Privacy policy
What we collect, why, who receives it, how long we keep it, and what rights you have.
Last updated: 4 November 2026
In short
- We collect only what we need to answer your request, process your order and keep this site running.
- Google Analytics runs only if you agree in the cookie banner.
- We do not sell your data and do not use it for advertising.
- You can ask for access, correction or deletion at support@replace-design.com.
Who is responsible
replace-design GmbH, Hauptstrasse 2, 6145 Fischbach LU, Switzerland, is responsible for the processing of personal data on this website. Contact for all privacy requests: support@replace-design.com, +41 79 742 55 07.
We handle your data in line with the Swiss Federal Act on Data Protection (revFADP). Where the EU General Data Protection Regulation (GDPR) applies, for example when you visit from the EU, we also follow it.
What we collect and why
Contact and booking requests. When you use the contact form, we collect your name, email address, phone number (for call requests), company (optional), your message, the service you are interested in, the page you sent the form from, and your language. We use this to answer you and to prepare the call or quote.
Orders. When you place an order, we collect your name, company (optional), email address, phone number, postal address, VAT/UID number (optional), the items you chose, your kickoff preferences and project notes, and the payment method. We use this to confirm the order, deliver the work, issue invoices and meet accounting duties. In test mode, card details you type stay in your browser. They are not sent to us and not stored.
Server logs. Our hosting provider records technical data when you visit, such as IP address, date and time, the page requested and browser type. This is needed to deliver and secure the site.
Analytics. With your consent only, we use Google Analytics 4 to see which pages are read and where visitors leave.
Storage in your browser. We store your cart, your checkout entries and your cookie choice. See the Cookie policy.
Legal bases
We process personal data to carry out a contract or pre-contractual steps (your enquiry or order), to meet legal duties (accounting), on the basis of our legitimate interest in running and securing a clear, working website, and on the basis of your consent (analytics). You can withdraw consent at any time with effect for the future, through "Cookie settings" in the footer.
Who receives your data
We pass data on only where needed:
- our hosting provider, which runs the website and delivers our email;
- our email service, which delivers form messages and order emails to us and to you;
- Google Ireland Limited and Google LLC, for Google Analytics, only if you consent;
- our accountants, tax advisers and banks, for invoicing and accounting;
- payment providers, once real payment methods are enabled on this site. Today card and TWINT run in test mode, and no payment data reaches a provider.
Links to other sites, such as OpenStreetMap, send data to those sites only after you click.
We do not sell personal data.
Transfers abroad
Some recipients, such as Google, may process data outside Switzerland and the EU/EEA, including in the United States. Where this happens, we rely on an adequacy decision, such as the Swiss-US and EU-US Data Privacy Framework for certified companies, or on standard contractual clauses.
How long we keep data
- Enquiries that do not lead to a contract: deleted after 12 months.
- Orders, contracts and invoices: 10 years, as the Swiss Code of Obligations requires.
- Server logs: deleted automatically after a short period set by our hosting provider.
- Google Analytics data: for the retention period set in our account, at most 14 months.
- Cookie choice: 12 months.
Security
We protect your data with technical and organisational measures, including encrypted connections (HTTPS), restricted access and spam protection on our forms. No transmission over the internet is completely secure.
Your rights
You may ask us for access to your data, correction, deletion, restriction of processing, and a copy in a common format. You may object to processing based on our legitimate interests and withdraw consent at any time. Write to support@replace-design.com. We reply within 30 days, and we may ask you to prove your identity.
You may complain to the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, edoeb.admin.ch. If GDPR applies, you may also complain to the supervisory authority where you live.
Changes to this policy
We update this policy when our services or the law change. The date at the top shows the latest version.
Reach us directly
support@replace-design.com
+41 79 742 55 07
Hauptstrasse 2, 6145 Fischbach LU, Switzerland