Privacy policy

Privacy Policy

Last updated: 7 October 2025

Eat by Alex AG (“we”, “us”, “our”) respects your privacy and processes personal data in accordance with the Swiss Federal Act on Data Protection (revFADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Data Controller

EATbyalex AG
Giessereistrasse 14
8005 Zürich – Switzerland
Email: hello@eatbyalex.com
Phone: +41 78 977 79 90
VAT ID: CHE-200.658.809 MwSt

We are responsible for the processing of your personal data unless stated otherwise in this notice.

2. Personal Data We Collect

We collect the following categories of data:

  • Identity and contact information: name, email, phone number, billing and delivery addresses.

  • Order and payment data: purchase history, chosen payment method, transaction details.

  • Account data: login credentials, preferences, saved addresses.

  • Marketing data: newsletter subscriptions, campaign interactions, survey responses.

  • Technical data: IP address, browser type, operating system, device identifiers, website usage statistics.

3. Purpose and Legal Basis of Processing

We process your data for:

Purpose Legal Basis (revFADP / GDPR)
Order processing, delivery, invoicing Contract performance
Payment execution (Stripe, TWINT) Contract performance
Customer support Legitimate interest
Marketing communication (Omnisend) Consent
Website analytics (Google Analytics 4) Consent / Legitimate interest
Advertising performance (Meta Pixel) Consent
Security, fraud prevention, system maintenance Legitimate interest
Legal and tax obligations Legal requirement

4. Disclosure to Third Parties

We only share data when necessary for the purposes listed above:

Recipient Role Location
Shopify International Ltd. Ecommerce platform provider Ireland / Canada / USA
Stiftung Ancora Meilestei Fulfilment & packaging partner Wetzikon ZH, Switzerland
Swiss Post AG Delivery provider Switzerland
Stripe Payments Europe Ltd. Card payments processor Ireland / USA
TWINT AG Swiss mobile payments Switzerland
Google LLC (GA4) Analytics EU / USA
Meta Platforms Ireland Ltd. Advertising & analytics Ireland / USA
Omnisend Ltd. Email marketing automation EU
Digital Ocean LLC Cloud hosting & infrastructure EU / USA
GitHub Inc. Code repository, issue management USA

All service providers are bound by contract to handle your data securely and only for the stated purpose.

5. International Data Transfers

Some recipients (e.g. Shopify, Google, Meta, Stripe, Digital Ocean, GitHub) are located outside Switzerland or the EU/EEA.
Where necessary, we ensure an adequate level of protection through:

  • the Swiss Federal Council’s adequacy decisions, or

  • Standard Contractual Clauses (SCCs) approved by the European Commission and recognized by the FDPIC.

6. Data Retention

We store your data only as long as necessary:

  • Order and payment data: 10 years (Swiss accounting law).

  • Customer accounts: as long as the account remains active.

  • Marketing data: until you withdraw consent.

  • Analytics logs: up to 14 months (GA4 default).

After these periods, data are securely deleted or anonymised.

7. Your Rights

Under Swiss and EU law, you have the right to:

  • access and receive a copy of your data,

  • request correction or deletion,

  • withdraw consent at any time,

  • object to processing for direct marketing, and

  • request data portability (where applicable).

You can exercise these rights by contacting hello@eatbyalex.com.
We may require proof of identity for verification.

8. Cookies and Tracking

We use cookies and similar technologies to:

  • ensure site functionality (necessary cookies),

  • analyse usage (analytics cookies), and

  • personalise marketing (advertising cookies).

You can manage or disable cookies in your browser settings.
Where required, we obtain your consent through our cookie banner before setting non-essential cookies.

9. Marketing Communications

If you subscribe to our newsletter or agree to marketing emails, your data will be processed by Omnisend Ltd. on our behalf.
You can unsubscribe at any time using the link in each email.

10. Data Security

We use industry-standard encryption (SSL/TLS) and maintain secure hosting environments (Shopify, Digital Ocean).
Access to personal data is restricted to authorised staff and partners who require it to perform their duties.

11. Children’s Privacy

Our website and programs are not directed at individuals under 16 years of age. We do not knowingly collect data from minors.

12. Contact and Complaints

For any data protection questions or to exercise your rights, contact:
📧 hello@eatbyalex.com

If you are not satisfied with our response, you may contact the Swiss Federal Data Protection and Information Commissioner (FDPIC):
www.edoeb.admin.ch

13. Changes to This Policy

We may update this Privacy Policy periodically to reflect legal or operational changes.
The latest version will always be available at www.eatbyalex.com.