Privacy policy
Version of 3 July 2026 — compliant with the Swiss Federal Act on Data Protection (nLPD).
1. Data controller
Âme Sans Cible, entreprise individuelle of Kevin Costa (CHE-307.475.601), Rue Hans-Hugi 5, 2502 Bienne, Switzerland — info@the-lab-concept.com.
2. Data we process
- Orders: name, address, email, phone, purchase history — processed via Stripe (our payment provider) to execute the sales contract.
- Payments: processed exclusively by Stripe (cards, TWINT, Apple Pay, Google Pay); THE LAB never has access to your card data.
- Newsletter (Lab Concept Club): email address, only when you voluntarily subscribe; you can unsubscribe at any time.
- Cart: your cart contents are stored locally in your browser (localStorage) and are never transmitted to our servers unless you place an order.
3. Cookies and trackers
This site uses no advertising cookies or third-party analytics trackers. Only essential technical elements are stored in your browser (local cart, preferences). A banner allows you to accept or refuse; your choice is stored locally. If audience measurement tools are added in the future, they will be activated only after your consent.
4. Recipients and transfers
Your order data is processed by Stripe Payments Europe Ltd (Ireland — a country recognized as providing adequate protection by the Swiss Federal Council) and by our carriers for delivery. The site is hosted by Netlify (United States). The pages you access do not contain personal data. No sale or rental of your data to third parties.
5. Retention period
Order data: 10 years (Swiss accounting obligations). Newsletter: until you unsubscribe. Local cart: under your control in your browser.
6. Your rights
Under the nLPD, you may request access, rectification, deletion or transfer of your data, and object to processing: write to info@the-lab-concept.com. You may also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC).
7. Security
Encrypted connection (HTTPS/TLS) across the site; checkout handled by Stripe (PCI DSS level 1). Access to data is limited to persons who require it.
