Privacy policy

1. Controller

Hoti Enterprise (sole proprietorship), owner Ilir Hoti, Schächlistrasse 6, 8953 Dietikon, Switzerland – email: hello@survbox.com.

2. Data we process

• Customer and order data: name, delivery and billing address, email, optional phone number, products ordered, amounts, delivery status.
• Payment data: processed directly by the payment providers (Stripe, TWINT). We do not receive full card details, only payment status and references.
• Customer account: login data, order history and – if used – registered kits with expiry dates (ReadyCheck).
• Communication: the content of your enquiries to us.
• Technical data: IP address, browser and device information, time of access (server logs, security).
• Usage and measurement data (optional): unless tracking is disabled – see section 8.

3. Purposes

• processing, payment and delivery of your order, and customer service;
• managing your customer account and – if you wish – reminders about expiry dates and refill sets;
• fraud and misuse prevention and IT security;
• compliance with legal obligations (e.g. accounting, VAT, customs);
• improving the shop as well as reach measurement and marketing (only if tracking has not been disabled). We only send newsletters with your consent.

4. Disclosure to third parties

• Payment providers: Stripe Payments Europe Ltd. and TWINT AG – to process payments.
• Logistics: shipping and logistics partners (e.g. Swiss Post, international parcel services) and customs authorities receive the data needed for delivery.
• IT and email providers: hosting, email delivery and maintenance, processing data only on our behalf.
• Analytics and marketing services (if tracking is active): Google LLC (Google Tag Manager / Google Analytics), Meta Platforms Ireland Ltd. (Meta Pixel), TikTok (TikTok Pixel).
• Authorities: where we are legally obliged to do so.

We do not sell personal data.

5. Transfers abroad

Some providers may process data outside Switzerland, in particular in the EU/EEA and the USA. In such cases we ensure adequate protection, e.g. through adequacy decisions or standard contractual clauses. For deliveries abroad, your delivery data is necessarily passed to carriers and customs offices in the destination country.

6. Retention

We retain order and invoice data in accordance with statutory retention obligations (usually 10 years). Account data is stored until you delete your account. Other data is deleted or anonymised as soon as it is no longer needed for its purpose.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing and data portability, and you may withdraw consent at any time, unless legal obligations prevent this. You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or the competent supervisory authority. Requests: hello@survbox.com.

8. Cookies, sessions and tracking

The platform uses technically necessary cookies and storage (session, CSRF protection, saving the order form). They are required to run the website and cannot be turned off.

Unless you opt out, we also use Google Tag Manager (container ID GTM-…) to load optional analytics and marketing tags, in particular:

• Google Analytics 4 (measurement ID G-…) – audience, page views, conversions;
• Meta Pixel – audience and conversion measurement for Meta ads (if enabled in Tag Manager);
• TikTok Pixel – audience and conversion measurement for TikTok ads (if enabled in Tag Manager).

Swiss data-protection law does not require a consent cookie banner of the kind used in the EU. We explain it here, and you can turn optional tracking off at any time. The choice is stored locally in your browser (localStorage and a cookie survbox_tracking_opt_out) so that Google Tag Manager and the marketing tags above are not loaded.

9. Contact

Privacy questions: hello@survbox.com.