Privacy Policy

1. Data controller

The data controller for personal data is [COMPANY NAME — TO BE COMPLETED], with registered office at [FULL POSTAL ADDRESS — TO BE COMPLETED], Switzerland. Email: info@fabrico.ch.

Processing is carried out in compliance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the General Data Protection Regulation of the European Union (GDPR).

2. Data collected

Fabrico collects the following personal data:

• Registration data (Buyer): first name, last name, email address, shipping address.
• Identity verification data (Sellers and Buyers of age-restricted products): identification data collected by Stripe Connect for KYC verification purposes.
• Payment data: processed directly by Stripe; Fabrico does not store credit card data.
• User-generated content: listings, descriptions, product images, cover and featured images, profile photos.
• Follow relationships and block lists.
• Push notification tokens.
• App usage data (telemetry) and device information, for security and service improvement purposes.
• Communications with customer support.

Data summary for App Store / Play Store compliance:

3. Purposes of processing

Collected personal data is used to:

• Manage your Fabrico account.
• Process orders and facilitate product delivery.
• Process payments via Stripe.
• Verify the identity of Sellers and Buyers of age-restricted products.
• Prevent fraud, abuse, and violations of the Terms.
• Send service-related notifications.
• Fulfil legal, accounting, and tax obligations.
• Improve the platform and personalise the user experience.

4. Legal basis for processing

Processing is based on:

• Performance of a contract: for account management, order processing, and payments.
• Legitimate interest: for fraud prevention, abuse moderation, and platform improvement.
• Legal obligation: for retention of accounting data (Arts. 957–958f of the Swiss Code of Obligations).
• Consent: for optional push notifications (e.g. followed Sellers) and any marketing communications.

5. Data sharing

Fabrico does not sell your personal data and does not share it with third parties for marketing purposes. Data may be shared only with:

• Stripe, for secure payment processing and identity verification (KYC) of Sellers and Buyers of age-restricted products.
• Sellers, limited to the information necessary for product delivery (Buyer's name and shipping address).
• Competent Swiss authorities, where required by a legal obligation.

6. International transfers

Stripe may process certain data outside Switzerland, within the European Union and the United States, on the basis of standard contractual clauses recognised by Swiss and European authorities. All other processing takes place in Switzerland or within the European Union.

7. Retention period

• Profile data and user-generated content: retained for as long as the account is active.
• Completed order data: retained for 10 years pursuant to Arts. 957–958f of the Swiss Code of Obligations, even after account deletion.
• Logs and moderation data: retained for a maximum of 2 years.
• Upon account deletion, all remaining personal data is erased, except for completed order data whose retention is required by law.

8. Security

Fabrico implements appropriate technical and organisational measures to protect personal data, including:

• Data transmission via encrypted connections (TLS).
• Encryption of data at rest.
• Role-based access controls.
• Storage on servers located in Switzerland or the European Union.

9. Your rights

Under the FADP and, where applicable, the GDPR, you have the right to:

• Access your personal data at any time.
• Request correction of inaccurate data.
• Request erasure of your data (subject to the 10-year legal retention obligation for accounting data).
• Restrict or object to processing.
• Request data portability.
• Withdraw consent at any time.
• Lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) or, where applicable, the competent supervisory authority in the European Union.

To exercise your rights, contact us at info@fabrico.ch.

10. Cookies and similar technologies

The Fabrico app and website use exclusively strictly necessary technical cookies for the operation of the platform. We do not use profiling cookies, third-party advertising trackers, or analytics cookies for marketing purposes.

11. Changes to this Policy

Fabrico reserves the right to modify this Privacy Policy. Material changes are communicated via in-app notification and/or email at least 14 days before they take effect.

12. Contact

For any questions about the processing of your personal data or to exercise your rights, write to us at info@fabrico.ch.

For our General Terms of Service please see the Terms and Conditions page.