Privacy policy
Version effective as of September 30, 2026. This privacy policy describes how Swigift processes personal data, in accordance with the Federal Data Protection Act (nLPD) and, for individuals located in the EU, the GDPR.
1. Data controller
Swigift Varin, Chemin de la Fenatte 12, 2824 Vicques (Val Terbi) – ID: CHE-309.525.138 (complete details in the legal notice) – is responsible for the processing of the data collected via the swigift.ch website. Contact: info@swigift.ch or via the Contact page.
2. Collected data
During an order: name, email address, contents of the receipt (message, possible photo), if applicable, and delivery details. During a partnership request: business identity, contact details, IBAN (in encrypted form), transmitted media, as well as the date, partially anonymized IP address and the version of the terms and conditions upon acceptance. During the use of the contact form: name, email and message.
3. Purposes
Order fulfilment (voucher generation and dispatch, transactional emails), partnership management (validation, pay-outs), responding to contact enquiries, compliance with legal obligations (accounting, proof), and – with your consent – audience measurement and advertising. Newsletter: if you subscribe to our newsletter (via the website form, with confirmation of your address via a link sent by email) or accept it when placing your order (checkbox, unchecked by default), your email address, language, date and source of your registration (as well as the confirmation date, which serves as proof of your consent) and, if you are a customer, your name and information about your orders (number, amount, partners) are used to send you our gift ideas and offers, via our email service provider Brevo. You can withdraw this consent at any time using the unsubscribe link in each email or via the Contact page.
4. Payment (Stripe)
Payments are processed by Stripe Payments Europe Ltd. Swigift does not store any card numbers. Stripe processes your payment data as a processor; see Stripe's privacy policy.
5. Cookies and similar technologies
The site uses strictly necessary cookies (shopping cart, payment session) that do not require consent, as well as local storage of your browser preferences (favorites, display). Audience and advertising measurement cookies (e.g. Google Analytics, Meta) can be used only if you accept them via the consent banner; you can change your choice at any time via the «Manage cookies» link at the bottom of each page. These services (Google Analytics: Google Ireland Ltd / Google LLC; Meta pixel: Meta Platforms Ireland Ltd) may involve a transfer of data to the United States.
6. Data disclosure
The data necessary for the execution of a transaction (code, service provided, amount) are transmitted to the issuing partner. No data is sold to third parties. Technical providers (hosting: Infomaniak Network SA, Switzerland; e-mailing: Brevo; payment: Stripe) may process data on behalf of Swigift, within the framework of contracts compliant with the nLPD/GDPR.
7. Conservation
Order data is kept for the time necessary to perform the contract and then for the statutory retention periods (10 years for accounting records, Art. 958f CO). The PDF vouchers are automatically purged after their retention period.
8. Safety
TLS encryption in transit, IBANs encrypted at rest (AES-256), sensitive files stored out of public access and served via time-limited signed links.
9. Your rights
You have the rights of access, rectification, erasure, opposition and portability of your data (Articles 25 ff of the LPD; Article 15 ff of the GDPR, if applicable). Exercise them by email to info@swigift.ch or via the Contact page. You can also contact the Federal Data Protection and Transparency Officer (PFPDT).
10. Modifications
This policy may be adapted, in particular when new measurement or advertising tools are added. The version published on this page shall prevail.