Privacy Policy

The data controller is Carnet Numéro, Rue de la Paix 7b, 1020 Renens – Switzerland.

For questions about this policy or to exercise your rights, email info@carnetnumero.ch.

Depending on how you use the website, we may process the following categories of data:

• identity and contact data: first and last name, postal address, email address and phone number;
• account data: login details, preferences and account history;
• order and billing data: ordered products, amount, currency, delivery address, payment status and information required for invoicing;
• payment data: technical information and transaction status provided by the payment provider; we do not store your full payment card details;
• communication data: customer service requests, returns and correspondence;
• technical data: IP address, device and browser type, language, security logs, pages viewed and performance data;
• marketing preferences: newsletter subscriptions, consent records and opt-outs.

We receive most data directly from you, for example when you place an order, create an account, contact us or subscribe to the newsletter.

Some technical data is generated automatically when you use the website. We may also receive information from payment, delivery or technical service providers where it is needed to process your order, secure the website or provide support.

We process your data to:

• manage your account, cart, orders, payments, deliveries, returns and after-sales requests;
• answer your questions and communicate with you about our services;
• comply with accounting, tax, commercial and legal obligations;
• secure the website, prevent fraud and detect incidents;
• operate the website, measure performance and improve the user experience;
• send newsletters or marketing communications where you have consented.

Where the GDPR applies, these activities rely, as appropriate, on performance of a contract, compliance with a legal obligation, our legitimate interests in operating and securing our business, or your consent. You may withdraw consent at any time without affecting processing carried out before withdrawal.

Your data is accessible only to people and providers that need it for their work. These may include:

• hosting, infrastructure, security and commerce platform providers;
• Sanity for content management;
• Stripe and, where offered, PayPal for payment processing;
• Resend for transactional emails or communications;
• Meilisearch for product search;
• Vercel Speed Insights for website performance measurement;
• carriers and logistics partners for delivery;
• our professional advisers and public authorities where required by law.

These providers act under their own legal obligations or on our instructions and receive only the information required for their role.

Some providers may process data outside Switzerland or the European Economic Area, including in the United States. Where the destination does not provide a recognised adequate level of protection, we rely on appropriate safeguards, such as recognised standard contractual clauses, and implement supplementary measures where necessary.

You may contact us for more information about the safeguards that apply.

We retain data only for as long as necessary for the purposes described above and to comply with our legal obligations.

• Accounting records, invoices and supporting information are generally retained for ten years under Swiss law.
• Account data is retained during our relationship with you and is then deleted or anonymised, subject to legal obligations and potential disputes.
• Customer service requests are retained for as long as necessary to resolve and follow up the matter.
• Newsletter data is retained until you unsubscribe or withdraw consent.
• Technical and security logs are retained for a period proportionate to security and diagnostic needs.

Longer retention may be necessary where required by law or to establish, exercise or defend legal claims.

The website uses cookies or similar technologies required for its operation, including to remember your language, maintain your session and preserve your cart.

Performance tools may also collect aggregated technical data. Where required by law or by the nature of the processing, non-essential technologies are activated only after your consent. You can change your choices through the cookie settings tool where available or through your browser settings. Refusing essential cookies may prevent parts of the website from working.

We use technical and organisational measures designed to protect data against loss, misuse, unauthorised access, alteration or disclosure. These measures include access restrictions, encrypted communications, backup management and incident monitoring.

No system can provide absolute security, so we regularly adapt our measures to the risks and technological developments.

Within the limits of applicable law, you may request access to, correction, deletion or delivery of your data, or restriction of its processing. You may also object to certain processing and withdraw consent.

To exercise your rights, email info@carnetnumero.ch. We may request reasonable proof of identity to protect your data. You may also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, where the GDPR applies, the competent supervisory authority in your country.

We do not make decisions that produce legal effects or similarly significantly affect you solely through automated processing. Automated security or fraud-prevention checks may, however, result in a manual review of an order.

We may update this policy to reflect legal, technical or service changes. The version published on this page is the applicable version, and the update date appears at the top.

For any question, email info@carnetnumero.ch.