Privacy policy

Last updated: 23 July 2026

Protecting your personal data is important to us. This privacy policy explains which personal data we process in connection with leonito.ch, where this data comes from, the purposes for which we use it, to whom it is disclosed and what rights you have.

This privacy policy applies to the leonito.ch online shop and to related orders, customer accounts, contact enquiries, returns, complaints, warranty cases and marketing communications.

1. Controller

The controller responsible for processing your personal data is:

Herman Onlinehandel
Julia Herman
Wasserwerkstrasse 14
CH-4332 Stein AG
Switzerland

Email: support@leonito.ch
Website: leonito.ch

UID/VAT: CHE-499.305.522 VAT
Commercial register no.: CH-400-1612689-9

You can find further company information in our Legal notice.

2. Applicable data protection law

We process personal data in accordance with applicable Swiss data protection law, in particular the Federal Act on Data Protection (FADP). Where further mandatory data protection provisions apply in an individual case, we also comply with those provisions.

3. Personal data we process

Depending on how you use leonito.ch, we may process the following categories of personal data in particular:

• Master and contact data such as your name, billing and delivery address, email address and any telephone number you provide
• Order and contract data such as products ordered, order number, time of order, prices, discounts, payment status, delivery status, returns and cancellations
• Customer account data such as account identifiers, order history, profile settings and contact details associated with the account
• Payment and transaction data such as the selected payment method, transaction reference, payment confirmation and refund information; as a rule, we do not receive complete credit or debit card details
• Communication data such as messages, emails, enquiries and other information that you provide when contacting us
• Data relating to returns, complaints, transport damage and warranty cases, such as the order number, a description of the problem, photos, details of missing or damaged parts and the agreed solution
• Marketing data such as newsletter subscription, marketing consent, unsubscribing and interactions with emails sent
• Cart and checkout data such as selected products, cart contents, a checkout that has been started, checkout status and time of abandonment
• technical data such as IP address, browser, device type, operating system, language, approximate region, date and time of access, referrer, cookie identifiers and other technical identifiers
• Usage and preference data such as pages viewed, interactions with the shop and your privacy and consent choices stored in the cookie banner

4. Sources of personal data

We obtain personal data in particular:

• directly from you, for example when you place an order, open an account, subscribe to the newsletter or contact us
• automatically when you use leonito.ch, in particular through Shopify, cookies and similar technologies
• from payment service providers, shipping and transport companies and other service providers, where this is necessary to process an order or enquiry
• from manufacturers or suppliers where this is necessary to handle a complaint, a replacement-parts case or an expressly stated product warranty

5. Purposes of data processing

We process personal data in particular for the following purposes:

• Providing, operating, securing and technically developing leonito.ch
• Processing orders, payments, deliveries, refunds and customer accounts
• Customer service and responding to enquiries
• Handling returns, complaints, defects, transport damage and expressly stated warranty cases
• Preventing and investigating fraud, misuse, security incidents and unlawful acts
• Sending newsletter emails and checkout reminders to the extent described below
• Analytics, personalisation and advertising within the scope of the enabled Shopify functions and your cookie choices
• Complying with legal obligations, in particular accounting, tax, documentation and retention obligations
• Establishing, exercising or defending legal claims

Depending on the context, processing takes place in particular to take steps prior to entering into or to perform a contract, to comply with legal obligations, on the basis of our legitimate business interests or on the basis of your consent. You may withdraw consent at any time with effect for the future.

6. Shopify and Shopify Network Intelligence

Our online shop is operated using Shopify. For customers in Switzerland, personal data is initially processed by Shopify International Limited in Ireland. Shopify provides, among other things, the technical shop platform, shopping cart, checkout, customer accounts, order management, security features, payment features and marketing features.

Shopify processes personal data partly on our behalf and partly under its own responsibility. Personal data may be transferred to Shopify and to companies and service providers used by Shopify.

Shopify Network Intelligence is enabled at Leonito. This allows Shopify to combine information from your interactions with leonito.ch, other Shopify merchants and Shopify, and to process it for so-called enhanced services. These services may be used in particular for security, fraud prevention, performance improvement, analytics, personalisation and – only within the scope of applicable consent requirements – relevant advertising. For these enhanced services, Shopify may itself be responsible for certain processing activities.

Further information about processing by Shopify and your rights in relation to Shopify can be found in the Shopify Consumer Privacy Policy.

Via the Shopify Privacy Portal you can exercise certain data protection rights in relation to Shopify, limit the use of your data for advertising or submit data requests.

7. Orders and customer accounts

When you place an order with Leonito, we process the data required to enter into the contract and fulfil the order. This includes in particular your contact and address details, the products ordered, billing and payment status, and shipping information.

If you use a customer account, Shopify processes the data required to provide and secure the account. You are responsible for keeping your login details confidential. You can also place an order without being required to log in to a customer account at checkout.

8. Payment processing

The payment methods available at checkout are processed by the respective integrated payment service providers. Currently, these may include PayPal as well as Klarna, credit and debit cards via Shopify Payments and – depending on the device and technical availability – Apple Pay, Google Pay or Shop Pay.

When a payment is made, the following in particular may be transferred to Shopify, the respective payment service provider, card organisations, banks and other parties involved in payment processing: name, billing details, order value, currency, transaction reference, device and security data, and the payment data required for the selected payment method. As a rule, we do not receive complete credit or debit card details.

When PayPal is used, payment processing is also subject to the PayPal Privacy Statement. The Swiss PayPal service is provided by PayPal Pte. Ltd. in Singapore.

When Klarna is used, payment processing is carried out by Klarna within Shopify Payments. The data required for payment processing and, where applicable, identity and credit checks may be transferred to Klarna. The Klarna Privacy Notice also applies.

When Apple Pay, Google Pay or Shop Pay is used, the privacy policy of the respective provider also applies. The payment methods actually available to you are shown at checkout.

9. Shipping and delivery

To deliver your order, we disclose the necessary personal data to the shipping and transport companies we use. This includes in particular your name, delivery address, shipment and order data and, where necessary for delivery, additional contact details.

The data is disclosed only to the extent necessary for shipping, delivery, shipment tracking and handling delivery problems.

10. Returns, complaints, transport damage and warranty cases

If you report a return, complaint, transport damage or a possible warranty case, we process the information you provide in order to assess the case and find an appropriate solution. This may include in particular your order number, contact details, a description of the problem, photos of the packaging or product, and details of missing or damaged parts.

Where necessary for the assessment or resolution, we may pass the necessary information to the relevant manufacturer, supplier, transport service provider or insurer. This applies, for example, to replacement-parts requests or the assessment of an expressly stated product-related warranty. We disclose only the data required for the particular case.

11. Contacting us

When you contact us, we process your contact details and the content of your message in order to answer your enquiry, document the matter and take any necessary follow-up action.

Please do not send us any unnecessary sensitive personal data or confidential payment information by unencrypted email.

12. Newsletter, marketing emails and Klaviyo

We use Klaviyo, a service provided by Klaviyo, Inc., 125 Summer Street, Floor 6, Boston, MA 02110, USA (“Klaviyo”), to manage and send our newsletter and certain automated marketing emails.

Klaviyo is connected to our Shopify store. This means that, in particular, your email address, name, subscription and consent status, unsubscribes, customer and order data, shopping cart and checkout data, product interests and – depending on your cookie choices – information about your use of leonito.ch may be transferred to Klaviyo and assigned to a profile there.

The technical connection between Shopify and Klaviyo may also result in Klaviyo profiles being created for individuals who have not subscribed to the newsletter, for example in connection with an order or a checkout that has been started. This does not automatically mean that these individuals will receive marketing emails. We only send marketing communications where the necessary consent or another legally permissible basis exists.

If you subscribe to the Leonito newsletter, we process in particular your email address, your name where applicable, the time and source of your subscription, and your consent and confirmation status. You may receive a confirmation email to verify your subscription. We use this information to send you Leonito news, product information, background knowledge and inspiration relating to meaningful play and learning.

Leonito may also send automated marketing emails, such as welcome emails or reminders about a checkout that has been started or abandoned. Depending on the active automation, checkout reminders may be sent via Klaviyo or Shopify Messaging. In this context, your email address, shopping cart and checkout data, checkout status, time information and interactions with the email may be processed.

Klaviyo may collect information about the delivery and use of our emails. This includes, in particular, sending, delivery, failed deliveries, unsubscribes and – where enabled – email opens, clicked links, the time of the interaction, the device or browser used, and subsequent actions in the store. An invisible tracking pixel may be used to detect whether an email has been opened. Links in emails may be technically modified to measure clicks. This information helps us ensure delivery and evaluate and improve content, sending times, target groups and automations. Where separate consent is required for such analysis, it will only take place within the scope of that consent.

You can unsubscribe at any time using the unsubscribe link in a marketing email or by emailing support@leonito.ch. Unsubscribing applies to marketing communications. We may continue to send necessary messages relating to orders, payments, deliveries, customer accounts or ongoing enquiries.

Further information can be found in the Klaviyo Privacy Notice.

13. Cookies, cookie banner and consent settings

Leonito.ch uses cookies and similar technologies. Some of these are necessary for the operation, security, shopping cart, checkout, customer accounts, language settings and technical stability of the shop.

A Shopify cookie banner is displayed on leonito.ch. There you can accept or reject non-essential cookies and similar technologies, or manage your settings. Non-essential data processing for personalisation, analytics or advertising takes place within the scope of the choices you make via the banner.

If you do not consent to the use of non-essential cookies or similar technologies, Shopify marks the device data collected via leonito.ch so that Shopify Network Intelligence should not use it for non-essential purposes, including advertising.

You can change your choices through the cookie settings provided in the shop and withdraw your consent with effect for the future. Deleting cookies in your browser may mean that you have to make your choices again.

14. Analytics, personalisation and marketing

According to our currently verified configuration, no Meta Pixel, separately configured Google Analytics or additional Google tag is integrated. This is distinct from Shopify’s technical analytics, security and personalisation functions, the activated Shopify Network Intelligence and the integration of Klaviyo.

If you consent to the relevant non-essential categories through the Shopify cookie banner, Klaviyo may use JavaScript, similar technologies and, in particular, the “__kla_id” identifier to recognise a previously known browser. This may include recording visits to leonito.ch, products or collections viewed, searches, products added to the shopping cart and other interactions with the store, and assigning this information to an existing Klaviyo profile.

This data may be used to measure performance, create segments, personalise content and manage marketing communications. Klaviyo’s non-essential website tracking takes place in accordance with the choices you make through the cookie banner. Independently of this, information that you actively provide through a sign-up form, checkout, an order or when contacting us may be processed.

Before Leonito activates another app, an additional pixel or another marketing or analytics tool in the future, this Privacy Policy and the cookie settings will be reviewed and, if necessary, updated before activation.

15. Social media and external links

Leonito may have a presence on platforms such as Facebook and Instagram. Leonito.ch may contain simple links to such external platforms. If you open such a link, you leave leonito.ch. From that point onwards, the respective platform operator processes personal data in accordance with its own privacy policy.

For other external links, the privacy policies of the respective operators also apply to the linked services.

16. Recipients of personal data

Depending on the purpose, personal data may be disclosed in particular to the following categories of recipients:

• Shopify and Shopify affiliates and sub-processors
• Payment service providers, banks, card organisations and providers of digital payment methods
• Shipping, transport and logistics companies
• Manufacturers and suppliers, where this is necessary for a complaint, replacement part or warranty case
• IT, hosting, security, communications and email service providers
• Accounting, fiduciary, legal, insurance and other professional advisers
• Authorities, courts and other bodies where there is a legal obligation or where this is necessary to establish or defend legal claims
• Klaviyo, Inc., its affiliated companies and subprocessors for newsletters, marketing automations, email delivery, profile management and – depending on your cookie choices – website analytics

Service providers receive personal data only to the extent necessary and, depending on their role, are contractually or legally obliged to handle this data appropriately.

17. Processing personal data abroad

Our principal business operations are conducted from Switzerland. However, because we use Shopify, PayPal and other international service providers, personal data may also be processed outside Switzerland or disclosed abroad.

For Shopify, the personal data of customers in Switzerland is initially processed by Shopify International Limited in Ireland. Shopify uses affiliates and service providers in various countries. According to Shopify's currently published list, these include in particular Ireland, Canada, the United States, Singapore, the United Kingdom, France, Germany, Italy, Lithuania, the Netherlands, Poland, Spain, Sweden, Australia, India, Japan and New Zealand. Additional countries may be involved depending on the selected payment method or service used; Singapore is particularly relevant for PayPal.

The current list of Shopify sub-processors can be found on Shopify's website.

According to the information currently published, Klaviyo stores customer data in the United States. Klaviyo and the companies it engages may also process personal data or access it from other countries, in particular Australia, Canada, France, Germany, Ireland, Singapore and the United Kingdom. The current list of companies engaged by Klaviyo, processing locations and purposes can be found in Klaviyo’s list of subprocessors.

Klaviyo is certified under the Swiss-U.S. Data Privacy Framework. Where this constitutes a valid applicable basis, the transfer is based on that framework. In addition, the data processing agreement applicable with Klaviyo contains Standard Contractual Clauses with the necessary adaptations for Switzerland.

If, under Swiss law, the recipient country does not ensure an adequate level of data protection, we base the disclosure – where required – on recognised safeguards, in particular contractual data protection clauses such as the European Commission's Standard Contractual Clauses with the adaptations required for Switzerland, or on an exception provided for by law. Appropriate technical and organisational safeguards are also used.

18. Retention period

We retain personal data only for as long as necessary for the respective purpose, for as long as a statutory retention obligation applies, or for as long as we have a legitimate interest in retaining it, for example to document a contract, handle an ongoing case, or establish or defend claims.

Order, invoice and business records are generally retained for ten years due to statutory obligations. We retain data relating to contact enquiries, returns, complaints and warranty cases for as long as necessary for handling the matter, traceability and any legal claims. 

The data is then deleted or anonymised unless there is an obligation or lawful basis for further retention. Newsletter and marketing data are generally processed for as long as a subscription remains active or the data are required for the purposes described. After you unsubscribe, the data will no longer be used for further marketing communications. Information required to record your unsubscribe request and your previous consent may continue to be retained in order to honour the unsubscribe request permanently, demonstrate consent and prevent unwanted renewed communications.

19. Data security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, unlawful alteration and unauthorised disclosure. These measures include, in particular, using Shopify's security features, access restrictions and appropriate organisational procedures.

Despite careful safeguards, absolute security cannot be guaranteed when data is transmitted over the internet.

20. Children's data

Our products are intended for families and children, but orders and customer accounts are intended for adults. We do not intend to collect personal data directly from children. If you are a parent or guardian and believe that a child has provided us with personal data without the required consent, please contact us at support@leonito.ch.

21. Your rights

Under applicable data protection law, you have the right, in particular, to:

• request information about whether and which personal data we process about you
• have inaccurate or incomplete personal data corrected
• request the deletion of personal data, provided there is no legal obligation or other lawful basis for further processing
• object to certain data processing or request that it be restricted, where provided for by applicable law
• withdraw consent with effect for the future
• request the release or transfer of certain personal data in a commonly used electronic format, provided the statutory requirements are met

To exercise your rights, you can contact us at support@leonito.ch for this purpose. We may require reasonable proof of your identity to ensure that personal data is not disclosed to unauthorised persons.

For processing for which Shopify itself is responsible, you can also contact Shopify via the Shopify Privacy Portal directly to exercise those rights.

You can also contact the Federal Data Protection and Information Commissioner (FDPIC) for further information.

22. Changes to this privacy policy

We may amend this privacy policy if our data processing, the services used, Shopify features or legal requirements change. Before enabling a new app, pixel or additional marketing or analytics tool, we will review whether this privacy policy and the cookie settings need to be updated.

The version published on leonito.ch at the relevant time applies. The date at the beginning of this privacy policy indicates when its content was last revised.