PRIVACY & DATA PROTECTION POLICY (GDPR) — Colibri Tribu
1. Who We Are (Data Controller)
Thiis website, www.colibritribu.com, is operated by:
Vani Angel Godly Inspiration Farbstrasse 19, 3792 Saanen, Switzerland Email: shopcolibritribu@gmail.com Phone: +41 772 801 494 / +33 780 303 588
As a Switzerland-based business, we process personal data primarily in accordance with the Swiss Federal Act on Data Protection (FADP). Because we also offer products to customers residing in the European Union, we additionally apply the standards of the EU General Data Protection Regulation (GDPR) to those transactions, so that all our customers — Swiss, EU, or international — benefit from the same high level of protection.
2. What Personal Data We Collect
Depending on how you interact with our website, we may collect:
-
Identity & contact data: name, email address, shipping/billing address, phone number
-
Order data: items purchased, order history, payment confirmation (we do not store full card details — this is processed by our secure payment provider)
-
Account/newsletter data: email address if you subscribe to our mailing list
-
Communication data: messages you send us via the contact form or email
-
Technical data: IP address, browser type, device information, and cookies collected automatically via Wix's website analytics
-
Marketing preferences: whether you have opted in or out of promotional emails
3. Legal Basis for Processing
We only process your personal data when we have a valid legal basis under GDPR Article 6:
Purpose Legal Basis
Processing and fulfilling your orderPerformance of a contract
Responding to enquiriesPerformance of a contract / Legitimate interest
Sending marketing emailsConsent (you can withdraw anytime)
Website analytics & performanceLegitimate interest / Consent (via cookie banner)
Complying with tax and accounting obligationsLegal obligation
Preventing fraudLegitimate interest
4. How We Use Your Data
We use your personal data to:
-
Process, prepare, and ship your orders
-
Communicate with you about your order status
-
Respond to questions or customer service requests
-
Send you newsletters or promotions, only if you have opted in
-
Improve our website and product offering
-
Comply with legal, tax, and accounting requirements
We do not sell or rent your personal data to third parties.
5. Who We Share Your Data With
To operate our store, we share limited data with trusted third-party service providers, strictly for the purposes stated:
-
Wix.com — our website and e-commerce hosting platform
-
Payment processors (e.g., Wix Payments, PayPal, Stripe, or similar) — to securely process your payment
-
Shipping carriers — to deliver your order
-
Email marketing service (if applicable, e.g., Wix Ascend/Mailchimp) — only if you subscribe to our newsletter
All third-party providers are required to process your data securely and in compliance with GDPR.
6. International Data Transfers
Some of our service providers (such as Wix) may process data outside the European Economic Area (EEA). In these cases, we ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses (SCCs) or an adequacy decision, to protect your data to EU standards.
7. Data Retention
We keep your personal data only as long as necessary for the purposes described above:
-
Order and invoice data: retained for the legally required period (generally up to 10 years in France for accounting/tax purposes)
-
Marketing data: retained until you unsubscribe or withdraw consent
-
Contact form enquiries: retained only as long as needed to resolve your request
-
8. Cookies
Our website uses cookies to ensure the site functions properly, remember your preferences, and analyze site traffic. You can manage your cookie preferences through the cookie consent banner displayed on your first visit, and adjust them at any time through your browser settings.
9. Your Rights Under GDPR
Under the FADP, and additionally under the GDPR for customers in the EU, you have the right to:
-
Access the personal data we hold about you
-
Rectify inaccurate or incomplete data
-
Request deletion of your data, where applicable
-
Object to or restrict certain processing
-
Data portability — receive your data in a structured, commonly used format (a right under both FADP and GDPR)
-
Withdraw consent at any time, where processing is based on consent (e.g., unsubscribing from our newsletter)
To exercise any of these rights, contact us at shopcolibritribu@gmail.com. We will respond within a reasonable time and, in any event, within the timeframes required by applicable law (generally 30 days).
10. Right to Lodge a Complaint
If you believe your data protection rights have been violated, you may lodge a complaint with the relevant supervisory authority:
Switzerland (primary authority): Federal Data Protection and Information Commissioner (FDPIC) Feldeggweg 1, 3003 Bern, Switzerland www.edoeb.admin.ch
For customers in the EU: you may also have the right to lodge a complaint with your national data protection authority.
11. Data Security
We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse, including relying on Wix's secure, PCI-DSS compliant infrastructure for payment processing.
12. Children's Privacy
Our website is not intended for children under 16. We do not knowingly collect personal data from children.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The date of the latest update will be shown at the top of this page.
Last updated: 18 August 2026.
