Skip to main content
Free delivery from CHF 150

Privacy policy

Last updated: 14 October 2026

Data collected

Gourmethica collects the following data:

  • First and last name — to process and deliver orders
  • Postal address — for delivery within Switzerland
  • Email address — for order confirmation and customer communication
  • Phone number — optional, for delivery coordination
  • Email address — for the newsletter (only on voluntary sign-up)
  • IP address — to secure payment
  • WhatsApp number and profile name — if you write to us on WhatsApp
  • Origin of your first visit (referring site, campaign parameters, landing page) — to understand how our customers find us
  • Contents of your orders — for preparation, delivery and, if you agree, Google's questionnaire

Payment data (card number, etc.) is processed exclusively by Stripe and is never stored on our servers.

Purpose of processing

Your data is used solely for:

  • Processing and confirming your orders
  • Organising delivery within Switzerland
  • Communication regarding your order (tracking, any issues)
  • Payment security: the country of your IP address is compared with the country of your card
  • A reminder email, if you have accepted our marketing emails and started an order without completing it (at most one every 90 days)
  • An invitation to review your order
  • One follow-up if a corporate gift quote goes unanswered
  • Sending our newsletter, if you have subscribed
  • Responding to your information requests (contact form, corporate gifts)
  • Audience and advertising measurement, only with your consent (see “Cookies and consent”)

Emails after an order. After your first order is dispatched, we may send you one invitation to share your experience on Google. We do not send reminders or further invitations after later orders. This email includes a link to stop receiving these invitations. If you started an order without completing it and agreed to our marketing emails, we may send you one invitation to return to it about 24 hours later. We limit these invitations to one every 90 days and do not send them if the purchase is complete or payment is processing. You can unsubscribe in each message.

La Lettre emails. After you confirm your subscription to La Lettre, you receive one welcome email, then La Lettre: recipes, news from our producers and seasonal ideas. We send neither automatic reorder reminders nor an additional seasonal message after dispatch. Every Lettre includes an unsubscribe link.

Google Customer Reviews. After an order, Google may invite you to rate your purchase (Google Customer Reviews programme). As soon as this invitation is displayed, Google receives your order number. If you accept, we also pass on to Google your email address, the country and the estimated delivery date, together with the barcodes of the products ordered, and Google sends you a short questionnaire. If you decline, your email address is not passed on to Google.

Data retention

Your personal data is kept for as long as necessary for the purposes for which it was collected, in particular:

  • Order data and invoices: 10 years (Swiss legal obligation)
  • Newsletter data: until unsubscription
  • Contact data outside WhatsApp: 2 years after the last exchange

Contacting us on WhatsApp

If you write to us on WhatsApp, we use your phone number, profile name and the information in your message to advise you, answer your enquiry and provide the agreed follow-up. Orders and payments take place on our website or as set out in the quotation. Asking for advice does not sign you up for promotional messages.

Within Gourmethica, only one person, responsible for customer relations, has access to conversations. You can also contact us by email at info@gourmethica.ch or through our contact form.

YCloud forwards messages to our automatic responder, hosted on Oracle Cloud in Zurich. It answers routine questions, suggests products and prepares links to our website checkout. You can request a person at any time. For a handover, a notification sent through Infomaniak contains your number and a conversation link, without your message text. A reply from our WhatsApp Business app pauses automatic replies for your conversation.

We do not routinely delete closed WhatsApp conversations and currently have no set deletion period. The two-year period stated for other correspondence therefore does not apply to these conversations. You can request their deletion at info@gourmethica.ch, except for data we must retain to meet legal obligations.

The responder does not retain your free-text messages. It keeps pseudonymised identifiers and conversation state, including pauses with no automatic expiry. Shopping preferences stop being reused after 24 hours; aggregate statistics cover 30 days and WhatsApp message-delivery confirmations 90 days. Notifications remain in our email mailbox. YCloud advertises six months of conversation storage on its Free plan; this does not guarantee deletion of all backups. We have requested its data-processing agreement; execution and the transfer safeguards applicable to our account remain to be confirmed. Pending handover notifications retain your number and a predefined reason in encrypted form until sent or cancelled, with no automatic expiry.

WhatsApp Ireland Limited provides this service in Switzerland. WhatsApp also processes data under its own policies and may process it in the United States and other countries. Its documents explain the processing, recipients and applicable transfer mechanisms.

Who receives the data

We entrust some data to service providers, each for a specific task. Several of them process it outside Switzerland: the table gives the country and the safeguard that covers each transfer.

ProviderPurposeCountrySafeguard
Stripe (Stripe Payments Europe Ltd; Stripe, Inc.)Online payment; depending on the method chosen, passed to the provider concerned (TWINT, Apple Pay, Klarna, Amazon Pay)Ireland, United StatesIreland: country recognised as adequate by Switzerland. United States: Swiss-U.S. Data Privacy Framework and standard contractual clauses
Vercel Inc.Hosting the site and running its server functionsUnited StatesStandard contractual clauses
Cloudflare, Inc.Delivering and protecting the site (network, bot detection)United States (global network)Swiss-U.S. Data Privacy Framework; failing that, standard contractual clauses
Supabase, Inc.Database: orders, baskets, sign-ups and enquiriesGermany (Frankfurt)Country recognised as adequate by Switzerland
Infomaniak Network SASending emails (confirmations, replies, reminders, emails after an order and the La Lettre welcome email)SwitzerlandNo transfer abroad
RéalisePreparing and shipping ordersSwitzerlandNo transfer abroad
Swiss PostDelivering parcelsSwitzerlandNo transfer abroad
Mailchimp (The Rocket Science Group LLC, Intuit group)Sending La Lettre, if you have subscribedUnited StatesSwiss-U.S. Data Privacy Framework
Google (Google Ireland Ltd; Google LLC)Audience measurement (Google Analytics); after an order, an optional invitation to rate your purchase (Google Customer Reviews)Ireland, United StatesStandard contractual clauses
Meta Platforms Ireland LtdAdvertising measurement, only with your “Marketing” consentIreland, United StatesMeta's contractual transfer clauses
WhatsApp Ireland LimitedMessaging and advice requests, if you choose WhatsAppIreland; United States and other countries according to WhatsApp’s operationsWhatsApp Business Data Processing Terms and Data Transfer Addendum for processing on our behalf; WhatsApp policies for its own processing (see above)
YCloudWhatsApp message routing and automatic repliesPrimary servers in Singapore; other countries according to the provider’s operationsData-processing agreement requested; execution and account-specific safeguards awaiting confirmation
Oracle Cloud InfrastructureHosting the WhatsApp responder and its operating stateInstance in Zurich, Switzerland; technical access from other countries possible under Oracle termsOracle Cloud contractual terms and Oracle services privacy policy

Your rights

In accordance with the Federal Act on Data Protection (FADP), you have the following rights:

  • Right to access your personal data
  • Right to rectification in the event of inaccuracy
  • Right to erasure of your data
  • Right to object to processing
  • Right to receive the data you gave us in a common electronic format, or to have it sent to another controller (portability)
  • Right to withdraw consent at any time, for example for cookies or La Lettre

To exercise these rights, contact us at info@gourmethica.ch. We will respond within 30 days.

Cookies and consent

The site stores in your browser what it needs to work: your basket, your language and your cookie choices. This does not require your consent.

Audience measurement. With your consent, Google Analytics sets cookies to count visits, journeys and purchases. Without it, Google Analytics runs in consent mode: no cookie is set and only anonymous signals, with no identifier, are sent to count visits.

Marketing. If you switch it on under “Show details” in the banner or via “Manage cookies”, the Meta pixel records the pages you view and, when you buy, Meta receives the amount, your IP address and your email address in hashed form, meaning it cannot be read as it is. This category is off by default.

We sell no data. Meta's advertising measurement runs only with your “Marketing” consent, which is off by default, and we run no advertising at the moment.

You can change or withdraw your consent at any time: use the “Manage cookies” link at the bottom of every page, or the button below. Your choice is kept for twelve months, after which we ask again.

Visit origin

On your first visit, we record how you arrived on the site — referring website, campaign parameters (UTM) and landing page. This first-touch information is internal first-party operational data, stored alongside your order to understand how our customers find us and to improve our operations. It is stored in our database and with the payment, at the providers listed above, and passed to no other third party; it is recorded whatever your cookie choice.

Data controller

Gourmethica Sàrl
Boulevard des Tranchées 42
1206 Genève
Switzerland
UID CHE-188.643.752
info@gourmethica.ch

Applicable law

This privacy policy is governed by Swiss law, in particular the Federal Act on Data Protection (FADP) and its implementing ordinance (DPO). Any dispute will be submitted to the competent courts of the Canton of Geneva.