Data protection statement

This statement applies to your use of epicemed.ch: browsing, account creation, orders, delivery, customer service, product availability alerts and audience measurement (with your consent for non-essential cookies).

It is addressed to any natural person using the site. By placing an order or creating an account, you confirm that you have read this statement.

Some features — analytical or advertising cookies, optional email alerts — require your consent, which you may withdraw at any time via our cookie banner or by contacting us.

The data controller is: Achour Ighil, sole proprietorship trading as Épicerie méditerranéenne Ighil, Rue des œillets 25, 2502 Biel/Bienne, Switzerland (website epicemed.ch).

For any questions about your personal data or to exercise your rights: contact@epicemed.ch. We have not appointed a data protection officer, as the scale of our activity does not currently require this.

Identity and contact data: name, delivery address, email address, telephone number (optional), language.

Account and order data: login credentials, password (stored in encrypted form, never in plain text), order history, cart, delivery instructions, statuses.

Technical data: IP address, browser type, pages viewed, cookies and local storage (see section 7), security logs. We do not store card numbers: payment is handled by Stripe.

We use your data to: process and deliver your orders; manage your account; send order- or account-related emails (confirmation, verification, stock alerts); secure the site; comply with legal obligations (accounting, tax); and, with your consent, measure audience and advertising performance.

Depending on the case, processing is based on contract performance (order), your consent (non-essential cookies, optional alerts), a legal obligation or a legitimate interest (security, fraud prevention, aggregated statistics). We do not knowingly collect sensitive data unless you voluntarily provide it (e.g. allergies in a message): we then use it only to respond to your request.

Creating an account is optional: you may order as a guest. An account lets you view your orders and pre-fill your details. Registration may include a verification email (link valid for 48 hours).

When you place an order, we process the data needed for the sale and delivery. Fees and zones are shown in the cart and at checkout based on your address.

Your name, delivery address and instructions may be shared with our pickers or couriers only to fulfil delivery. You are responsible for keeping your login credentials confidential.

Payments are processed by Stripe (card, Apple Pay, Google Pay, etc.). Card data does not pass through our servers and is not stored by epicemed.

We receive limited information from Stripe: payment status, transaction identifier, payment method type, last four digits where applicable. Stripe's policy: https://stripe.com/privacy

Stripe may process data outside Switzerland (including the United States) with appropriate contractual safeguards. By paying on our site, you are informed of this processing by Stripe.

Strictly necessary cookies (cart, session, language, security, remembering your cookie choice) operate without consent.

Analytical and advertising cookies are only activated after your agreement via the banner on the site. You may withdraw your agreement at any time by refusing cookies or contacting us.

With your consent, we may use Google Analytics (Google) and the Meta Pixel to measure traffic and campaign performance (including Google Ads). Pseudonymised purchase events (amount, transaction ID) may be sent. Meta's Conversions API may also receive a hashed email server-side. Without consent, these tools are not activated.

Non-essential cookies are kept for a maximum of 13 months. Policies: Google https://policies.google.com/privacy — Meta https://www.facebook.com/privacy/policy/

If a product is out of stock, you may leave your email to be notified when it returns. We keep this data until the notification is sent or for a maximum of 12 months, unless you withdraw sooner.

Messages sent via the help form or by email are kept for the time needed to handle your request and reasonable follow-up (about 24 months), unless a dispute is ongoing. We do not send a general newsletter without your explicit consent.

Your data may be processed by: Infomaniak Network SA (hosting, Switzerland); Stripe (payment); our email provider; Google (analytics / advertising, with consent); Meta (audience measurement, with consent); our staff and delivery partners to fulfil orders.

These providers process your data only on our instructions and with appropriate security measures. We do not sell your data or share it with third parties for their own marketing without your consent.

A list of essential processors can be obtained on request at contact@epicemed.ch.

Your order and account data are mainly hosted in Switzerland (Infomaniak). However, Stripe and Meta may transfer data to countries outside Switzerland, including the United States.

We ensure appropriate safeguards are in place (standard contractual clauses, certifications). Further information is available on request.

Order data and accounting records: 10 years, in line with Swiss accounting and tax obligations.

Customer account: for the duration of the contractual relationship, then deletion or anonymisation within 24 months of last activity, unless a longer legal obligation applies or you request earlier deletion.

Help form: about 24 months after the last exchange. Stock alerts: 12 months or until notification. Technical logs: up to 12 months. Cookie consent proof: 24 months.

We apply appropriate technical and organisational measures: encrypted connection (HTTPS), hashed passwords, restricted admin access, backups, professional hosting.

No internet transmission is completely risk-free. If a data breach presents a high risk to your rights, we will notify the authorities and, where required, affected individuals in accordance with the law.

You may request information about your data, rectification or erasure, object to certain processing, withdraw your consent (cookies, email alerts) and, where applicable, receive your data in a structured, machine-readable format.

To exercise your rights: contact@epicemed.ch, stating your request. We may ask for proof of identity to verify that the request comes from you.

We generally respond within 30 days. Exercising your rights is free of charge, except for manifestly unfounded or excessive requests.

If you believe your data is not processed correctly, please contact us first at contact@epicemed.ch. You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC): Feldeggweg 1, 3003 Bern — https://www.edoeb.admin.ch

We may update this statement; the date at the top of the page will be revised. In case of material changes, a notice may be displayed on the site.

This statement is governed by Swiss law. Our services are intended for persons aged at least 16. The site may contain links to third-party sites whose data protection practices we do not control. Full publisher details: see our Legal notice.