Privacy Policy

Last updated: 3May2026

1. Data Controller

The data controller responsible for the processing of your personal data is:

Company: Legendary Life Sàrl Registered office: Ch. de la Veyre d’en Haut 2D

1806 St-Légier-La Chiésaz, Switzerland Company number: CHE-231.659.555 Email: info@legendarylife.ch Website: https://legendarylife.ch

Legendary Life Sàrl (“we”, “us”, “our”) operates the website LegendaryLife.ch (the “Site”) as a business-to-business (B2B) wholesale distribution platform. This Privacy Policy explains how we collect, use, store, and protect personal data in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”), the Swiss Federal Act on Data Protection (FADP/nDSG), and applicable national legislation in France and Spain.

2. Data We Collect

We collect personal data that you provide to us directly when you interact with the Site, as well as data generated automatically through your use of the Site.

2.1 Data you provide

• Account registration and wholesale application: company name, company registration number, VAT number, business type, country, contact name, email address, telephone number, estimated order volume
• Orders and transactions: billing and shipping addresses, purchase order numbers, order history, payment references
• Communications: messages sent via contact forms, email correspondence, quote requests

2.2 Data collected automatically

• Technical data: IP address, browser type and version, operating system, device type, screen resolution
• Usage data: pages visited, time spent on pages, referral source, click patterns
• Cookies and similar technologies: as described in our Cookie Policy

3. Purposes and Legal Basis for Processing

We process your personal data for the following purposes:

• Performance of a contract (Art. 6(1)(b) GDPR): to process your wholesale account application, manage your account, fulfil orders, process payments, and provide customer support
• Legitimate interests (Art. 6(1)(f) GDPR): to improve and secure the Site, analyse usage patterns, prevent fraud, and communicate about products and services relevant to your business
• Legal obligation (Art. 6(1)(c) GDPR): to comply with accounting, tax, and regulatory requirements, including the retention of invoices and transaction records
• Consent (Art. 6(1)(a) GDPR): where applicable, for the sending of marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing

4. Data Recipients and Transfers

We may share your personal data with the following categories of recipients, solely to the extent necessary for the purposes described above:

• Hosting and infrastructure providers (EU-based managed hosting)
• Payment service providers (bank transfer processing, payment gateway if applicable)
• Logistics and shipping partners (third-party logistics providers in France)
• Professional advisors (accountants, legal counsel)
• Tax and regulatory authorities (as required by law)

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

As a Swiss-based company, transfers of personal data from the EU/EEA to Switzerland are covered by the European Commission’s adequacy decision for Switzerland. Where data is transferred to any other country outside the EU/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs).

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Account data: for the duration of the business relationship and for a period of 10 years thereafter, as required by Swiss and EU commercial and tax law
• Transaction and invoice data: 10 years from the end of the financial year in which the transaction occurred, in accordance with Swiss commercial law (Art. 958f CO) and applicable EU VAT regulations
• Communication records: 3 years from the date of last contact
• Technical and usage data: 12 months from the date of collection

6. Your Rights

Under the GDPR and the Swiss FADP, you have the following rights with respect to your personal data:

• Right of access: to obtain confirmation of whether your data is being processed and to receive a copy
• Right to rectification: to request correction of inaccurate or incomplete data
• Right to erasure: to request deletion of your data, subject to legal retention obligations
• Right to restriction of processing: to request that processing be limited in certain circumstances
• Right to data portability: to receive your data in a structured, commonly used, machine-readable format
• Right to object: to object to processing based on legitimate interests, including direct marketing
• Right to withdraw consent: at any time, without affecting the lawfulness of processing carried out prior to withdrawal

To exercise any of these rights, please contact us at privacy@legendarylife.ch. We will respond within 30 days of receiving your request. If you believe your data protection rights have been violated, you have the right to lodge a complaint with the competent supervisory authority. For EU residents, this is the supervisory authority in your country of residence. For Swiss residents, the competent authority is the Federal Data Protection and Information Commissioner (FDPIC).

7. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include SSL/TLS encryption for data in transit, access controls, regular security reviews, and automated backups. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be published on the Site with a revised “Last updated” date. We encourage you to review this page periodically.