Privacy Policy & Cookie Notice

1. Who we are

Tucano Raiz, Geneva, Switzerland, is responsible for the personal data processed through this website. Questions about data protection: info.tucanoraiz@gmail.com.

2. Legal framework

We process personal data in accordance with the Swiss Federal Act on Data Protection (nDSG) and, where it applies, the EU General Data Protection Regulation (GDPR).

3. What data we collect

• Order data: name, delivery or pickup address, e-mail, phone number, order contents and order history.
• Payment data: card and payment details are collected and processed directly by Shopify Payments. We never see or store full card numbers.
• Contact data: the content of messages you send us by e-mail or WhatsApp, including quote requests.
• Technical data: IP address, browser type, device type, pages viewed and timestamps, collected in server logs for security and stability.

4. Why we use it

• To process, deliver and invoice your orders (contract performance).
• To answer your questions and quote requests (legitimate interest / your request).
• To keep the site secure and prevent fraud or abuse (legitimate interest).
• To comply with Swiss accounting and tax obligations (legal obligation).
• To send marketing messages only if you explicitly opt in (consent, revocable anytime).

5. Who we share it with

We only share what is necessary, with providers acting on our instructions: Shopify (store, checkout and payments), our delivery partner in Switzerland, our hosting provider, and e-mail / messaging providers. Some of these providers may process data outside Switzerland or the EU; in that case transfers rely on standard contractual clauses or an adequate-protection decision. We do not sell personal data.

6. Cookies

We keep cookies to a minimum:

• Necessary (always on): your shopping cart contents, chosen language, and the record of your cookie choice. These are required for the site to work and cannot be switched off.
• Analytics / marketing: not used unless you accept them. If we introduce them, they will only load after your consent.

You can withdraw or change your choice at any time by clearing this site's data in your browser, or by writing to us. You can also block cookies entirely in your browser settings — the cart may then stop working.

7. How long we keep it

Order and invoicing data is kept for 10 years as required by Swiss law. Contact messages are kept for up to 2 years. Server logs are kept for a short period, normally no longer than 12 months.

8. Security

The site is served exclusively over encrypted HTTPS connections. Payments run through Shopify's PCI-DSS certified infrastructure. Access to order data is limited to the people who need it and protected by strong passwords and two-factor authentication.

9. Your rights

You may request access to your data, correction, deletion, restriction of processing, a copy in a portable format, or object to processing based on legitimate interests. Write to info.tucanoraiz@gmail.com and we will reply within 30 days. You also have the right to complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EU, to your local supervisory authority.

10. Children

This site is not directed at children under 16, and we do not knowingly collect their data.

11. Changes

We may update this policy when our services or legal obligations change. The date at the top always shows the current version.