Privacy Policy

Last updated: October 20, 2026

1. Who is responsible

Keiver Mendoza, sole proprietorship, trading as Malunvi, Melchiorstrasse 9, 3027 Bern, Switzerland. Email: info@malunvi.com. We are the controller of your personal data for the purposes of the Swiss Federal Act on Data Protection (nDSG) and, where it applies, the EU General Data Protection Regulation (GDPR).

2. What data we process

Order data: name, delivery and billing address, email, phone number (if you give one), the products you order and the payment status.
Payment data: payments are handled by our payment providers (currently PayPal and, once activated, Shopify Payments). We do not see or store your full card details.
Communication data: messages you send us through the contact form or by email.
Technical data: IP address, device and browser information, pages visited, and cookie identifiers when you use the shop.
Newsletter data: your email address, only if you subscribe.

3. Why we process it and on what basis

To process and deliver your order and to handle returns and warranty claims (performance of a contract).
To run, secure and improve the shop, and to prevent fraud (our legitimate interests).
To keep accounting and tax records (legal obligation).
To send marketing emails (your consent, which you can withdraw at any time using the unsubscribe link).

4. Who receives your data

Shopify hosts the shop and the checkout and processes data on our behalf. Shopify may process data in other countries, including the United States and Canada.
Payment providers (PayPal and, once activated, Shopify Payments) process your payment.
CJ Dropshipping prepares and ships your order from its warehouse in China. To do this it receives your name, delivery address, phone number and the items you ordered. Because this transfers data to China, a country without a recognised adequate level of data protection, we only pass on the data needed for delivery.
Carriers and postal services receive the data needed for delivery and tracking.
Service providers that help us run the shop, only as far as needed.

5. Transfers abroad

Your data may be processed in countries outside Switzerland and the EU/EEA, including China and the United States. Where the country does not offer an adequate level of protection, we rely on safeguards such as standard contractual clauses or your consent, as far as the law requires.

6. Cookies and analytics

The shop uses cookies that are necessary for it to work (cart, checkout, security). We currently do not use advertising pixels or third-party analytics tools; the shop only uses the analytics functions built into Shopify. If we start using cookies for statistics or marketing, we will ask for your consent first and update this policy.

7. How long we keep data

We keep order and accounting data for as long as the law requires (in Switzerland, generally ten years). Other data is deleted once it is no longer needed for the purpose it was collected for.

8. Your rights

You can ask us for access to your data, to correct it, to delete it, to restrict or object to its processing, and to receive it in a portable format, within the limits of the law. You can withdraw consent at any time. To exercise a right, write to info@malunvi.com. If you are not satisfied with our answer, you can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if you live in the EU/EEA, to your local data protection authority.

9. Security

We use technical and organisational measures to protect your data. The checkout is encrypted.

10. Children

The shop is aimed at adults and parents. We do not knowingly collect data from children.

11. For residents of California

We do not sell personal information for money. You may ask us what personal information we hold about you and ask us to delete it by writing to the email address above.

12. Changes

We may update this policy. The current version is always the one on this page.