you to contact us first so that we can review and address your concerns.
You may also have the right to lodge a complaint with the relevant data protection supervisory authority.
In Switzerland, the competent federal authority is the Federal Data Protection and Information Commissioner (FDPIC).
Residents of the European Economic Area or the United Kingdom may contact the relevant supervisory authority in their jurisdiction, where applicable.
16. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our business practices, technology, services or applicable legal requirements.
Any revised version will be published on our website with an updated revision date.
Where required by applicable law, we will provide additional notice of material changes.
17. Contact and Data Controller
For questions about this Privacy Policy, our handling of personal information or requests relating to your privacy rights, please contact:
MABUYA by Carina Baldi
Güterstrasse 164
4053 Basel
Switzerland
Commercial Register: Basel-Stadt, Switzerland
Registration number: CH-270.1.021.183-9
Email: info@mabuya.ch
Customer Service (English): +41 61 363 11 12
Wednesday–Friday, 12:00–18:00
Excluding public holidays
For the purposes of applicable data protection legislation, MABUYA by Carina Baldi is the data controller responsible for the processing of personal information described in this Privacy Policy.