Privacy Policy

Introduction

Vegalab SA ("we" or "us" or "our") respects the privacy of our users ("user" or "you"). This Privacy Policy explains how we collect, use, disclose and safeguard your information when you visit our website vegalab.com and any related platforms, online stores or applications (collectively, the "Site"). Please read this policy carefully. If you disagree with its terms, please discontinue use of the Site.

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the "Last updated" date of this Privacy Policy. You are encouraged to periodically review this Privacy Policy to stay informed of updates. Your continued use of the Site after the posting of changes constitutes your acceptance of such changes.

Information we collect

We only collect information needed to operate this website, respond to enquiries and fulfil orders. Specifically:

• Information you provide — when you use our contact form we collect your name, company (optional), email address and the content of your message. If you place an order through our online store, the store processes the order and delivery details you provide.
• Usage and device data — when you visit the Site, our servers and analytics tools may record standard technical information such as IP address, browser type, pages viewed, referring page and approximate (country/region-level) location.
• Cookies and similar technologies — see "Cookies and analytics" below.

We do not collect special-category data, and we do not knowingly collect information from children.

How we use your information

• To respond to your enquiries and provide requested information or documentation.
• To process and fulfil orders placed through our online store.
• To operate, secure, maintain and improve the Site and understand how it is used (aggregate analytics).
• To comply with legal obligations.

We do not sell your personal information.

Legal bases (EEA, UK & Switzerland)

Where the EU/UK GDPR or the Swiss Federal Act on Data Protection (DSG/FADP) applies, we rely on: your consent (e.g. for non-essential analytics cookies); performance of a contract (to fulfil orders); and our legitimate interests (to respond to enquiries and keep the Site secure). You may withdraw consent at any time.

Cookies and analytics

We use a consent banner to control non-essential cookies. The following may run on the Site:

• Umami — privacy-friendly, cookieless aggregate analytics. Runs without cookies and does not identify individual visitors.
• Google Analytics 4 (GA4) and AFS Analytics — measurement and audience analytics. These load only after you accept analytics cookies via the consent banner.
• Shopify — our online store is operated on Shopify, which sets cookies needed to browse and check out when you visit the store.
• Essential — limited cookies/local storage needed to remember your consent choice and keep the Site working.

You can accept or decline non-essential cookies in the banner and change your choice at any time by clearing site data. Some analytics providers may process data outside your country.

How we share information

We share personal information only with: service providers acting on our behalf (e.g. website hosting, the analytics tools listed above, and Shopify for store orders); and authorities or advisors where required by law or to protect our legal rights. We do not sell or rent your personal information, and we do not share it for cross-context behavioural advertising.

International transfers

Vegalab SA is based in Switzerland. Some service providers may process data in other countries. Where required, such transfers are made under appropriate safeguards (for example, EU Standard Contractual Clauses or equivalent).

Data retention

We keep contact-enquiry data only as long as needed to handle your request and for a reasonable follow-up period, and order data for as long as required for the transaction and applicable tax/legal record-keeping. Aggregate analytics data is retained according to each provider's standard retention settings. We then delete or anonymise the data.

Your rights

Depending on where you live, you may have the right to access, correct, delete, port or restrict processing of your personal information, to object to certain processing, and to withdraw consent.

• EEA / UK / Switzerland (GDPR, DSG/FADP): the rights above, and the right to lodge a complaint with your data protection authority (in Switzerland, the FDPIC).
• California (CCPA/CPRA): the right to know, delete and correct personal information, and to opt out of sale/sharing. We do not sell or share personal information as defined by the CCPA. You may exercise these rights without discrimination.

To exercise any right, contact us using the details below; we may need to verify your identity before responding.

Data controller

The data controller is Vegalab SA, Aegeristrasse 5, 6300 Zug, Switzerland. For privacy requests, email [email protected].

Changes to this policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date above when we do. Your continued use of the Site after an update constitutes acceptance of the revised policy.