Privacy Policy

Last Updated: 11/03/2026

This Privacy Policy describes how In a Box Sàrl collects, uses, and protects the personal data of users of the kisskiss.eu website.

We attach great importance to protecting your privacy and processing personal data responsibly. Data is processed in accordance with the General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP).

Data Controller

The data controller for personal data collected on the website is:

In a Box Sàrl
Route de Crans 81
1978 Lens
Switzerland

Email: contact@kisskiss.eu

Personal Data Collected

When you use the website and place orders, we may collect certain personal data about you.

This data may include your identity (first name and last name), your contact details such as your email address and phone number, as well as the information necessary for the delivery of your order, including your postal address.

When you make a purchase, we also record certain transaction-related information, such as your order history, the order amount, and the payment method used. Payment information is never stored by our systems and is processed directly by secure payment providers.

As you browse the website, certain technical information may also be collected automatically, such as your IP address, the type of device used, browser, pages viewed, and cookies installed on your device.

Purposes of Processing

The personal data collected is used to enable the normal operation of the website and the management of our commercial relationship with you.

Specifically, it may be used to process and ship your orders, provide customer service, manage returns and refunds, prevent fraud, or ensure payment security.

The data may also be used to improve our services, analyze website usage, and, if you have consented, send you marketing communications about our products or offers.

Legal Basis for Processing

The processing of personal data is based on several legal grounds provided by the GDPR.

When you place an order, processing is necessary for the performance of the sales contract. Certain data must also be retained to comply with our legal obligations, particularly regarding accounting and tax matters.

In some cases, we may process your data based on our legitimate interest, for example, to improve our services, prevent fraud, or ensure the security of the website.

When you subscribe to a newsletter or accept certain cookies, processing is based on your consent, which you can withdraw at any time.

Recipients of Data

As part of our activities, certain data may be transmitted to third-party providers strictly necessary for the operation of the service.

This includes our payment providers, our logistics provider responsible for preparing and shipping orders, as well as certain technical service providers used for website hosting, traffic analysis, or email sending.

These providers only have access to the data necessary for the performance of their services and are contractually bound to respect data confidentiality and security.

Personal data is never sold to third parties.

Data Transfers Outside the European Union

Some technical providers used for the operation of the website may be located outside the European Union, particularly in the United States or Canada.

When data transfers to third countries occur, we ensure that they are governed by appropriate safeguards in accordance with the GDPR, particularly through the use of standard contractual clauses approved by the European Commission.

Retention Period

Personal data is retained only for the period necessary for the purposes for which it was collected.

Information relating to customer accounts and orders may be kept for several years to ensure commercial follow-up and warranty management.

Certain data must also be kept for a longer period to comply with legal obligations regarding accounting and tax matters.

Cookies and browsing data are generally retained for a maximum period of thirteen months.

Your Rights

In accordance with the GDPR, you have several rights regarding your personal data.

You can request access to your data, its rectification, or deletion. You can also request the restriction of processing or object to the use of your data in certain situations. In some cases, you may also request the portability of your data.

Where processing is based on your consent, you can withdraw this consent at any time.

Any request relating to the exercise of these rights can be sent to the following address: contact@kisskiss.eu. We commit to responding within the deadlines provided by the applicable regulations.

Cookies

The website uses cookies and similar technologies to ensure its proper functioning and improve the user experience.

Some cookies are strictly necessary for the website to operate, for example, to enable the use of the shopping cart or access to certain features.

Other cookies may be used for traffic analysis or performance measurement purposes to better understand how users navigate the website.

Users can manage their cookie preferences at any time via their browser settings or through the cookie management tool offered on the website.

Data Security

We implement appropriate technical and organizational measures to protect personal data against loss, unauthorized access, disclosure, or alteration.

Communications with the website are protected by a secure encryption protocol, and access to data is limited to authorized personnel within the scope of their duties.

Making a Complaint

If you believe that the processing of your personal data does not comply with applicable regulations, you have the right to lodge a complaint with the competent data protection authority in your country of residence.