Data Protection Notice

1. Responsible Body

The entity responsible for processing personal data in connection with the services and website of Deluxe is:

Deluxe Consultoria – Cristina Nantsen

Email: info@cristinanantsen.ch

Telephone: +41 79 352 18 31

For questions regarding the processing of personal data, please use the contact details above.

2. General Information

The protection of personal data is important to Deluxe.

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and other applicable data protection legislation.

This Data Protection Notice explains what personal data we collect, why we process it, who may receive it, how long it is retained and what rights individuals may have under applicable law.

3. Collection and Processing of Personal Data

We may process personal data that customers provide directly, that is generated when they use our website or booking platform, or that is necessary to provide our services.

Depending on the service, this may include:

• First and last name.
• Email address and telephone number.
• Appointment and booking information.
• Payment and transaction information.
• Messages and other communications.
• Personal style preferences, lifestyle information and image objectives.
• Body proportion information and measurements, where relevant to the service.
• Photographs provided by the customer for consultation purposes.
• Colour analysis results, personalized palettes, shopping lists and outfit plans.
• Other information voluntarily provided and necessary to deliver the selected service.
• Technical information associated with website or platform use, where collected.

We process this information for purposes including:

• Managing bookings and appointments.
• Processing payments and maintaining transaction records.
• Providing image consulting and personal styling services.
• Preparing personalized analyses, reports and other deliverables.
• Communicating with customers and providing agreed follow-up support.
• Responding to enquiries and handling customer requests.
• Fulfilling legal and contractual obligations.
• Maintaining the security and proper functioning of our website and services.
• Understanding website usage and measuring marketing effectiveness, where applicable and lawfully configured.

We aim to collect only personal data that is relevant to these purposes.

4. Appointment Bookings and Payments

Appointments are managed through an online booking platform that also supports payment processing.

Booking platform: Deluxe operates its own booking platform.

Platform hosting provider: Infomaniak Network SA, Switzerland

Payment providers: TWINT (TWINT AG, Switzerland) and Stripe.

When a customer books or pays for a service, the information required to manage the booking and transaction may be processed by the platform provider and relevant payment service providers.

Deluxe receives the information necessary to manage appointments, confirm purchases and provide the services.

Payment information may be processed directly by the payment provider. The exact information processed and the applicable privacy terms depend on the platform and payment services used.

Customers can consult the relevant provider's privacy policy for further information about its data processing practices.

5. Contact and Communication

When customers contact Deluxe by email, telephone, WhatsApp, through the website or via another communication channel, the information they provide may be processed to respond to their enquiry, manage their booking, provide customer support or deliver an agreed service.

Communications relevant to a consultation may be retained where reasonably necessary for service delivery, documentation or the handling of contractual matters, subject to applicable law.

6. Communication via WhatsApp

Customers may contact Deluxe through WhatsApp.

When WhatsApp is used, personal data such as telephone numbers, profile information, message content and technical usage information may be processed by WhatsApp and its relevant service providers.

WhatsApp's own privacy policy applies to its processing of personal data. Further information: https://www.whatsapp.com/legal/privacy-policy

Customers who prefer not to use WhatsApp may contact Deluxe through another available communication channel.

7. Customer Consultation Records

In the course of image consulting and personal styling services, Deluxe may process information necessary to understand the customer's objectives and prepare the agreed deliverables.

Depending on the service, this may include consultation notes, style preferences, body proportion information, photographs supplied by the customer, colour analysis results, wardrobe information, shopping lists and planned outfits.

This information is used to provide and document the selected service, prepare personalized materials and deliver any agreed follow-up support.

Consultation records are handled confidentially and retained in accordance with the purposes of processing and applicable legal requirements.

8. Photos, Videos and Testimonials

Photographs, videos, testimonials or other identifiable customer materials will only be used for marketing, promotional or publication purposes with separate consent where required.

Such publication may include the Deluxe website, social media accounts or other promotional channels.

Consent to marketing use is separate from the purchase of a service. Refusing consent does not affect the customer's ability to book or receive the service.

Where consent is the legal basis for publication, it may be withdrawn for future use. Withdrawal does not affect processing that was lawful before the withdrawal, and it may not be possible to retrieve material that has already been lawfully published or shared by third parties.

9. Cookies and Similar Technologies

The Deluxe website may use cookies or similar technologies to support website functionality, improve security, understand website usage or measure marketing performance.

The technologies actually used will depend on the website's configuration and any services integrated into it.

Where required by applicable law, consent will be requested before using cookies or similar technologies that require consent.

Tools that may be used on the website: Google Analytics (visit analytics); Google Ads, Meta Pixel and TikTok Pixel (advertising and measurement).

These tools are only activated after the visitor has given consent through the cookie settings. Visitors can change or withdraw their choice at any time through the same settings.

10. Website Hosting and Technical Service Providers

The Deluxe website may rely on external hosting providers and other technical service providers to operate, secure and maintain the website.

Depending on the services configured, these providers may process technical information such as IP addresses, access logs, device information and other data required to deliver or protect the website.

Website hosting provider: Infomaniak Network SA, Switzerland

Business email provider: Infomaniak Network SA, Switzerland

Further information about the relevant providers and their privacy practices should be made available through their respective privacy policies.

11. Analytics and Advertising

Deluxe may use website analytics and online advertising services. Those services may process information about website visits, device and browser characteristics, interactions with website content and advertising-related events.

Such information may be used to understand website performance, measure advertising effectiveness or improve marketing campaigns.

Analytics providers: Google (Google Analytics)

Advertising providers: Google (Google Ads), Meta (Meta Pixel), TikTok (TikTok Pixel)

Where consent is required, relevant tracking technologies will only be activated after the necessary consent has been obtained. Customers may also have settings available through the relevant service providers.

12. Social Media and Third-Party Websites

The Deluxe website or communications may contain links to social media platforms or other third-party websites.

When customers visit those services, their personal data may be processed by the relevant providers under their own privacy policies.

Deluxe does not control the independent data processing practices of third-party websites.

13. Server Log Files and Website Security

When a customer visits the Deluxe website, technical information may be recorded automatically by the website or its hosting provider.

Depending on the configuration, this may include IP address, browser type, operating system, date and time of access, requested pages and referring URL.

Such information may be used to maintain website security, troubleshoot technical issues and ensure the proper functioning of the website.

14. Disclosure to Third Parties

Personal data may be disclosed to third parties where necessary for the purposes described in this Data Protection Notice, including:

• Booking and appointment management providers.
• Payment processing providers.
• Website hosting and technical service providers.
• Communication and messaging providers.
• Analytics or advertising providers, where used.
• Professional advisers and service providers where necessary.
• Public authorities or other recipients where disclosure is required by law or necessary to establish, exercise or defend legal claims.

Where third parties process personal data on behalf of Deluxe, appropriate arrangements will be made as required by applicable law.

Deluxe does not sell customers' personal data.

15. International Data Transfers

Some service providers may process or store personal data outside Switzerland. This may in particular apply to Stripe, WhatsApp, Google, Meta and TikTok.

Where personal data is disclosed abroad, Deluxe will comply with applicable Swiss data protection requirements. Depending on the destination and circumstances, this may require an adequate level of data protection, appropriate safeguards or another legally permitted basis for the transfer.

The countries involved and the applicable safeguards depend on the service providers and tools actually used.

Further information may be requested using the contact details in Section 1.

16. Storage Period

Personal data is retained only for as long as necessary for the purposes for which it was collected or as required by applicable law.

The retention period depends on the type of information and the reason for processing. Booking and transaction records may need to be retained for legal or accounting purposes. Consultation materials and communications may be retained for as long as necessary to provide the service, deliver agreed follow-up support or handle contractual matters.

When personal data is no longer required and no legal retention obligation applies, it will be deleted or anonymized, as appropriate.

17. Data Security

Deluxe takes appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration or disclosure.

Access to customer information should be limited to what is necessary for providing the services and managing the business.

No method of electronic transmission or storage can be guaranteed to be completely secure.

18. Rights of Data Subjects

Under applicable data protection law, individuals may have the right to request information about their personal data and, where the legal requirements are met, to request correction, deletion or other appropriate measures.

Individuals may also have rights concerning certain processing activities and may withdraw consent where processing is based on consent.

Requests can be submitted using the contact details in Section 1. Deluxe may need to verify the identity of the person making a request before responding.

These rights are subject to applicable legal conditions and restrictions, including obligations to retain certain records.

Individuals may also contact the competent data protection authority where appropriate.

19. Changes to This Data Protection Notice

Deluxe may update this Data Protection Notice to reflect changes in its services, data processing practices, technical tools or legal requirements.

The current version will be published on the Deluxe website together with its latest update date.

20. Contact

For questions about this Data Protection Notice or the processing of personal data, please contact:

Deluxe Consultoria – Cristina Nantsen

Email: info@cristinanantsen.ch

Telephone: +41 79 352 18 31