Skip to content
Open menu

Privacy policy

How Javols SA processes your personal data, under the Swiss Federal Act on Data Protection (FADP) and the GDPR.

Last updated: 22 October 2026

Controller

Javols SA, Route du Village 3, 1421 Grandevent, Switzerland. Email: elise@javols.net.

[EU representative under art. 27 GDPR: to be appointed, or confirm that none is required.]

Data processed

Orders: name, delivery and billing address, email, phone, items ordered, amount and order history. Purpose: performing the contract, delivery, invoicing, returns and warranty.

Payment: processed by Stripe. Javols SA only receives the payment confirmation, the payment method and the last four digits of the card, never the full card number.

Enquiries (contact, horse and stud forms): name, email, phone (optional), message and the time of your consent. Purpose: answering your enquiry. Neither your IP address nor other technical data are stored with the enquiry. This data is deleted automatically after [24] months, or earlier on request.

Visiting the website: the hosting provider processes technical data (IP address, browser, page requested, time) to deliver the website and protect it against abuse. Audience is measured with Vercel Web Analytics, without cookies and without individual profiles.

Emails: Javols SA sends you emails about your order or enquiry. Only if you ticked the corresponding box when ordering, Javols SA also sends a reminder if you don't complete your order (one email only) and an invitation to review your order after shipping. As proof, the text of the box you ticked, its version, the language and the date are kept. Each of these emails contains a one-click unsubscribe link. No newsletter without your explicit consent.

Customer reviews: if you post a review, the rating, title, text, the display name you choose (by default your first name and the initial of your last name) and the link to your order are stored. The review is published after a check with the display name; your email address is never published.

Javols SA processes your data to perform a contract or pre-contractual steps (art. 6(1)(b) GDPR), to comply with legal obligations, in particular accounting (c), on the basis of its legitimate interest in a secure, working website (f), or with your consent (a), which you may withdraw at any time. Under Swiss law, processing follows the principles of the FADP (art. 6 and 31 FADP).

Service providers (processors)

Javols SA uses the following providers, bound by data processing agreements:

  • Vercel Inc. (USA): website hosting, servers in the EU (Frankfurt).
  • Neon Inc. (USA): database, servers in the EU (Frankfurt).
  • UploadThing / Ping Labs Inc. (USA): storage of the website's photos and videos.
  • Stripe Payments Europe Ltd. (Ireland) and Stripe Inc. (USA): payments.
  • Resend Inc. (USA): sending order, reminder and review invitation emails, sending servers in the EU (Ireland).
  • Clerk Inc. (USA): secure sign-in to the website's administration (does not concern customers).

Some providers are based in the USA. Transfers rely on the Swiss-U.S. and EU-U.S. Data Privacy Framework where the provider is certified, or on the European Commission's standard contractual clauses recognised by the FDPIC. [To be checked for each provider.]

YouTube and Vimeo videos only load when you click on them (YouTube privacy-enhanced mode, Vimeo "do not track"). The provider then receives your IP address.

Retention

  • Order data and accounting records: 10 years (art. 958f Swiss Code of Obligations).
  • Enquiries sent through forms: [24] months, then deleted automatically.
  • Carts without activity: 30 days, then deleted automatically.
  • Log of emails sent: 12 months.
  • Review links: 90 days; technical payment data received from Stripe: 90 days.
  • Proof of consent (cart reminder, reviews, newsletter): while the consent is active, then [3] years after unsubscribing. [To be confirmed.]
  • Hosting provider technical logs: a few days to a few weeks.

Your rights

You may request access to your data, its correction, deletion, restriction of processing and portability, and object to processing based on the legitimate interest of Javols SA. Write to elise@javols.net. You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if you live in the EU, with the data protection authority of your country.

Cookies

See the cookies page.

Security

The website is only available over HTTPS. Access to the administration is protected by strong authentication and restricted to authorised people.

Changes

Javols SA may update this policy. The version published on this page applies.