Privacy Policy

1. Data controller

Guillaume Rième, sole proprietorship (trading as UBÉRA), Route de Berne 223, 1066 Épalinges, Switzerland — contact: contact@ube-drink.ch.

2. Data collected and purposes

• Orders: first name, last name, e-mail, delivery address, items ordered, amounts — to perform the sales contract (delivery, receipt, follow-up, accounting).
• Payment: card details are entered directly with Stripe and never pass through our servers. We only keep a transaction reference.
• Newsletter: e-mail address, provided on voluntary sign-up — to send you our news. You can unsubscribe at any time via contact@ube-drink.ch.
• Customer reviews: display name, optional locality and the content of the review — published only after moderation.
• Business enquiries: contact details and message content — to respond to quote or partnership requests.
• Technical data: server logs (IP address, timestamp) required for the security and operation of the Site.

We do not carry out any profiling. With your explicit consent (the "Anonymous statistics" checkbox in the banner), we use Vercel Web Analytics, an anonymous audience-measurement tool that sets no cookies and collects no identifiable personal data. Without your consent, no measurement tool is loaded. You can withdraw your consent at any time via "Manage cookies" in the footer.

3. Cookies

The Site only uses cookies that are strictly necessary for its operation:

• NEXT_LOCALE — remembers your language (essential).
• ubera-consent — remembers your cookie choice (12 months).
• Stripe cookies — set only on the payment page, required for security and fraud prevention.
• ubera_account — keeps you signed in to your customer account, if you open one (30 days).
• Admin session cookie — reserved for the UBÉRA team, with no effect on visitors.

Your basket is kept in your browser's local storage (ubera-cart), on your device only. It is not a cookie: nothing is sent to the Site until you place the order.

No advertising or audience-measurement cookies are currently used. Should this change, your consent would first be requested via the consent banner.

4. Recipients and transfers abroad

Your data is processed by our technical service providers: Vercel Inc. (hosting, United States) and Stripe (payment, Ireland/United States). These transfers rely on the mechanisms recognised by the nFADP (in particular the Swiss-U.S. Data Privacy Framework and standard contractual clauses). We neither sell nor rent your data to third parties.

5. Retention periods

• Order data: 10 years (accounting obligation, Art. 958f of the Swiss Code of Obligations).
• Newsletter: until you unsubscribe.
• Reviews: for as long as they are published; deleted on request.
• Business enquiries: 2 years after the last contact.
• Technical logs: 12 months at most.

6. Your rights

In accordance with the nFADP, you have the right to access, rectify and erase your data, to receive a copy of it, and to object to its processing. To exercise these rights: contact@ube-drink.ch. You may also contact the Federal Data Protection and Information Commissioner (FDPIC).

7. Security

The Site is served exclusively over HTTPS (SSL/TLS encryption). Access to management data is protected by authentication and restricted to the UBÉRA team.

8. Changes

This policy may be adapted if the Site or the legislation evolves. The applicable version is the one published on this page, together with its version date.