Privacy policy

Privacy Notice under the GDPR (EU-Market)

Last updated: June 1, 2025

This Privacy Notice explains how Sunbarry ("we", "us", "our") processes your personal data when you visit our website [sunbarry.com], use our services, or interact with us.

1. Data Controller

Cerasum GmbH
Dammstrasse 16, 6300 Zug, Switzerland
Email: office(at)sunbarry(dot)com

We are the data controller under Art. 4(7) GDPR for processing your personal data.

2. Purpose and Legal Basis of Processing

We process your personal data for the following purposes:

a) To Fulfil Contracts (Art. 6(1)(b) GDPR)
  • Processing and shipping orders
  • Communicating about orders, returns, or support
  • Creating and managing user accounts
b) Based on Your Consent (Art. 6(1)(a) GDPR)
  • Newsletter subscriptions
  • Participation in surveys or reviews
c) Based on Legitimate Interests (Art. 6(1)(f) GDPR)
  • Analytics and reach measurement
  • Fraud prevention
  • Improvement of our online services
d) Based on Legal Obligations (Art. 6(1)(c) GDPR)
  • Tax and commercial retention requirements

3. Data We Process

Depending on your use of our services, we may process the following data:

  • Contact details (name, address, email, phone number)
  • Payment and order data
  • Usage data (IP address, browser type, access time, viewed products)
  • Messages and communication content
  • Reviews and survey responses

4. Cookies & Web Analytics

We use cookies and similar technologies to operate and improve our website. For more information, please see Shopify’s Cookie Policy.

You can adjust your cookie preferences at any time via our cookie banner or your browser settings.

5. Recipients of Your Data

We share your personal data only when necessary:

  • Shipping providers (e.g., DHL, UPS)
  • Payment providers (e.g., Stripe, Shopify Payments)
  • IT and hosting services (e.g., Shopify)
  • Customer support and analytics tools
  • Marketing and advertising partners (e.g., Meta/Facebook)

Data transfers to third countries outside the EU occur only with appropriate safeguards (e.g., EU Standard Contractual Clauses).

6. Data Retention

We retain your data only as long as necessary for the stated purposes or as legally required (e.g., retention obligations for 6 or 10 years).

7. Your Rights

You have the following rights at any time:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Object to processing (Art. 21 GDPR)
  • Withdraw your consent (Art. 7(3) GDPR)

To exercise your rights, please email us: office(at)sunbarry(dot)com

8. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, particularly in your EU member state of residence, workplace, or the place of the alleged infringement.

Example:

Swiss Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1, CH-3003 Bern
www.edoeb.admin.ch

9. Automated Decision-Making

No automated decision-making or profiling takes place.

10. Contact

If you have questions about data protection, please contact us:

Cerasum GmbH, Dammstrasse 16, 6300 Zug, Switzerland
Email: office(at)sunbarry(dot)com

___________________________________________________________

Privacy Policy (United States)

For EU-privacy policy, see after.

Last updated: June 1, 2025

This Privacy Policy describes how Sunbarry (“we”, “us”, or “our”) collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from sunbarry.com (the “Site”) or otherwise interact with us (collectively, the “Services”).

“You” refers to any individual who uses or interacts with our Services, including customers, website visitors, or any person whose information we process under this Privacy Policy.

By using our Services, you agree to the practices outlined below. If you do not agree with this policy, please do not use the Services.

Changes to This Policy

We may revise this Privacy Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. When we update the policy, we will revise the “Last updated” date and, where required by law, notify you.

Personal Information We Collect

Information You Provide Directly
  • Contact details: name, address, phone number, email
  • Order details: billing and shipping address, payment confirmation
  • Account details: username, password, security questions
  • Shopping behavior: items viewed, added to cart, wish lists
  • Customer support interactions
  • Responses to surveys or reviews

Providing this data is voluntary, but refusal may limit your use of certain features.

Information Collected via Cookies

We use cookies and similar technologies to collect usage data, which includes:

  • IP address
  • Browser type
  • Device identifiers
  • Interaction with our website and emails

To learn more, visit the Shopify Cookie Policy.

Information from Third Parties

We may receive personal data from:

  • Service providers (e.g., Shopify)
  • Payment processors
  • Advertising and analytics providers