Privacy policy

PRIVACY POLICY

Last updated: 6 October 2026

1. About This Privacy Policy

This Privacy Policy explains how RIVE & RITUEL collects, uses, stores and shares personal data when you visit our website, create or use a customer account, purchase or enquire about a product, use a membership service, submit measurements or customisation information, request an exchange or store credit, subscribe to our communications, or otherwise interact with us.

RIVE & RITUEL is a Swiss premium swimwear and bodywear brand offering ready-to-order, made-to-order and selected personalised garments.

This Privacy Policy applies primarily to interactions and purchases made directly through the RIVE & RITUEL website.

2. Who Is Responsible for Your Personal Data?

The controller responsible for the processing of personal data through this website is:

RIVE & RITUEL
Esplanade de Pont-Rouge 9a
1212 Lancy
Switzerland

Email: customer.care@riveandrituel.com

Throughout this Privacy Policy, “RIVE & RITUEL”, “we”, “us” and “our” refer to the business identified above.

Our processing of personal data is primarily subject to applicable Swiss data-protection law. Additional privacy laws, including the EU General Data Protection Regulation (“GDPR”) or UK GDPR, may apply depending on where you are located and how you interact with us.

3. Personal Data We Collect

The information we collect depends on how you interact with RIVE & RITUEL.

We may collect:

  • Your name
  • Email address
  • Telephone number
  • Billing address
  • Delivery address
  • Country or region
  • Preferred language
  • Products viewed or purchased
  • Product size, colour and quantity
  • Order number and order history
  • Purchase amount and currency
  • Discount or promotional information
  • Payment status
  • Shipping method
  • Tracking information
  • Customs information where required
  • Exchange or store-credit information
  • Customer-account information
  • Membership status, benefits or credits where applicable
  • Communication preferences
  • Correspondence with our customer-care team
  • Technical and website-usage information

We collect only information that is reasonably necessary for the purposes described in this Privacy Policy.

4. Orders and Purchases

When you place or attempt to place an order, we may process personal data in order to:

  • Confirm your order
  • Process payment
  • Produce or prepare your garment
  • Confirm size, colour or product specifications
  • Package and dispatch your order
  • Provide tracking information
  • Complete customs documentation
  • Communicate with you regarding your purchase
  • Manage an exchange or store credit
  • Investigate delivery issues
  • Provide customer support
  • Maintain legally required transaction records

Certain information is necessary for us to fulfil your order. If you do not provide the required information, we may be unable to accept, produce or deliver your purchase.

5. Payments

Payments are processed through Shopify Payments or another authorised payment provider made available during checkout.

Payment providers may process information such as your payment method, billing information, transaction reference, payment authorisation status, fraud-prevention information and refund or chargeback information.

RIVE & RITUEL does not ordinarily receive or store your complete payment-card number or card security code.

Payment providers process payment information in accordance with their own privacy policies and legal obligations.

6. Customer Accounts and Membership

If you create or use a RIVE & RITUEL customer account or membership, we may process information required to administer that relationship, including:

  • Account identification and authentication information
  • Saved delivery information
  • Order history
  • Membership status
  • Membership benefits or credits
  • Store-credit balance
  • Communication preferences
  • Account activity and security information

We use this information to operate your account, administer applicable membership benefits, maintain store-credit balances, provide customer support and protect accounts from unauthorised use.

7. Made-to-Order, Measurements and Personalisation

RIVE & RITUEL offers made-to-order garments and may offer selected personalised or bespoke services.

Where required to provide these services, we may collect:

  • Body measurements
  • Garment size
  • Fit preferences
  • Coverage or support preferences
  • Requested garment alterations
  • Colour selections
  • Personalisation instructions
  • Photographs voluntarily provided to explain a fit or construction requirement
  • Notes relating to an approved specification

We use this information only where reasonably necessary to assess, produce, alter or support the requested garment.

Measurements and approved specifications may also be retained where reasonably necessary to respond to fit concerns or provide a repeat service requested by you.

Please do not send medical diagnoses or other sensitive health information unless we specifically request information that is genuinely necessary to accommodate an order.

8. Exchanges, Returns and Customer Care

When you contact us regarding an order, exchange, delivery problem or product issue, we may process information including your order number, product details, reason for contacting us, replacement preferences, correspondence and photographs of a garment or parcel where relevant.

We may retain reasonable records of customer-service matters to:

  • Resolve your request
  • Document what was agreed
  • Assess garment quality
  • Investigate missing or damaged deliveries
  • Prevent fraud
  • Manage disputes
  • Establish, exercise or defend legal claims

Please do not send payment-card details, identity documents or sensitive personal information through ordinary customer-service communications unless specifically requested through an appropriate channel.

9. Website and Device Information

When you visit our website, Shopify and authorised service providers may automatically collect certain technical information.

This may include:

  • IP address
  • Device type
  • Browser type
  • Operating system
  • Approximate location derived from your IP address
  • Language and regional settings
  • Pages and products viewed
  • Basket activity
  • Referring website or marketing source
  • Date and time of visits
  • Session information
  • Cookie or similar identifiers
  • Website performance and error information

We use this information to operate and secure our website, understand how customers interact with it, improve the shopping experience and measure website performance.

10. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Some cookies are necessary for the website to operate. These may be used for functions such as maintaining your shopping basket, processing checkout, keeping customer accounts secure, preventing fraud and remembering privacy choices.

Other technologies may be used, where permitted, for functionality, analytics or marketing purposes.

Where consent is legally required, non-essential cookies and similar technologies will not be activated until you have made the relevant choice.

You can review or change your choices through the cookie and privacy controls available on our website.

Blocking certain cookies may affect some website functionality.

11. Why We Use Personal Data

We process personal data only where we have a legitimate purpose for doing so.

Depending on the activity and the law that applies, we may process your information because:

  • It is necessary to perform our contract with you, including producing and delivering your order
  • It is necessary to take steps requested by you before entering into a contract
  • We are required to comply with a legal obligation
  • It is necessary for our legitimate interests in operating and protecting RIVE & RITUEL, provided those interests do not override your rights
  • You have given consent where consent is required

Our legitimate interests may include providing customer service, improving our website and products, preventing fraud, securing our systems, maintaining appropriate business records and understanding the performance of our business.

12. Marketing Communications

Where permitted by applicable law, we may send you communications about RIVE & RITUEL, including information concerning:

  • New collections
  • Products
  • Brand editorial content
  • Membership benefits
  • Invitations
  • Restocks
  • Special offers
  • Other RIVE & RITUEL news

Where consent is required, we will send marketing communications only after receiving that consent.

You may unsubscribe from promotional emails at any time by selecting the unsubscribe link included in the communication or by contacting us.

Unsubscribing from marketing does not prevent us from sending transactional or administrative communications relating to an order, delivery, account, membership, store credit, security issue or customer-service request.

13. Shopify

Our online store is hosted by Shopify.

Shopify provides the e-commerce infrastructure that enables us to operate our website, display products, manage customer accounts, process orders, receive payments and provide other online-store functionality.

Information submitted through our store may therefore be transmitted to and processed by Shopify and its authorised service providers.

Shopify may process certain personal data on our behalf in providing its services and may also process certain information for its own purposes in accordance with its applicable privacy terms.

14. Who We Share Personal Data With

We do not disclose personal data unless reasonably necessary for the operation of RIVE & RITUEL, provision of your order or compliance with our legal obligations.

Personal data may be shared with:

Shopify, which hosts and supports our online store.

Payment providers, banks and card networks, where required to authorise payments, provide refunds, prevent fraud or resolve disputes.

Shipping and logistics providers, including postal operators, couriers, customs providers and destination-country delivery partners where required to deliver, track or return an order.

Production and fulfilment personnel or providers, where necessary to manufacture, alter, inspect, package or fulfil a garment.

Technology and professional service providers, where required for services such as website infrastructure, email delivery, accounting, analytics, cybersecurity, fraud prevention, customer service or legal advice.

Public authorities or legal recipients, where disclosure is required by applicable law, a valid legal request or for the establishment, exercise or defence of legal claims.

We provide service providers only with information reasonably necessary for the relevant purpose.

15. International Processing and Transfers

RIVE & RITUEL is based in Switzerland, but Shopify and some of our service providers operate internationally.

Personal data may therefore be stored, accessed or processed outside Switzerland, including within the European Economic Area, the United Kingdom, Canada, the United States, or the destination country for an international delivery.

Data-protection standards may differ between countries.

Where applicable law requires additional safeguards for an international transfer, we use a legally recognised transfer mechanism or other appropriate safeguard.

Additional information about applicable safeguards may be requested using the contact information below, subject to legitimate confidentiality restrictions.

16. How Long We Keep Personal Data

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and to satisfy applicable legal, accounting, tax, contractual and dispute-resolution requirements.

Order, invoice and accounting records that are subject to Swiss accounting requirements may be retained for 10 years, as required by applicable Swiss law. Swiss federal guidance confirms the ten-year retention requirement for accounting records under Article 958f of the Swiss Code of Obligations.

Customer-account information may be retained while the account remains active and for an appropriate period afterwards where necessary to complete outstanding transactions, maintain store credit, prevent fraud or address legal claims.

Measurements and approved made-to-order specifications may be retained for as long as reasonably necessary to complete your order, respond to fit concerns or provide a repeat service requested by you.

Marketing information is retained until you unsubscribe, withdraw consent or we otherwise determine that it should no longer be used.

Where information is no longer required, we will delete or anonymise it, unless continued retention is required by law.

17. Security

We use reasonable organisational and technical measures designed to protect personal data against unauthorised access, unlawful use, accidental loss, alteration, disclosure or destruction.

These measures may include secure authentication, access controls, encrypted transmission, payment tokenisation, fraud-detection measures, trusted service providers and appropriate confidentiality requirements.

No internet transmission or electronic storage system can be guaranteed to be completely secure.

You are responsible for protecting access to your email account, devices and RIVE & RITUEL customer account.

18. Children's Privacy

RIVE & RITUEL may sell products designed for children, but our website, checkout, customer accounts and marketing services are intended for adults.

A parent or legal guardian should place and manage any order concerning a child.

We do not knowingly ask children under 16 to independently create customer accounts, place orders or subscribe to marketing communications.

If you believe that a child has provided personal data directly to us without appropriate permission, please contact us so that we can investigate and take appropriate action.

19. Purchases Through Independent Retailers

This Privacy Policy principally applies to purchases and interactions made directly through RIVE & RITUEL.

If you purchase a RIVE & RITUEL product through an independent retailer or marketplace, that retailer will generally be responsible for the personal information collected through its own checkout, payment and delivery process.

The retailer's privacy policy will apply to that processing.

RIVE & RITUEL may separately receive limited information where reasonably necessary to produce or fulfil an order, provide product support, investigate an issue, process an authorised service request or comply with legal requirements.

20. Your Privacy Rights

Depending on where you live and the law applying to our processing, you may have rights concerning your personal data.

These may include the right to:

  • Ask whether we process personal data about you
  • Request access to your personal data
  • Request correction of inaccurate or incomplete information
  • Request deletion where applicable
  • Request restriction of certain processing
  • Object to certain processing
  • Object to direct marketing at any time
  • Request portability of certain information where applicable
  • Withdraw consent where processing is based on consent
  • Make a complaint to an appropriate data-protection authority

These rights are not absolute and may be subject to applicable legal requirements or exceptions.

Withdrawal of consent does not affect the lawfulness of processing that occurred before consent was withdrawn.

Where we are legally required to verify your identity before responding to a request, we may ask for reasonable information necessary to do so.

21. Exercising Your Rights

To exercise a privacy right or ask a question about your personal data, contact:

customer.care@riveandrituel.com

or write to:

RIVE & RITUEL
Esplanade de Pont-Rouge 9a
1212 Lancy
Switzerland

Please include enough information for us to identify the relevant account, order or records and understand your request.

We will respond within the period required by applicable law.

22. Complaints

If you have concerns about the way RIVE & RITUEL handles your personal data, please contact us using the details above.

You may also have the right to submit a complaint to a competent data-protection authority.

For Switzerland, the federal data-protection authority is the:

Federal Data Protection and Information Commissioner (FDPIC)
Eidgenössischer Datenschutz- und Öffentlichkeitsbeauftragter (EDÖB)

Where EU or UK data-protection law applies, you may also have the right to complain to the competent supervisory authority in the relevant country.

23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our website, products, services, service providers, technology or legal obligations.

The latest version will be published on this page together with an updated revision date.

Where required by law, we will provide additional notice or obtain consent before making a material change to how personal data is processed.

24. Contact RIVE & RITUEL

For questions, complaints or privacy-rights requests, please contact:

RIVE & RITUEL
Esplanade de Pont-Rouge 9a
1212 Lancy
Switzerland

Email: customer.care@riveandrituel.com