Privacy Policy
1. Company information
Bags & Box is a brand of Quintessence Publicité Sàrl, operated through bagsandbox.ch (custom-made creations) and shop.bagsandbox.ch (online store).
Quintessence Publicité Sàrl
Registered address: Impasse Aurore 6, 3960 Sierre, Switzerland
Offices: Galeries Benjamin Constant 1, CH-1003 Lausanne
Email: [email protected]
Data controller: Quintessence Publicité Sàrl
2. Personal data collected
We collect the following data when you use our website:
- Account data: last name, first name, email address, password
- Postal details: delivery and billing addresses
- Order history
- Payment data (through our secure payment provider): last 4 digits of the card, card type, expiry date, secure token
- Technical data: necessary cookies
- Analytics data: through Google Analytics
- Newsletter data: email address
- Browsing and search history on the website
Guest customers may place an order without creating an account, but will not have access to their order history.
3. Purposes of processing
We use your data to:
- Manage your orders and deliveries (custom-made or Shop)
- Issue invoices and handle administrative follow-up
- Enable the creation and management of your customer account
- Communicate with you (support, quotes, order confirmations)
- Send newsletters (with your consent)
- Improve the website through anonymised statistics
- Ensure the operation and security of the website
4. Legal basis
Processing is based on:
- The performance of a contract (order, delivery)
- Your consent (newsletter, analytics cookies)
- Our legitimate interest (website operation, fraud prevention)
- Our legal obligations (accounting)
5. Service providers and data transfers
We work with:
- Our secure payment provider
- Infomaniak (hosting and emailing)
- Google Analytics (traffic analysis)
- Cloudflare (website security and performance)
- Carriers: Swiss Post, TNT, UPS, Planzer
These providers may be located in countries whose data protection legislation differs from that of Switzerland. Contractual safeguards (SCCs / standard contractual clauses) ensure an adequate level of protection.
6. Data retention periods
- Accounting obligations: statutory Swiss retention period (generally 10 years)
- Inactive accounts: deleted once the period required for the service has elapsed
- Newsletter: until consent is withdrawn
- Cookies: according to their technical lifespan
7. Your rights
In accordance with the Swiss Federal Act on Data Protection (revFADP) and the GDPR, you have the following rights:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to object
- Right to data portability
- Right to withdraw your consent (newsletter / cookies)
- Right to lodge a complaint with a competent authority
To exercise your rights: [email protected]
8. Cookies
We only use:
- Technical cookies (necessary for the website to function)
- Analytics cookies (Google Analytics), subject to consent
No marketing or personalised advertising cookies are used. You can manage your preferences in the cookie banner or through your browser settings.
9. Security
- SSL connection
- Secure storage with Infomaniak
- Restricted access to internal data
- Payment data handled exclusively by our secure provider
10. Intended audience
This website is not directed at minors and does not knowingly collect their data.
11. Changes to this policy
We may update this policy. The applicable version is the one in force at the time of your visit to the website.
