Privacy Policy
Last updated: March 2026
1. Controller
Tasty Bites Via Luigi Lavizzari 5, 6900 Lugano, Switzerland Phone: 091 923 14 28 Email: contact@tastybiteslugano.ch This privacy policy explains how we collect, use, and protect your personal data in accordance with the Swiss Federal Act on Data Protection (nFADP/revDSG) and, where applicable, the EU General Data Protection Regulation (GDPR).
2. Data We Collect
We collect the following data when you use our website: - Account information: name, email address, phone number - Order information: delivery address, order history, payment method - Technical data: IP address, browser type, device information - Usage data: pages visited, language preference - Payment data: processed securely by Stripe (we do not store card details)
3. Purpose of Data Processing
We process your data for the following purposes: - Processing and delivering your orders - Managing your user account and loyalty program - Sending order confirmations and status updates - Improving our website and services - Complying with legal obligations - Responding to your enquiries via the contact form
4. Cookies and Local Storage
Our website uses: - Local Storage: to save your shopping cart, language preference, authentication session, and cookie consent choice - Stripe Cookies: set by our payment provider when processing credit card payments - Google Analytics: uses cookies to collect anonymous usage statistics (pages visited, session duration, device type, approximate location) to help us improve our services - Analytics (PostHog): for anonymous usage statistics to improve our services You can decline non-essential cookies via the cookie banner. Essential cookies required for the website to function cannot be disabled.
5. Data Sharing
We share your data only with the following third parties, strictly for the purposes described: - Stripe: for secure payment processing - Resend: for sending order confirmation emails - Telegram: for real-time order notifications to our kitchen - Google Analytics: for anonymous website usage statistics We do not sell your personal data to any third party.
6. Data Transfers Abroad
Some of our service providers (Stripe, Resend) may process data outside of Switzerland. In such cases, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or equivalent protection measures recognized under Swiss data protection law.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy: - Account data: as long as your account is active - Order data: 10 years (Swiss commercial retention requirements) - Technical logs: 90 days You may request deletion of your account at any time.
8. Your Rights
Under Swiss data protection law (nFADP), you have the following rights: - Right of access: request a copy of your personal data - Right to rectification: correct inaccurate data - Right to deletion: request erasure of your data - Right to data portability: receive your data in a structured format - Right to object: object to processing of your data - Right to withdraw consent: at any time, without affecting prior processing To exercise any of these rights, contact us at contact@tastybiteslugano.ch. We will respond within 30 days.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including: - Encrypted data transmission (HTTPS/TLS) - Secure password hashing (bcrypt) - Access controls and authentication - Regular security reviews
10. Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
If you have any questions about this privacy policy, please contact us at contact@tastybiteslugano.ch
