Privacy policy

Privacy & Data Protection Policy

Last updated: 20 July 2026

1. About This Privacy Policy

This Privacy & Data Protection Policy explains how Rive & Rituel collects, uses, stores and discloses personal data when you:

  • Visit or interact with our website
  • Create or use a customer account
  • Purchase or enquire about a product
  • Request an exchange or store credit
  • Submit measurements or customisation information
  • Join our mailing list or rewards programme
  • Contact our customer-service team
  • Submit a review, photograph or other content
  • Otherwise interact with Rive & Rituel

This policy also explains the rights and choices available to you in relation to your personal data.

This policy is a notice explaining our processing activities. It does not rely on your general acceptance as consent for activities that legally require a separate, specific choice. Where consent is required, such as for certain marketing activities or non-essential cookies, we will request it separately.

If this Privacy Policy conflicts with our Terms of Service regarding the collection, use or disclosure of personal data, this Privacy Policy will take priority in relation to those matters.

2. Who Is Responsible for Your Personal Data?

Rive & Rituel is the trading name used for this website and store.

For the purposes of applicable data-protection law, the controller responsible for deciding how and why your personal data is processed is:

Legal entity: [INSERT FULL LEGAL BUSINESS NAME]
Trading name: Rive & Rituel
Address: Esplanade de Pont-Rouge 9a, 1212 Lancy, Switzerland
Email: bonjour@revederiveswimwear.com
Telephone: +41 79 883 10 85
Business registration number: [INSERT IF APPLICABLE]
VAT number: [INSERT IF APPLICABLE]

Throughout this policy, “Rive & Rituel”, “we”, “us” and “our” refer to the controller identified above.

For privacy-related requests, please use the contact information provided in the final section of this policy.

3. Our Relationship with Shopify

Our online store is hosted by Shopify.

Shopify provides the e-commerce infrastructure that allows us to display products, manage customer accounts, process orders, receive payments and provide other website functionality.

Information submitted through our store may be transmitted to and processed by Shopify and its authorised service providers. Shopify generally processes personal data on our behalf to provide the platform, but it may also process certain information for its own purposes, including security, fraud prevention, platform improvement and enhanced Shopify services.

Where Shopify independently determines the purposes and means of a particular processing activity, Shopify may act as a separate controller for that activity.

Further information is available through the:

  • [Shopify Consumer Privacy Policy]
  • [Shopify Privacy Portal]

4. Meaning of Personal Data

“Personal data” means information that identifies you or that can reasonably be connected with you, either by itself or when combined with other information.

Personal data does not include information that has been irreversibly anonymised so that no individual can reasonably be identified.

Depending on your interaction with us, we may process the categories described below.

5. Contact and Identification Information

We may collect:

  • Your full name
  • Email address
  • Telephone number
  • Billing address
  • Delivery address
  • Country or region
  • Company, hotel, reception or concierge details
  • Preferred language
  • Other contact information you provide

We use this information to communicate with you, administer orders, arrange deliveries and provide customer support.

6. Order and Transaction Information

When you place or attempt to place an order, we may collect:

  • Products viewed, selected or purchased
  • Product size, colour and quantity
  • Order number
  • Order date
  • Purchase value and currency
  • Discount or promotional information
  • Billing and delivery information
  • Payment status
  • Delivery method
  • Tracking information
  • Customs or import information
  • Exchanges, cancellations, store credit or other order adjustments
  • Previous transactions connected with your account or email address

We may also record whether an order was delivered, refused, returned, exchanged, disputed or reported as lost or damaged.

7. Payment Information

Payments are processed through Shopify Payments or another authorised payment provider made available at checkout.

Payment information may include:

  • Payment method
  • Card type
  • Billing name and address
  • Partial or masked payment-card details
  • Payment token
  • Payment authorisation status
  • Transaction reference
  • Fraud-prevention results
  • Refund or chargeback information

Complete payment-card details are generally collected and processed directly by the relevant payment provider. Rive & Rituel does not ordinarily receive or retain your complete card number or security code.

Payment providers process information according to their own privacy policies and legal obligations.

8. Customer-Account Information

If you create or use a customer account, we may process:

  • Account login details
  • Encrypted password information
  • Account preferences
  • Saved delivery details
  • Order history
  • Wishlist or saved products
  • Rewards information
  • Store-credit balance
  • Communication preferences
  • Account activity and security information

You are responsible for keeping your login credentials confidential and notifying us if you believe your account has been accessed without authorisation.

9. Measurements, Fit and Customisation Information

Where you request made-to-measure, bespoke or personalised services, we may collect:

  • Body measurements
  • Preferred garment size
  • Fit preferences
  • Coverage or support preferences
  • Design alterations
  • Colour selections
  • Personalisation instructions
  • Photographs voluntarily supplied to explain fit or construction requirements
  • Notes connected with your bespoke request

Measurements and fit information are used only where reasonably necessary to provide the requested product or service, maintain an accurate production record, respond to fit concerns or reproduce an approved specification.

Ordinary body measurements are not automatically considered health information. However, please do not send medical diagnoses, disability information or other sensitive health details unless we have specifically requested information that is necessary to accommodate your order.

Where sensitive personal data is voluntarily supplied and is genuinely necessary, we will process it only where permitted by law and with any consent or safeguards legally required.

10. Exchange and Customer-Service Information

When you contact us or request an exchange, we may collect:

  • Your order number
  • Details of the item concerned
  • The reason for your request
  • Replacement size or product preferences
  • Photographs of the garment, packaging or alleged fault
  • Delivery and tracking evidence
  • Written statements concerning a missing parcel
  • Copies of relevant correspondence
  • The outcome of our inspection or investigation
  • Records of store credit, exchange approval or other resolution

We may photograph or record the condition of returned garments for quality control, fraud prevention and dispute resolution.

Please avoid including payment-card information, medical information or identity documents in ordinary customer-service emails unless we have specifically requested them through an appropriate channel.

11. Communications

We collect information contained in communications you send to us, including:

  • Emails
  • Contact-form submissions
  • Telephone enquiries
  • Social-media messages
  • Exchange requests
  • Complaints
  • Reviews
  • Competition entries
  • Survey responses
  • Customer-support correspondence

We may retain correspondence where reasonably necessary to respond, maintain service records, establish what was agreed or manage a legal claim.

Telephone conversations are not routinely recorded unless you are informed before recording begins.

12. Device, Technical and Usage Information

When you visit or interact with the website, we and our authorised providers may automatically collect:

  • Internet Protocol address
  • Device type
  • Browser type and version
  • Operating system
  • Approximate location derived from your IP address
  • Language and regional settings
  • Website pages viewed
  • Links or buttons selected
  • Time and date of visits
  • Referring website or marketing source
  • Products viewed or added to a basket
  • Basket abandonment information
  • Session information
  • Cookie and advertising identifiers
  • Website performance and error information
  • Interaction with emails or digital advertisements

This information helps operate and secure the website, understand how it is used, improve performance and measure marketing effectiveness.

13. Cookies and Similar Technologies

We use cookies, pixels, tags, local storage and similar technologies to operate and understand the website.

These technologies may be grouped into the following categories:

Strictly Necessary Technologies

These are required for essential functions such as:

  • Remembering basket contents
  • Processing checkout
  • Maintaining account sessions
  • Securing the website
  • Preventing fraud
  • Remembering privacy choices

These technologies cannot always be disabled without affecting the operation of the website.

Functional Technologies

These may remember preferences such as:

  • Language
  • Currency
  • Region
  • Recently viewed products
  • Personalised website settings

Analytics Technologies

These help us understand:

  • How visitors find the website
  • Which pages and products are viewed
  • Whether website functions work correctly
  • How customers navigate the store
  • Which marketing campaigns generate visits or purchases

Advertising Technologies

Where enabled and legally permitted, these may be used to:

  • Measure advertisements
  • Limit repeated advertising
  • Build or exclude advertising audiences
  • Show advertisements based on website interactions
  • Understand whether an advertisement resulted in a purchase

Where consent is required, analytics, advertising and other non-essential technologies will not be activated until you have made the relevant choice.

You can review or change your choices through:

  • [COOKIE SETTINGS]
  • [PRIVACY CHOICES OR DO NOT SELL/SHARE LINK]

Further information may be provided in our separate Cookie Policy.

14. How We Obtain Personal Data

We may collect personal data from the following sources.

Directly From You

For example, when you:

  • Create an account
  • Place an order
  • Submit measurements
  • Contact us
  • Request an exchange
  • Join a mailing list
  • Submit a review
  • Enter a promotion
  • Change your privacy settings

Automatically

Information may be collected through:

  • Cookies
  • Pixels
  • Server logs
  • Analytics tools
  • Security systems
  • Device and browser technologies

From Service Providers

We may receive information from providers involved in:

  • Website hosting
  • Payments
  • Fraud prevention
  • Shipping and tracking
  • Customer support
  • Email delivery
  • Analytics
  • Advertising
  • Review management

From Partners and Other Third Parties

We may receive information from:

  • Social-media platforms
  • Advertising partners
  • Referral partners
  • Delivery carriers
  • Payment providers
  • Authorised retailers
  • Customers purchasing a gift for another recipient
  • Publicly available sources where lawfully used

Where someone provides another person’s delivery or contact details, they should ensure that they are authorised to do so.

15. Why We Use Personal Data

We process personal data only where we have an appropriate purpose and, where required, a lawful basis.

The applicable basis may vary according to your location and the particular activity.

16. Providing Products and Fulfilling Orders

We use personal data to:

  • Receive and review orders
  • Confirm product specifications
  • Process payments
  • Produce garments
  • Arrange packaging and delivery
  • Send order and tracking updates
  • Complete customs documentation
  • Manage exchanges and store credit
  • Respond to delivery issues
  • Provide customer support

Where EU or UK data-protection law applies, this processing is generally necessary to perform a contract with you or to take requested steps before entering into a contract.

Some information is required to complete an order. If it is not provided, we may be unable to accept, produce or deliver the order.

17. Managing Made-to-Measure and Bespoke Services

We use measurements, preferences and approved customisation instructions to:

  • Assess the requested specification
  • Produce the garment
  • Confirm what was agreed
  • Provide fit support
  • Investigate production concerns
  • Reproduce or alter an approved design where requested

The usual legal basis is performance of the contract or taking steps at your request before entering into the contract.

Where information reveals sensitive personal data, we will rely on an additional lawful condition where one is required.

18. Customer Accounts, Rewards and Store Credit

We process account information to:

  • Create and maintain accounts
  • Display order history
  • Record rewards or benefits
  • Maintain store-credit balances
  • Remember preferences
  • Protect accounts from misuse
  • Provide account-related support

This processing may be necessary to perform our agreement with you or for our legitimate interests in administering customer relationships and preventing fraud.

19. Customer Support and Communications

We process enquiries and correspondence to:

  • Respond to questions
  • Resolve complaints
  • Investigate delivery problems
  • Assess exchange requests
  • Document agreements
  • Maintain appropriate customer-service records
  • Establish, exercise or defend legal claims

The legal basis may be performance of a contract, compliance with legal obligations or our legitimate interests in operating the business and resolving disputes.

20. Security and Fraud Prevention

We may use personal data to:

  • Verify transactions
  • Authenticate accounts
  • Detect suspicious orders
  • Prevent payment fraud
  • Investigate chargebacks
  • Identify malicious website activity
  • Protect customers, staff and service providers
  • Enforce our Terms and policies

This processing is based on our legitimate interests in maintaining a secure store and protecting against fraud, as well as any legal obligations that apply.

21. Website Analytics and Improvement

We may use website and transaction data to:

  • Understand customer journeys
  • Identify website errors
  • Improve navigation and checkout
  • Assess product interest
  • Measure website performance
  • Develop services and customer experiences
  • Produce aggregated business statistics

Where required, this processing is based on your consent to analytics technologies.

In other circumstances, we may rely on our legitimate interests in understanding and improving the website, provided those interests are not overridden by your rights.

22. Marketing Communications

Where permitted, we may use your contact information and purchase history to send:

  • Product news
  • Editorial communications
  • Invitations
  • Rewards information
  • Restock notices
  • Promotional offers
  • Abandoned-basket reminders
  • Other Rive & Rituel marketing

Where consent is required, we will send electronic marketing only after receiving that consent.

Where applicable law permits marketing to existing customers on another basis, we may send communications about products or services similar to those previously purchased, subject to your right to opt out.

You may unsubscribe at any time by:

  • Selecting the unsubscribe link in an email
  • Changing your account preferences
  • Contacting us directly

Unsubscribing from marketing will not prevent us from sending service communications relating to an order, account, store credit, security issue or legal notice.

23. Personalised Advertising

Where you have provided any consent required by law, we may work with Shopify or advertising partners to display or measure advertising based on:

  • Products viewed
  • Basket activity
  • Previous purchases
  • Website interactions
  • Advertising identifiers
  • Interactions with other websites or services

This activity may involve matching or combining information across devices, websites or participating merchants.

You may change your advertising and cookie choices using the privacy controls provided on the website.

24. Legal and Regulatory Purposes

We may process personal data where necessary to:

  • Maintain accounting and tax records
  • Respond to lawful requests from authorities
  • Comply with court orders
  • Meet customs or import obligations
  • Investigate potential legal violations
  • Protect our legal rights
  • Establish, exercise or defend a claim
  • Comply with data-protection obligations
  • Respond to a valid rights request

The legal basis is compliance with a legal obligation or our legitimate interests in protecting the business and enforcing our rights.

25. When We Disclose Personal Data

We may disclose personal data only where reasonably necessary for the purposes described in this policy.

Recipients may include the following categories.

Shopify

Shopify hosts and supports our online store and processes information required to provide and improve its platform and related services.

Payment Providers

Payment processors, banks and card networks may process information required to authorise payments, issue credits, prevent fraud and resolve disputes.

Delivery and Logistics Providers

We may share information with:

  • DHL Express
  • Swiss Post
  • Local postal operators
  • Customs brokers
  • Destination-country delivery partners
  • Other carriers selected for the order

Information is limited to what is reasonably required to deliver, track, clear or return the parcel.

Production and Fulfilment Providers

Where applicable, information may be shared with authorised personnel or providers involved in:

  • Garment production
  • Alterations
  • Packaging
  • Quality control
  • Warehousing
  • Order fulfilment

Measurements and customisation instructions will be shared only where necessary to produce the requested garment.

Technology and Professional Providers

These may include providers of:

  • Website infrastructure
  • Cloud storage
  • Customer support
  • Email delivery
  • Analytics
  • Fraud prevention
  • Cybersecurity
  • Accounting
  • Legal advice
  • Business administration

Marketing and Advertising Partners

Where enabled and legally permitted, we may disclose identifiers, website activity or audience information to providers helping us deliver or measure marketing.

Where consent is required, this will occur only after the relevant consent has been obtained.

Review and Social-Media Platforms

Information may be disclosed when you choose to:

  • Publish a review
  • Connect a social-media account
  • Use a social-media widget
  • Submit content for public display
  • Participate in a social campaign

Public Authorities and Legal Recipients

We may disclose information where reasonably necessary to:

  • Comply with law
  • Respond to a valid legal request
  • Protect a person’s safety
  • Investigate fraud
  • Enforce our rights
  • Defend legal proceedings

Business Transfers

If the business is sold, reorganised, merged or transferred, relevant personal data may be disclosed to professional advisers, prospective purchasers or the acquiring organisation, subject to appropriate confidentiality and legal protections.

26. Sale and Sharing of Personal Data

Rive & Rituel does not sell personal data to third parties in exchange for money.

However, certain US privacy laws use broader definitions of “sale”, “sharing” or “targeted advertising”. Under those definitions, disclosures involving advertising cookies, pixels or audience-matching services may be treated as a sale or sharing even where no money is exchanged for the information.

Where these laws apply, you may opt out through:

  • [YOUR PRIVACY CHOICES]
  • [DO NOT SELL OR SHARE MY PERSONAL INFORMATION]
  • A recognised Global Privacy Control signal, where required and technically supported

We do not knowingly sell or share for targeted advertising the personal data of individuals under 16.

27. International Transfers

Rive & Rituel is based in Switzerland, but Shopify and some of our service providers operate internationally.

Your personal data may therefore be stored, accessed or processed in countries including:

  • Switzerland
  • Countries within the European Economic Area
  • The United Kingdom
  • Canada
  • The United States
  • The destination country for your delivery
  • Other countries in which an authorised provider or subprocessor operates

The data-protection laws in another country may differ from those in your country of residence.

Where personal data is transferred to a country that has not been recognised as providing an adequate level of protection, we will rely on a legally recognised safeguard where required. This may include:

  • Swiss-approved contractual safeguards
  • European Commission Standard Contractual Clauses
  • The UK International Data Transfer Agreement or UK Addendum
  • Binding corporate rules
  • Another legally permitted transfer mechanism

We may also rely on a statutory exception where permitted, including where a transfer is necessary to perform a contract requested by you, such as delivering an international order.

Additional information about relevant transfer safeguards may be requested using the contact details below, subject to legitimate confidentiality restrictions.

28. How Long We Retain Personal Data

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax, security and dispute-resolution requirements.

Retention periods may include the following.

Order and Accounting Records

Invoices, payment records and information required for Swiss accounting or tax purposes may generally be retained for at least 10 years, or for another period required by applicable law.

Customer Accounts

Account information may be retained while the account remains active and for a reasonable period afterwards to manage outstanding transactions, credit, fraud risks or legal claims.

You may ask us to close your account, subject to information that we must retain by law.

Measurements and Bespoke Specifications

Measurements and approved specifications may be retained while needed to complete the order, respond to fit concerns or provide a requested repeat service.

They may be deleted or anonymised when no longer necessary, subject to contractual, quality-control and legal requirements.

Customer-Service and Exchange Records

Correspondence, photographs and inspection records may be retained for as long as required to resolve the enquiry, administer the order and manage possible claims.

Marketing Information

Marketing contact information is retained until you unsubscribe, withdraw consent or we otherwise determine that it is no longer appropriate to use.

We may retain a limited suppression record after an opt-out to ensure that your preference continues to be respected.

Website and Security Information

Cookie, analytics and security information is retained according to the nature of the technology, our settings and the provider’s documented retention period.

When personal data is no longer required, we will delete, anonymise or securely isolate it, unless continued retention is legally required.

29. Security

We use reasonable organisational and technical measures designed to protect personal data from:

  • Unauthorised access
  • Unlawful use
  • Accidental loss
  • Alteration
  • Disclosure
  • Destruction

These measures may include:

  • Access controls
  • Account authentication
  • Encrypted transmission
  • Payment tokenisation
  • Secure service providers
  • Fraud-detection systems
  • Staff or contractor confidentiality obligations
  • System monitoring and security updates

No website, transmission method or storage system can be guaranteed to be completely secure.

You should not send sensitive or confidential information through unsecured channels. You are also responsible for protecting your account password and devices.

Where a personal-data breach occurs, we will assess and address it and notify affected individuals or authorities where legally required.

30. Automated Decisions and Profiling

We and our providers may use automated systems to:

  • Identify suspected fraud
  • Assess transaction risk
  • Detect malicious activity
  • Recommend products
  • Personalise website content
  • Build advertising audiences
  • Determine whether additional payment verification is needed

These activities do not ordinarily result in a decision producing legal or similarly significant effects without meaningful human involvement.

If we make a solely automated decision that produces a legal or similarly significant effect, we will provide the information and rights required by applicable law. This may include the right to:

  • Receive information about the decision
  • Express your point of view
  • Contest the decision
  • Request review by a person

31. Children’s Data

The website sells products for adults and children, but the online store and customer-account services are intended for use by adults.

We do not knowingly ask children under 16 to:

  • Create customer accounts
  • Place orders independently
  • Join marketing lists
  • Submit personal information directly

A parent or legal guardian should place and manage any order for a child.

If you believe that a child has supplied personal data to us without appropriate permission, please contact us. We will investigate and delete the information where legally and reasonably appropriate.

32. Your Data-Protection Rights

Your rights depend on your location and the law applying to the processing. Rights are not absolute and may be subject to legal exceptions.

You may have the following rights.

Access and Information

You may request confirmation of whether we process personal data about you and ask for a copy of that information.

Correction

You may ask us to correct inaccurate or incomplete personal data.

Deletion

You may ask us to delete personal data that is no longer required or is being processed unlawfully.

We may retain information where required for legal, accounting, security or claims purposes.

Restriction

You may ask us to restrict the processing of your data in certain circumstances.

Objection

You may object to processing based on legitimate interests, taking account of your particular circumstances.

You may object to direct marketing at any time.

Data Portability

Where the right applies, you may request certain information in a structured, commonly used and machine-readable format or ask that it be transmitted to another controller where technically feasible.

Withdrawal of Consent

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal does not affect processing that occurred lawfully before consent was withdrawn.

Automated Decisions

Where applicable, you may request human review of a solely automated decision producing legal or similarly significant effects.

Complaint

You may complain to us or to an appropriate data-protection authority.

33. Additional Rights for EEA and UK Residents

Where the EU GDPR or UK GDPR applies, your rights may include:

  • Access
  • Rectification
  • Erasure
  • Restriction
  • Objection
  • Portability
  • Withdrawal of consent
  • Protection concerning qualifying automated decisions
  • The right to complain to a supervisory authority

You may lodge a complaint with the data-protection authority in the country in which you live, work or believe an infringement occurred.

UK residents may contact the UK Information Commissioner’s Office.

34. Additional Rights for Residents of Certain US States

Residents of certain US states may have rights to:

  • Know the categories and specific pieces of personal data collected
  • Know the sources and purposes of collection
  • Access personal data
  • Correct inaccurate data
  • Request deletion
  • Receive portable data
  • Opt out of sale, sharing or targeted advertising
  • Limit certain uses of sensitive personal information
  • Appeal a decision concerning a privacy request
  • Receive equal service without unlawful discrimination

The precise rights available depend on the state and circumstances.

We do not discriminate against individuals for exercising applicable privacy rights.

35. Global Privacy Control

Where required by applicable law and supported by our website platform, a recognised Global Privacy Control signal may be treated as a request to opt out of sale, sharing or targeted advertising for the browser or device sending the signal.

If the signal can be associated with a logged-in Shopify account, Shopify may also apply the preference to that account.

Other browser “Do Not Track” signals may not be recognised where no consistent legal or technical standard applies.

36. Exercising Your Rights

You may submit a privacy request by contacting:

Email: bonjour@revederiveswimwear.com
Post: Rive & Rituel, Esplanade de Pont-Rouge 9a, 1212 Lancy, Switzerland

Please state:

  • Your name
  • The email address associated with your account or order
  • The right you wish to exercise
  • Enough information for us to locate the relevant records

We may request proportionate information to verify your identity and protect personal data from unauthorised disclosure.

We will not ordinarily ask for more identification than is reasonably necessary.

Where a request is submitted by an authorised representative, we may ask for evidence of their authority and may also contact you directly to verify the request.

We will respond within the period required by applicable law.

A request may be refused or restricted where permitted by law, including where it is manifestly unfounded, excessive, conflicts with another person’s rights or concerns information that must be retained.

37. Marketing Choices

You may stop promotional emails at any time by selecting the unsubscribe link included in the communication.

You may also contact us or change your account preferences.

Even after opting out of marketing, you may continue to receive transactional or administrative messages concerning:

  • Orders
  • Delivery
  • Exchanges
  • Customer accounts
  • Store credit
  • Security
  • Changes to legal terms
  • Responses to enquiries

38. Public Reviews and Customer Content

Reviews, comments, photographs or other content submitted for publication may be publicly visible.

Before submitting public content, please avoid including:

  • Home addresses
  • Telephone numbers
  • Payment information
  • Order numbers
  • Information about another person
  • Sensitive personal information

If you ask us to remove published content, we will consider the request in accordance with applicable law, our legitimate business records and the rights of others.

Removing a public review may not remove copies already shared or indexed outside our control.

39. Third-Party Websites and Social Media

The website may link to services operated by third parties.

We do not control the privacy or security practices of independent third-party websites merely because we provide a link to them.

You should review the relevant privacy policy before supplying information to:

  • Social-media platforms
  • Payment services
  • Retail partners
  • External publications
  • Embedded media providers
  • Other third-party websites

Information posted publicly or semi-publicly on social media may be visible and reused by other users according to that platform’s settings and terms.

40. Third-Party Retailer Purchases

This policy principally covers interactions and orders made directly through Rive & Rituel.

If you purchase through Zalando, Wolf & Badger or another independent retailer, that retailer will normally act as the controller for information collected during its checkout, payment and delivery process.

The retailer’s privacy policy will apply to that processing.

Rive & Rituel may separately receive limited information from the retailer where necessary to:

  • Produce or fulfil an order
  • Investigate a product issue
  • Provide product support
  • Comply with legal requirements

41. Complaints

Please contact us first if you have a concern about how your personal data has been handled. We will investigate and aim to resolve the matter fairly.

You may also have the right to complain to a supervisory authority.

For Switzerland, the relevant authority is the:

Federal Data Protection and Information Commissioner
Eidgenössischer Datenschutz- und Öffentlichkeitsbeauftragter

EEA residents may contact the supervisory authority in their country.

UK residents may contact the:

Information Commissioner’s Office

Contacting us first does not prevent you from submitting a complaint directly to an authority.

42. Changes to This Policy

We may update this Privacy Policy to reflect changes to:

  • Our services
  • Our processing activities
  • Website technology
  • Service providers
  • Legal obligations
  • Regulatory guidance

The updated policy will be published on this page with a revised “Last updated” date.

Where a change materially affects how we process personal data, we will provide additional notice or request consent where legally required.

43. Contact Us

Questions, complaints and privacy-rights requests may be sent to:

Rive & Rituel
Legal entity: [INSERT FULL LEGAL BUSINESS NAME]
Address: Esplanade de Pont-Rouge 9a
1212 Lancy
Switzerland

Email: bonjour@revederiveswimwear.com
Telephone: +41 79 883 10 85
Business registration number: [INSERT IF APPLICABLE]
VAT number: [INSERT IF APPLICABLE]

For the purposes of applicable data-protection legislation, the legal entity identified above is the controller of your personal data.

EU representative: [INSERT IF REQUIRED AND APPOINTED]
UK representative: [INSERT IF REQUIRED AND APPOINTED]
Data-protection contact: [INSERT IF DIFFERENT FROM THE EMAIL ABOVE]