Privacy policy

Birdy Consulting SA respects your privacy. This policy explains which personal data we collect, why we collect it, how we use it and the rights you have over it. It applies to the website birdy-consulting.ch and the services we provide.

Last updated: 1 June 2026.

1. Data controller

• Birdy Consulting SA
• Chemin de Sur la Croix 191, 1020 Renens VD, Switzerland
• IDE : CHE-426.972.208
• Contact : hello@birdy-consulting.ch

2. Applicable law

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP, revised in 2023) and, where applicable, the EU General Data Protection Regulation (GDPR).

3. Data we collect

• Contact forms and discovery calls : name, company, email, phone, message, website URL, information you choose to share.
• Digital audit tool : website URL, answers to the diagnostic questions, email for delivering the report.
• Newsletter : email, language, consent log.
• Purchases (Playbook) : billing email, transaction details. Payment data is processed directly by Stripe; we never store card numbers.
• Navigation : IP address, browser, operating system, pages visited, referrer, language, timestamps (subject to your cookie consent).

4. Purposes and legal bases

• Respond to your requests and provide our services, contract performance / pre-contractual measures.
• Send the newsletter and commercial communications, consent (revocable at any time).
• Issue invoices and keep accounting records, legal obligation (Swiss Code of Obligations).
• Measure audience and improve the site, consent via the cookie banner.
• Protect the site against fraud and abuse, legitimate interest.

5. Retention periods

• Leads and contacts: up to 3 years after the last interaction.
• Newsletter subscribers: until unsubscription.
• Invoices and accounting data: 10 years (legal obligation).
• Analytics cookies: up to 13 months.

6. Recipients and subcontractors

We share data only with the service providers necessary to operate our activity, under data processing agreements:

• Hosting and backend: Lovable / Supabase (EU).
• Transactional and marketing emails: Resend.
• Payments: Stripe (Ireland / United States).
• Analytics and advertising: Google (Ireland / United States), with your consent.
• Appointment scheduling: Cal.com.

Some of these providers may transfer data outside Switzerland or the EU, in particular to the United States. These transfers are protected by standard contractual clauses and equivalent guarantees in line with the FADP and GDPR.

7. Your rights

You may at any time exercise your rights of access, rectification, deletion, restriction, portability and objection, as well as withdraw your consent. Send your request to hello@birdy-consulting.ch.

If you believe your rights are not respected, you may lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if you reside in the EU, with your national data protection authority.

8. Security

We implement technical and organisational measures to protect your data: HTTPS encryption, restricted access, secured backend (Row Level Security), regular backups, password and secret rotation.

9. Cookies

See our detailed cookie policy. You can change your preferences at any time:

10. Changes

We may update this policy to reflect changes in our practices or applicable law. The version in force is the one published on this page.

Contact

hello@birdy-consulting.ch