Privacy Policy

1. Data controller

Guillaume Marcel Michel Rième, sole proprietorship (trading as UBÉRA), Route de Berne 223, 1066 Épalinges, Switzerland — contact: contact@ube-drink.ch.

2. Data collected and purposes

• Orders: first name, last name, e-mail, delivery address, items ordered, amounts — to perform the sales contract (delivery, receipt, follow-up, accounting).
• Payment: card details are entered directly with Stripe and never pass through our servers. We only keep a transaction reference.
• Newsletter: e-mail address, provided on voluntary sign-up — to send you our news. You can unsubscribe at any time via contact@ube-drink.ch.
• Customer reviews: display name, optional locality and the content of the review — published only after moderation.
• Google Customer Reviews survey: after a payment, the confirmation page offers you a short survey from Google about your order. To display this offer, your e-mail address, the order reference, the delivery country and the estimated delivery date are sent to Google. Google only sends you the survey if you accept it. Your rating and review may then be published by Google, in accordance with its privacy policy (policies.google.com/privacy).
• Business enquiries: contact details and message content — to respond to quote or partnership requests.
• Technical data: server logs (IP address, timestamp) required for the security and operation of the Site.

With your explicit consent (the "Audience analytics" checkbox in the banner), we use Google Analytics 4 to measure page views, traffic sources, device types and commerce events. We do not intentionally send this tool names, e-mail or postal addresses, or payment data. Google advertising storage and personalisation are disabled. Without your consent, no measurement tool is loaded. You can withdraw your consent at any time via "Manage cookies" in the footer.

3. Cookies

The Site uses cookies that are strictly necessary for its operation and, only with your consent, audience-measurement cookies:

• NEXT_LOCALE — remembers your language (essential).
• ubera-consent — remembers your cookie choice (12 months).
• Stripe cookies — set only on the payment page, required for security and fraud prevention.
• _ga and _ga_* — allow Google Analytics to distinguish visits, only after your consent and for no more than 12 months.
• Google Customer Reviews cookies — may be set on the order confirmation page by Google's survey module.
• ubera_account — keeps you signed in to your customer account, if you open one (30 days).
• Admin session cookie — reserved for the UBÉRA team, with no effect on visitors.

Your basket is kept in your browser's local storage (ubera-cart), on your device only. It is not a cookie: nothing is sent to the Site until you place the order.

No advertising cookies are used. Google Analytics measurement cookies are disabled by default; refusing them never prevents access to the Site, basket or checkout.

4. Recipients and transfers abroad

Your data is processed by our technical service providers: Vercel Inc. (hosting, United States), Stripe (payment, Ireland/United States) and Google Ireland Limited (Google Analytics and Google Customer Reviews, Ireland/United States). These transfers rely on the mechanisms recognised by the nFADP (in particular the Swiss-U.S. Data Privacy Framework and standard contractual clauses). We neither sell nor rent your data to third parties.

5. Retention periods

• Order data: 10 years (accounting obligation, Art. 958f of the Swiss Code of Obligations).
• Newsletter: until you unsubscribe.
• Reviews: for as long as they are published; deleted on request.
• Business enquiries: 2 years after the last contact.
• Technical logs: 12 months at most.

6. Your rights

In accordance with the nFADP, you have the right to access, rectify and erase your data, to receive a copy of it, and to object to its processing. To exercise these rights: contact@ube-drink.ch. You may also contact the Federal Data Protection and Information Commissioner (FDPIC).

7. Security

The Site is served exclusively over HTTPS (SSL/TLS encryption). Access to management data is protected by authentication and restricted to the UBÉRA team.

8. Changes

This policy may be adapted if the Site or the legislation evolves. The applicable version is the one published on this page, together with its version date.