Privacy Policy

1. What this covers

This policy describes what personal data nordcierge.ch collects, why, and how it's handled — covering the quote request form and (once live) our email newsletter. It's written to reflect what the site actually does, not a generic template.

2. What we collect

Through the quote request form (/quote):

• Name and email address (required)
• Business or property name and category (required)
• City/region (required)
• An optional message
• An optional photo upload (up to 20MB)

If you subscribe to our newsletter once it's live, we collect your email address for that purpose only.

We use Plausible Analytics for basic, privacy-friendly site analytics — it doesn't use cookies and doesn't collect personal data or track you across other sites. See section 7.

3. Why we collect it

Quote form data is collected to respond to your request and prepare a proposal — the legal basis is taking steps at your request prior to a possible contract. Newsletter data is collected on the basis of your consent when you subscribe, and you can withdraw it at any time by unsubscribing.

4. Who processes it

Quote form submissions are sent to us via:

• Resend — delivers the email notification of your submission to our inbox.
• Supabase — stores a copy of your submission (and any uploaded photo) in our database, hosted in the EU (Ireland).
• Vercel — hosts the website itself and processes the request as it passes through.

We don't sell your data, and we don't use it for advertising or share it with anyone beyond what's needed to respond to your request.

5. International data transfers

Resend and Vercel are US-based companies; data passing through them may be processed outside Switzerland/the EU. The specific legal safeguards this requires under Swiss data protection law (the safeguards a Swiss-US data transfer needs) have not yet been reviewed by a lawyer — see the note at the bottom of this page.

6. How long we keep it

We don't currently have a formal automatic-deletion schedule for quote submissions — this is a gap, not a considered policy, and is flagged internally for Legal & Risk and Operations & Technology to close. Until then, you can request deletion at any time (see section 8) and we'll act on it manually.

7. Cookies & tracking

We use Plausible Analytics, which is cookie-free and doesn't track individual visitors across sites or build an advertising profile — this is specifically why we chose it over Google Analytics. We don't run advertising pixels or third-party trackers on this site.

8. Your rights

You can ask us what data we hold about you, ask us to correct it, ask us to delete it, or withdraw consent (e.g. unsubscribe from the newsletter) at any time. Contact us at cavalcantedacostaluca@gmail.com and we'll act on it.

9. Children

This site is directed at businesses, not children, and we don't knowingly collect data from children.

10. Changes to this policy

We may update this policy as our tools or practices change — the "last updated" date at the top reflects the most recent revision.