Privacy policy

Who is responsible

The shop at trybram.com is run by [name of the person or company that runs BRAM], [street and number], [postal code and town], Switzerland. For anything about your data, write to legal@trybram.com.

This policy follows the Swiss Federal Act on Data Protection and, for customers in the European Union, the General Data Protection Regulation (GDPR).

What we collect, and why

When you order: your name, shipping address, email address, phone number, what you ordered and what you paid. We need these to deliver your order, to reach you if there is a problem with the delivery, and to keep the accounting records the law requires.

When you create an account (optional): your email address, your first name if you give it, your saved shipping address and your past orders. Your password is stored only as a salted hash; we cannot read it. If you ask to reset it, we keep a one-time code for one hour.

When you pay: payment is handled by Stripe. We never see or store your card number. Stripe tells us whether the payment succeeded and keeps its own record of the payment.

When you ask for batch notes: your email address and the language you were reading in, so we can tell you when a new batch is ready. Every note has an unsubscribe link, and you can also stop them by writing to us.

When we write to you: we confirm each order by email and, if you have an account, send the messages that belong to it, such as a welcome note or a link to choose a new password. We do not track whether you open our emails or which links you follow.

When you visit: our server keeps short-lived technical logs (IP address, time, the page requested, browser type) to keep the site running and secure.

Cookies and storage in your browser

We set only the cookies the shop needs: bram_cart (the number of jars in your cart, 30 days), bram_shop (keeps you signed in, 30 days), bram_consent (your cookie choice, 180 days) and bram_lang (your language, one year).

If you check out as a guest, the details you type are kept in your browser tab until you close it, so that you do not have to type them again if you return from the payment page.

Only if you agree to analytics, we use PostHog to count visits and to see which pages and buttons are used. It keeps an identifier in your browser (a cookie and a local storage entry whose names start with ph_) for up to one year. We do not record your screen or what you type, and we do not link these statistics to your name, your account or your order.

We do not use marketing cookies at present. You can change your choice at any time under “Cookie settings” at the foot of every page.

Who receives your data

Stripe (Stripe, Inc., United States, and its affiliates) processes payments and receives your email address, your shipping details and the amount.

Swiss Post, and the postal service of your country, receive your name, address, phone number and email address to deliver the parcel. For deliveries to the EU these details and a description of the goods are also passed to the customs authorities.

Resend (Resend, Inc., United States) sends our emails, through servers in the European Union. It receives your email address and the content of each message; for an order confirmation that includes your name, your shipping address and what you ordered.

Our web server is rented from Amazon Web Services and is located in the United States, where Stripe also processes payment data. These transfers rely on the safeguards those providers offer, such as the Swiss–US and EU–US Data Privacy Frameworks or standard contractual clauses.

If you agreed to analytics, PostHog Inc. (United States) receives usage data: the pages you view, the buttons you click, your device and browser type, and your IP address, from which an approximate location is derived. PostHog stores this data on servers in the European Union.

We do not sell your data, and we do not share it with anyone else unless the law obliges us to.

Legal basis

We process order and account data to perform our contract with you; accounting records to meet our legal obligations; batch notes and any optional cookies on the basis of your consent; and server logs on the basis of our legitimate interest in a secure, working shop.

How long we keep it

Order and payment records are kept for ten years, as Swiss accounting law requires. Account data is kept until you ask us to delete your account. Your email address for batch notes is kept until you unsubscribe.

Your rights

You can ask us what data we hold about you, have it corrected or deleted, have its use restricted, receive a copy in a common format, object to its use, and withdraw a consent you have given. Write to legal@trybram.com and we will answer within 30 days.

You can also complain to a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU the data protection authority of your country.

Changes

If we change this policy, the new version appears on this page with its date.