Legal

Privacy policy

Last updated: 8 June 2026

This policy explains how RetailAdvantage.ai (“we”, “us”), a service operated by Orange IT Services SA, collects, uses and protects personal data when you visit retailadvantage.ai or contact us through this website. We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

Note for the site owner: the technical descriptions below reflect what this site actually does today. Have the full policy reviewed by qualified counsel — and add a DPO or EU representative if one is required for your processing — before relying on it.

1. Who is responsible (controller)

The data controller is:

2. What data we collect

We collect personal data in two situations.

a) When you submit a form (the free-audit form or the investor enquiry form):

  • Identity & contact: your name and work email.
  • Business context you choose to provide: company / store URL, ecommerce platform, monthly ad-spend range, and your message (audit form); fund/firm name and indicative ticket size (investor form).

b) When you browse the site — usage data via analytics (only with your consent; see section 4):

  • Pages viewed, approximate location (derived from a truncated IP, not stored by us), device and browser type, referrer, and basic interaction events such as a form submission.

We do not knowingly collect special categories of data, and the site is not directed at children.

3. Why we use it and our legal basis

  • To respond to your enquiry and prepare a possible engagement — legal basis: performance of / steps prior to a contract (GDPR Art. 6(1)(b)) and our legitimate interest in replying to business enquiries (Art. 6(1)(f)). Under the FADP, this is processing necessary to deal with your request.
  • To measure and improve the website via Google Analytics 4 — legal basis: your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time.

4. Cookies & analytics consent

We use Google Analytics 4 (GA4) with Google Consent Mode v2. Analytics storage is set to denied by default: no analytics cookies or identifiers are written until you choose Accept in our cookie banner. If you choose Decline, no analytics cookies are set.

When you accept, GA4 sets cookies (typically _ga and _ga_*, lasting up to ~2 years) to distinguish visitors and measure usage. We do not use these for advertising, and Google Ads / ad-personalization signals remain denied.

Changing your choice: use the link in the footer to reopen the banner and change or withdraw your consent at any time. You can also delete cookies in your browser settings.

Strictly necessary technical functioning of the site does not rely on tracking cookies and therefore needs no consent.

5. Who we share data with (processors)

We do not sell personal data. We share it only with service providers who process it on our behalf:

  • Resend — delivers your form submission to our team by email. It processes the contents of the form you submit.
  • Google (Google Analytics 4) — provides website analytics, only after you consent.
  • Hosting / infrastructure — the website and contact endpoint are hosted on our infrastructure provider, which processes technical connection data (e.g. server logs) to operate and secure the service.

6. International transfers

Some providers above may process data outside Switzerland/the EEA (for example in the United States). Where that happens, transfers are covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses and the equivalent FADP recognitions, together with each provider's technical and organisational measures.

7. How long we keep it

  • Form submissions / enquiry emails: kept for as long as needed to handle your request and any resulting relationship, then deleted or archived in line with applicable legal retention obligations.
  • Analytics data: retained according to our GA4 configuration (and the cookie lifetimes noted above); aggregated reports may be kept longer.

8. Your rights

Subject to the FADP and, where applicable, the GDPR, you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected and incomplete data completed;
  • have your data deleted, and to restrict or object to certain processing;
  • receive certain data in a portable format;
  • withdraw consent (e.g. for analytics) at any time, without affecting prior lawful processing.

To exercise any of these, email hello@retailadvantage.ai. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EEA, your local supervisory authority.

9. Data security

We use appropriate technical and organisational measures to protect personal data, including TLS encryption in transit, access controls, and a spam/abuse filter on our forms. No method of transmission over the internet is completely secure, but we work to protect your data and review our measures regularly.

10. Changes to this policy

We may update this policy to reflect changes in our practices or the law. The “last updated” date at the top shows the current version; material changes will be highlighted on this page.

11. Contact

Questions about this policy or your data? Email hello@retailadvantage.ai or write to Orange IT Services SA, Corso San Gottardo 34, Chiasso (CH).