Privacy Policy

1. Data controller

Fintech Office AG, Aegeristrasse 64, 6300 Zug, Switzerland (“we”, “us”) acts as the data controller for personal data processed through this website, the Client Portal, and our corporate-services engagements. For privacy questions you can reach us at admin@fintechoffice.ch.

2. What we collect

• Contact & identity data you submit via forms or email (name, company, email, phone, message).
• Client portal data created when our team onboards you: account credentials, company details, jurisdiction, assigned account manager, invoices, payments, and notifications.
• Compliance & KYC data required to meet Swiss AML obligations (identification documents, beneficial ownership, source of funds).
• Technical data such as IP address, browser type, and pages visited, used to operate and secure the service.

3. Why we process it

• To respond to enquiries and prepare proposals.
• To deliver the corporate services you engage us for — company formation, domiciliation, accounting, tax, AML and related obligations.
• To operate the Client Portal (authentication, invoicing, payment tracking, notifications).
• To comply with Swiss law, including the Anti-Money Laundering Act and bookkeeping rules.
• To protect the service against abuse (rate limiting, audit logging of administrative actions).

4. Legal bases

We rely on contract performance, our legitimate interest in operating and securing the service, your consent where required, and statutory obligations under Swiss federal law (notably the revised Federal Act on Data Protection / nFADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

5. Recipients & processors

We share data only with vetted processors that support our service: cloud hosting, email delivery, and (when activated) payment processing. Processors are bound by data-processing agreements. We do not sell personal data.

6. Retention

Engagement, accounting, and AML records are kept for at least ten years as required by Swiss law. Marketing enquiries are retained for up to twenty-four months unless you ask us to delete them sooner. Portal sessions expire after fourteen days of inactivity.

7. Your rights

Subject to legal limits, you may request access, rectification, deletion, restriction, or portability of your data, and you may object to processing based on our legitimate interest. Send requests to admin@fintechoffice.ch. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local supervisory authority.

8. Security

We protect your data with TLS in transit, hashed credentials, signed session cookies, brute-force rate limiting on authentication endpoints, and an audit log of administrative actions. Access to client data is limited to authorised personnel.

9. Cookies

We use only strictly necessary cookies — a signed session cookie that keeps you logged into the portal or admin console. We do not use advertising or analytics cookies on this site.

10. Changes

We may update this policy as our services evolve. The latest version is always available on this page.