Privacy Policy
Last updated:
Framed & Famous is a brand operated by SAdema SNC, a company registered in Switzerland. This policy explains what personal data we collect when you visit the site or place an order, why we process it, who it is shared with, and the rights you have over it.
Who is responsible for your data
Framed & Famous is a brand operated by SAdema SNC, a company registered in Switzerland. SAdema SNC is the data controller responsible for the personal data processed through framed-and-famous.com. Where this policy says “we” or “us”, it means SAdema SNC trading as Framed & Famous.
- Controller: SAdema SNC
- Address: Impasse des Charmilles 2, 1624 La Verrerie, Switzerland
- Swiss UID: CHE-307.996.544
- Privacy contact: info@framed-and-famous.com
This policy is written to meet the requirements of the Swiss Federal Act on Data Protection (FADP) and, where our offering of products to customers in the European Economic Area brings processing within its scope, the EU General Data Protection Regulation (GDPR).
Any question about this policy, and any request concerning your personal data, can be sent to the address above and will reach the people responsible for it.
What personal data we collect
We collect only what we need to sell you a product, deliver it, support you afterwards, and run the site securely.
| Category | What it includes | Where it comes from |
|---|---|---|
| Order and checkout data | Name, email address, billing address, delivery address, and telephone number if you choose to provide it (the phone field is optional at checkout; the company field is not shown). | You, at checkout. |
| Payment-related data | The fact, amount, currency and status of a transaction, the payment method type, and the reference our payment provider returns to identify it. We do not receive or store full card numbers or security codes — those are entered into and handled by the payment provider. | You and the payment provider. |
| Order history | What you bought, the options you chose, prices, shipping method and cost, order status, dispatch and tracking references, and any refund or claim attached to the order. | Generated by the store. |
| Product personalisation data | The values you select or type into the product options — for example a sailor name, a number, frame colour and size, or free text you enter in a “Custom” field. This is stored with the order line because it is what we manufacture. | You, on the product page. |
| Customer service communications | Your emails to us and our replies, and the record of what was discussed and decided. | You and us. |
| Contact form submissions | Name, email address, subject, message, and order number if you supply one. Also a timestamp and the IP address of the submission, used to detect abuse. | You, on the contact page. |
| Uploaded photographs and damage documentation | Images you attach to a claim — parcel, packaging, shipping label and product photographs — together with whatever metadata those image files happen to contain. | You, when you make a claim. |
| Technical and server data | IP address, browser type and version, device and operating system, referring page, pages requested, timestamps, and error and security logs generated by the web server. | Automatically, when you visit. |
| Cookie and session data | A session identifier so your basket persists, a record of your cookie choices, and — only with your consent — order attribution data about how you reached the site. | Your browser. See the Cookie Policy. |
Customer accounts. Registration is currently switched off on this store: you can check out as a guest and we do not ask you to create an account or a password to buy. If account registration is enabled in future, the account data involved will be described here.
Please do not send us sensitive data. We do not ask for, and do not need, data revealing health, political or religious views, trade union membership, biometric or genetic data, or similar special categories. Please do not include such data in a message, a personalisation field or an uploaded photograph.
Why we process it, and on what legal basis
Where the GDPR applies, the legal basis for each purpose is set out below. Under the FADP, processing of this kind is permitted where it is carried out in good faith, is proportionate, and is recognisable to you — which this policy is intended to make it.
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Taking, producing, and fulfilling your order, including personalisation | Order and checkout data, personalisation data, payment-related data | Performance of a contract with you (Art. 6(1)(b)) |
| Sending transactional emails — order acknowledgement, processing, dispatch, refund | Order and checkout data | Performance of a contract (Art. 6(1)(b)) |
| Arranging shipping and enabling delivery and tracking | Name, delivery address, email, phone where given | Performance of a contract (Art. 6(1)(b)) |
| Handling customs formalities for cross-border shipments | Name, address, order contents and value | Legal obligation (Art. 6(1)(c)) and performance of a contract (Art. 6(1)(b)) |
| Answering questions and providing customer service | Contact form submissions, communications, order history | Performance of a contract, or our legitimate interest in responding to enquiries (Art. 6(1)(b) / (f)) |
| Assessing and pursuing a damage, defect or incorrect-item claim, including a claim against the carrier | Order data, uploaded photographs and documentation | Performance of a contract, and our legitimate interest in pursuing carrier claims (Art. 6(1)(b) / (f)) |
| Accounting, tax and commercial record keeping | Order, payment and invoicing data | Legal obligation (Art. 6(1)(c)) |
| Fraud prevention, verifying orders, and keeping the site and its data secure | Technical and server data, order data | Legitimate interest in preventing fraud and securing our service (Art. 6(1)(f)), and legal obligation where applicable |
| Understanding how customers reached the site (order attribution) | Referrer, campaign parameters and session data stored in cookies | Your consent (Art. 6(1)(a)) — off unless you opt in |
| Establishing, exercising or defending legal claims | Whichever of the above is relevant to the claim | Legitimate interest, and legal obligation where applicable (Art. 6(1)(f) / (c)) |
Marketing communications
We do not currently operate a newsletter or send marketing email from this website, and no email marketing platform is connected to it. The only emails generated by the store are transactional messages about an order you placed and replies to messages you send us.
If we introduce a newsletter, it will be opt-in: you would have to ask for it, we would say who sends it, and every message would carry a one-click unsubscribe. This policy would be updated before that happened.
Who we share personal data with
We do not sell personal data, and we do not share it for anyone else’s independent marketing. We disclose it only to the categories of recipient below, and only to the extent each one needs it.
| Recipient category | Why | What they receive |
|---|---|---|
| Payment provider(s) | To take and, where necessary, refund payment, and to run their own fraud checks | Payment and transaction data, and the identifying and billing details the provider requires |
| Carriers and fulfilment partners | To collect, transport, clear customs for, and deliver your parcel, and to handle a damage claim | Name, delivery address, contact details for delivery notification, parcel data, and for cross-border shipments the customs description and value |
| Hosting and infrastructure provider | To operate the website, its database and its email delivery | Whatever is stored on or passes through the platform, including server logs |
| Email delivery | To send transactional order emails and replies | Recipient address and message content |
| Professional advisers, accountants and auditors | Accounting, tax and legal advice | Transaction and order records; personal data only where necessary |
| Authorities and courts | Where we are legally required to disclose, or must do so to establish or defend a legal claim | Only what is required |
Where a recipient processes data on our behalf, they act as a processor under a contract that obliges them to process it only on our instructions and to keep it secure.
Recipients are described by category above. We will name the specific providers we rely on, and the country each operates from, on request — write to us at the address in the Contact section below.
Analytics, advertising and social media. This website does not load any third-party analytics, advertising, retargeting, social media or A/B testing script. There is no Google Analytics, no advertising pixel and no embedded third-party media on it. The only non-essential technology present is the store platform’s own first-party order attribution, described in Cookie Policy, and it is inactive unless you consent to it.
Store platform diagnostics. Our e-commerce platform has an optional usage-reporting feature that sends the platform vendor technical and configuration information about the store itself, plus the administrator contact address, to support the software. This concerns the shop’s own configuration rather than tracking of your browsing, and it operates on the basis of our legitimate interest in maintaining the platform.
International transfers of personal data
We are established in Switzerland. Depending on where you are, sending us an order or a message is itself a transfer of your data to Switzerland. Switzerland is recognised by the European Commission as providing an adequate level of protection for personal data transferred from the EEA.
Some recipients described above may be located outside Switzerland and the EEA, or may use infrastructure there — this is particularly likely for carriers delivering to your country and for customs authorities. Where personal data is transferred to a country that does not benefit from an adequacy decision, we rely on appropriate safeguards, in particular contractual clauses approved for that purpose, together with any additional measures the circumstances require.
Where delivery to your country requires it, the data needed for customs clearance is transmitted to the customs authorities of the destination country. That transfer is necessary to perform the contract and to comply with import law, and it cannot be avoided if you want the parcel to arrive.
You can ask us for information about the safeguards applying to a specific transfer by writing to info@framed-and-famous.com.
How long we keep it
We keep personal data only for as long as we need it for the purpose it was collected for, and then for as long as we are required or entitled to retain it.
- Order, payment and invoicing records are retained for the period required by Swiss commercial and tax law for business records, which is currently ten years from the end of the financial year concerned.
- Personalisation data is part of the order record and is retained with it, because it evidences what was ordered and produced.
- Customer service correspondence is kept for as long as needed to handle the matter and for a reasonable period afterwards in case it resurfaces.
- Damage claim files, including uploaded photographs, are kept until the claim is resolved and for a reasonable period afterwards to cover any carrier, insurance or legal follow-up.
- Contact form submissions that do not become an order or a claim are kept only as long as needed to deal with the enquiry.
- Server and security logs are kept for a short period for security and diagnostic purposes and are then overwritten or deleted.
- Cookie consent records are kept for the lifetime of the consent cookie, so we can show that a choice was made and honour it.
When a retention period ends, data is deleted or irreversibly anonymised. Where deletion is not immediately possible — for example in a backup — the data is isolated from further processing until deletion is possible.
If you want to know the retention period applying to a specific record, ask us and we will tell you.
How we protect it
We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure and alteration. These include transport encryption for data sent between your browser and the site, access controls limiting who can see order data, hardening of the website platform, validation and restriction of anything uploaded through the site, and the removal of unnecessary interfaces and information disclosure.
Attachments sent through the contact form are restricted by file type and size, checked on the server rather than only in the browser, held outside the publicly accessible part of the site, and removed once the message has been delivered.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach occurs that is likely to result in a high risk to your rights, we will inform you and the competent authority as required by law.
Automated decision-making and profiling
We do not carry out automated decision-making that produces legal effects concerning you or similarly significantly affects you, and we do not build marketing profiles of you.
Payment providers may run automated fraud screening on a transaction as part of authorising it. Where that happens it is carried out by the provider under its own terms and privacy notice, and an order declined on that basis can always be reviewed by contacting us.
Your rights
Subject to the conditions and exceptions in the law that applies to you, you have the right to:
- Access — obtain confirmation of whether we process your data and receive a copy of it, together with information about the processing.
- Rectification — have inaccurate data corrected and incomplete data completed.
- Erasure — have data deleted where we no longer have a valid ground to keep it. This does not extend to records we must retain by law, such as accounting records of a completed order.
- Restriction — require us to limit processing in certain circumstances, for example while an accuracy dispute is resolved.
- Objection — object to processing based on our legitimate interests, on grounds relating to your particular situation.
- Data portability — receive data you provided to us in a structured, commonly used, machine-readable format, and have it transmitted to another controller where technically feasible.
- Withdraw consent — where processing is based on consent, withdraw it at any time. Cookie consent can be changed at any point using the cookie preferences control in the footer. Withdrawal does not affect the lawfulness of processing carried out before it.
How to make a request. Write to info@framed-and-famous.com or use our contact form, stating what you are asking for. So that we do not disclose your data to someone else, we may ask for information that lets us verify who you are — for an order-related request, the order number and the email address used to place it is usually enough. We respond within the period required by applicable law, normally within one month, and will tell you if we need longer.
Exercising these rights is free of charge unless a request is manifestly unfounded or excessive.
Complaints
If you are unhappy with how we handle your personal data, please raise it with us first at info@framed-and-famous.com — most issues are quickest to resolve directly.
You also have the right to complain to a supervisory authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC). If you are in the EEA or the UK, you may complain to the data protection authority of the country where you live, where you work, or where you consider the issue arose.
Children
This website is intended for adults. We do not knowingly collect personal data from children, and orders may only be placed by someone who meets the age requirement in our Terms & Conditions. If you believe a child has provided us with personal data, please contact us and we will delete it.
Changes to this policy
We may update this policy to reflect changes in how we work, in the services we use, or in the law. The current version is always published here and carries the “Last updated” date shown at the top of the page.
Where a change materially affects how we use your personal data, we will take reasonable steps to bring it to your attention — for example by a notice on the site or, where appropriate and where we hold your address for that purpose, by email. Where a change requires your consent, we will ask for it before it takes effect.
Contact
For anything concerning this policy or your personal data:
- Email: info@framed-and-famous.com
- Post: SAdema SNC, Impasse des Charmilles 2, 1624 La Verrerie, Switzerland