Welcome to our website. Would you like to stay up to date on sales and new products?
Get 10% discount

Fabulous

Privacy Policy

Privacy Notice

fabulous! Vegan Shop GmbH

The protection of your personal data is important to us. This Privacy Notice informs you about which personal data we collect, for which purposes we process it, to whom we disclose data, how long we store data and which rights you have.

This Privacy Notice is based on the Swiss Federal Act on Data Protection (FADP).

1. Controller

The controller responsible for data processing is:

fabulous! Vegan Shop GmbH
Oberebenestrasse 21
5620 Bremgarten
Switzerland

E-mail: info@fabulous.ch
Telephone: +41 56 640 21 05
Website: https://fabulous.ch

2. Which personal data we process

We process personal data that you provide to us yourself, that is technically generated when you visit our website, or that arises in connection with orders, payments, deliveries, customer accounts, newsletters or customer communication.

This includes in particular:

  • First name and last name
  • Billing and delivery address
  • E-mail address
  • Telephone number
  • Customer account and login data
  • Order and product data
  • Payment and transaction information
  • Delivery and shipping information
  • Communication content, e.g. enquiries, messages or notes
  • Newsletter registrations and newsletter usage data
  • technical data such as IP address, browser, device type, operating system, date and time of access
  • Cookie and tracking information, insofar as such technologies are used

We process only those personal data that are required for the respective purpose or that you voluntarily provide to us.

3. Purposes of data processing

We process personal data in particular for the following purposes:

  • Operation and technical provision of our website and our online shop
  • Processing enquiries and customer communication
  • Creating and managing customer accounts
  • Processing orders and deliveries
  • Payment processing
  • Credit checks, debt collection and receivables management, where required
  • Customer service and support
  • Management of customer relationships in our CRM system
  • Sending newsletters and marketing information
  • Analysis and optimisation of our website and offers
  • Measurement and optimisation of online marketing campaigns
  • Displaying relevant advertising and remarketing, where permitted
  • Fraud prevention, security and combating misuse
  • Compliance with legal obligations, in particular commercial and tax-law retention obligations
  • Safeguarding our legitimate business interests

4. Legal bases under Swiss data protection law

We process personal data insofar as this is permitted under the Swiss Federal Act on Data Protection. Processing takes place in particular where it is necessary for the performance of a contract or for taking pre-contractual measures, where a legal obligation exists, where you have given your consent, or where we have an overriding legitimate interest in the processing.

An overriding legitimate interest exists in particular in the secure and economically viable operation of our online shop, customer service, the optimisation of our offers, direct marketing to existing customers, and the prevention of misuse and fraud.

Where processing is based on your consent, you may withdraw this consent at any time with effect for the future.

5. Automatically collected data when visiting the website

When you visit our website, technical data that are required for the operation, security and optimisation of the website are collected automatically. This includes in particular:

  • IP address
  • Date and time of access
  • Pages and files accessed
  • Referrer URL
  • Browser type and browser version
  • Operating system
  • Device type
  • Amount of data transferred
  • HTTP status code

These data are used for the technical provision of the website, error analysis, IT security and the prevention of misuse.

6. Customer account and user registration

If you create a customer account, we process the data required for this purpose. This includes in particular your name, e-mail address, billing and delivery address, telephone number, login data and information about orders and product purchases.

The customer account is used to process orders more easily, display order histories, manage customer data and enable you to use our online shop conveniently.

You may request the deletion of your customer account, provided that no statutory retention obligations or legitimate interests prevent this.

7. Orders in the online shop

If you place an order in our online shop, we process the data required to handle the order. This includes in particular:

  • First name and last name
  • Billing and delivery address
  • E-mail address
  • Telephone number
  • Products ordered
  • Order date
  • Payment method
  • Payment status
  • Shipping and delivery information
  • any customer comments or internal notes regarding the order

We need these data to perform the contract, deliver the ordered products, process payments, communicate with customers and comply with statutory retention obligations.

Our online shop is based on an in-house development and is operated technically via the infrastructure we use.

8. Payment processing

For the secure processing of online payments, we work together with external payment service providers. Depending on the selected payment method, the data required for payment processing are transmitted to the respective payment service provider.

This may include in particular name, billing address, e-mail address, order amount, payment method, transaction data, payment status and technical payment information.

Saferpay / Worldline

We use Saferpay, a payment solution from Worldline, to process various payment methods. Saferpay can be used to process payments with, among others, Visa, Mastercard, Maestro, TWINT and PostFinance Pay.

When a payment is made via Saferpay, the data required for payment processing are transmitted to Worldline and/or to the participating payment providers, banks, card organisations or payment networks. Processing takes place in order to carry out the selected payment method, confirm the payment, prevent fraud and securely process the transaction.

We do not store complete credit card data ourselves where such data are processed directly by the payment service provider. As a rule, we receive only information about the payment status, the transaction and the allocation of the payment to the order.

PayPal

If you choose PayPal as a payment method, the data required for payment processing are transmitted to PayPal. PayPal processes these data under its own responsibility in accordance with its own privacy provisions.

The processed data may include in particular name, e-mail address, billing address, delivery address, order amount, transaction data and payment status.

9. Credit checks and debt collection with Intrum

Where this is required for certain payment methods, to check solvency, to avoid payment defaults or for receivables management, we may transmit personal data to Intrum.

This may include in particular name, address, e-mail address, telephone number, order data, invoice amount, payment status, outstanding receivables and other information required for the credit check or debt collection.

Processing takes place for the review and processing of certain payment methods, the prevention of payment defaults, the enforcement of legitimate claims and compliance with contractual and legal obligations.

10. Delivery and shipping

For the delivery of orders, we pass on the data required for this purpose to shipping and logistics service providers. This includes in particular name, delivery address, e-mail address, telephone number, order or shipment number and delivery information.

We use DPD for parcel shipments. Letters and smaller shipments may be sent by A Mail / Swiss Post. Data are disclosed only insofar as this is required for delivery, shipment tracking, delivery notification or the handling of shipping enquiries.

11. Customer management / CRM

We use an internally operated CRM system to manage customer relationships, orders, enquiries, internal notes and marketing processes.

The CRM is hosted on servers of cloudscale.ch in Switzerland. Authorised shop employees have access to the data insofar as this is required for their respective tasks.

The following data in particular may be stored and processed in the CRM:

  • First name and last name
  • Address
  • E-mail address
  • Telephone number
  • Customer account information
  • Orders and product orders
  • Communication histories
  • Internal notes
  • Newsletter registrations and marketing information
  • Shipping and service data

The CRM is used internally and has interfaces with the online shop and, where applicable, with shipping processes. Newsletter registrations via forms or registrations may also be recorded in the CRM.

Where required for delivery, data from the CRM or shop system may be transmitted to shipping service providers such as DPD or Swiss Post. For the sending of newsletters, newsletter data may be exported from the CRM and transmitted to our newsletter system Brevo, for example via a CSV import.

Processing takes place for customer service, order processing, the efficient organisation of internal processes, contract performance and for marketing purposes, insofar as these are permitted, consent has been given or another suitable legal basis exists.

12. Newsletter and e-mail marketing with Brevo

You can subscribe to our newsletter in order to receive information about new products, promotions, offers and news from fabulous! Vegan Shop.

We use Brevo to send newsletters. The provider is Sendinblue SAS, France. Brevo is used to manage recipient lists, send newsletters and evaluate newsletter campaigns.

For the newsletter, we process in particular:

  • E-mail address
  • First name or name, if provided
  • Registration date
  • any consent and confirmation data
  • technical information relating to the registration
  • Information about openings and clicks, insofar as such evaluations are used

Newsletter registrations via our website or forms may initially be recorded in our CRM system. For sending, the corresponding newsletter data may then be transmitted to Brevo, for example via a CSV export and subsequent import into Brevo.

Newsletters may contain analysis functions. This enables us to recognise whether a newsletter was opened and which links were clicked. These evaluations help us to improve our content and make it more relevant.

Newsletters are generally sent on the basis of your consent. You can unsubscribe from the newsletter at any time using the unsubscribe link in the newsletter or by notifying us.

After you unsubscribe, we may store your e-mail address in a suppression list to ensure that you do not receive any further newsletters.

13. Cookies and similar technologies

Our website uses cookies and similar technologies. Cookies are small files that are stored on your device and contain certain information. They may be used for the technical operation of the website, convenience functions, statistics, analysis, marketing or external content.

We distinguish in particular between the following categories:

Technically necessary cookies

These cookies are required for the operation of the website and the online shop. They include, for example, cookies for the shopping cart, login, language settings, security and cookie settings.

Statistics and analytics cookies

These cookies help us understand how visitors use our website, which pages are accessed and where we can improve the website.

Marketing cookies

These cookies are used to make advertising more relevant, measure campaigns and enable remarketing functions.

External media and third-party content

These technologies may be used when content from external providers is embedded.

14. Consent management with CookieRobot

We use the consent management tool CookieRobot on our website. CookieRobot supports us in informing visitors about the use of cookies and similar technologies, obtaining consent and storing cookie settings.

When you first visit our website, you can use the cookie banner to specify which cookie categories you wish to consent to. Technically necessary cookies are required for the operation of the website. Statistics, marketing and external media services are activated only after your consent, where required.

You can change or withdraw your selection at any time via the cookie icon or the cookie settings on our website.

15. Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Ireland. Google Tag Manager is used to manage website tags, in particular for analytics and marketing services.

To our understanding, Google Tag Manager itself does not create user profiles and does not store cookies for analytics or marketing purposes. However, it enables other tags to be triggered, which may in turn process data. Such tags are activated only after corresponding consent, where required.

16. Google Analytics / GA4

We use Google Analytics 4 (GA4), a web analytics service provided by Google. Google Analytics helps us understand how visitors use our website, which content is relevant and how we can improve our online shop.

In this context, the following data in particular may be processed:

  • Pages accessed
  • Clicks and interactions
  • Approximate location information
  • Device type and browser information
  • Technical identifiers
  • Events such as purchases, shopping-cart actions or form interactions
  • IP address, whereby Google is intended to shorten it and/or not store it in full

Google Analytics is activated, where required, only after your consent via the cookie banner.

17. Google Ads, conversion tracking and remarketing

We use Google Ads to advertise our offers in Google Search and on other Google platforms. Conversion tracking and remarketing functions may be used in this context.

Conversion tracking helps us recognise whether users perform a desired action after clicking on an advertisement, for example making a purchase, submitting a form or subscribing to the newsletter.

Remarketing may be used to address visitors to our website again later with suitable advertisements. Cookies or similar technologies may be used for this purpose.

Google Ads, conversion tracking and remarketing are activated, where required, only after your consent. You can withdraw your consent at any time via the cookie settings.

18. Google Consent Mode

Where Google services such as Google Analytics or Google Ads are used, we use Google Consent Mode to technically transmit your cookie and tracking settings to Google.

Google Consent Mode helps control Google tags in accordance with your consent. Depending on the selected setting, analytics and marketing functions are activated, restricted or blocked.

19. Meta Pixel

We use the Meta Pixel of Meta Platforms Ireland Limited, Ireland, on our website. The Meta Pixel helps us measure the effectiveness of our advertising on Meta platforms, in particular Facebook and Instagram, and display our advertising in a more relevant way.

In this context, information about your visit to our website, pages accessed, clicks, technical device and browser information, IP address and events such as purchases, shopping-cart actions or form interactions may in particular be processed. This information may be linked to your Facebook or Instagram account if you are logged in to a Meta service.

The Meta Pixel is activated, where required, only after your consent via the cookie banner. You can withdraw your consent at any time via the cookie settings.

20. Social media and external links

Our website may contain links to our profiles on social networks such as Instagram or Facebook. If you click on such links, you leave our website and are taken to the respective platform. The respective provider is responsible for the data processing that takes place there.

We have no influence over which data these platforms process when you visit their pages. Please note the privacy information of the respective providers.

Where social media plugins, tracking pixels or similar technologies are used, we describe these in the relevant sections of this Privacy Notice. Such services are activated only after corresponding consent, where required.

21. Review functions and review tools

We may use review functions that allow customers to rate products or shopping experiences. In this context, in particular the name or display name, e-mail address, order reference, review content, date of the review and technical information may be processed.

If external review service providers are used for this purpose, the respective required data are transmitted to the relevant provider. Processing takes place to enable reviews, verify the authenticity of reviews, prevent misuse and improve our offer.

The specific provider will be added to this Privacy Notice as soon as the review tool is actively used.

22. Hosting and technical infrastructure

Our website, our online shop and the related systems are hosted on servers in Switzerland. The hosting provider is cloudscale.ch. The data are operated in a Swiss data centre.

During hosting, technical data may be processed that are required for the operation, security, maintenance and provision of our website and systems. This includes in particular server log data, IP addresses, technical access data and system logs.

23. Disclosure of personal data to third parties

We disclose personal data only where this is required for the respective purposes, where a legal obligation exists, where you have consented, or where we have a legitimate interest in doing so.

Recipients of personal data may include in particular:

  • Hosting and IT service providers such as cloudscale.ch
  • Shop and technical service providers
  • Payment service providers such as Saferpay/Worldline and PayPal
  • Banks, card providers and payment networks
  • Credit and debt collection service providers such as Intrum
  • Shipping service providers such as DPD and Swiss Post
  • Newsletter and e-mail marketing service providers such as Brevo
  • CRM, shop and marketing systems
  • Analytics and advertising service providers such as Google
  • Social media and advertising service providers such as Meta
  • Review service providers, insofar as corresponding tools are used
  • Accounting, fiduciary or tax service providers
  • Authorities, courts or other bodies, insofar as we are legally obliged to do so

Personal data are disclosed for marketing or advertising purposes only insofar as this is legally permitted, consent has been given or another suitable legal basis exists.

24. Disclosure of data abroad

Some of the service providers we use may also process personal data outside Switzerland, in particular in the EU, the EEA or the USA. This applies in particular to internationally active providers such as Google, Meta, PayPal, Brevo or other technical service providers.

If personal data are transferred to countries without an adequate level of data protection, we ensure that suitable safeguards are in place, for example recognised standard contractual clauses, certifications or other legally provided protective measures. Data are disclosed abroad only insofar as this is legally permitted.

25. Storage period

We store personal data only for as long as is required for the respective purposes, statutory retention obligations exist or legitimate interests justify further storage.

For business records, orders, invoices and accounting data, statutory retention obligations of 10 years generally apply.

As a rule, we store customer data in the CRM for as long as a customer relationship exists, a customer account is active, legal obligations exist or legitimate interests justify storage. Upon request, we will review deletion, provided that no statutory retention obligations or other legitimate reasons prevent this.

We store newsletter data until you unsubscribe or withdraw your consent. Data in suppression lists may continue to be stored to ensure that no unwanted newsletters are sent.

Technical log data are generally stored only for as long as this is required for operation, security, error analysis and prevention of misuse.

26. Data security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.

This includes in particular:

  • SSL/TLS encryption
  • Access restrictions
  • Role-based access rights
  • Regular updates and security measures
  • Backups
  • Technical monitoring of the systems
  • Careful selection of service providers
  • Internal confidentiality obligations

Despite all measures, data transmission on the internet can never be guaranteed to be entirely risk-free.

27. Rights of data subjects

Within the scope of applicable data protection law, you have in particular the following rights:

  • Information about the personal data processed by us
  • Rectification of incorrect or incomplete data
  • Deletion of personal data, provided that no statutory obligations or legitimate interests prevent this
  • Restriction or blocking of data processing
  • Objection to certain data processing activities
  • Withdrawal of consent given, with effect for the future
  • Disclosure or transfer of certain personal data, provided that the statutory requirements are met

To exercise your rights, you may contact us at info@fabulous.ch.

You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).

28. Amendments to this Privacy Notice

We may amend this Privacy Notice at any time, in particular if our data processing activities, tools used, legal requirements or technical processes change.

The current version published on our website applies in each case.

Version: July 2026