Privacy policy

Last updated: September 25, 2026

This privacy policy describes how Napoli Caffè collects, uses, and protects your personal data when you visit napolicaffe.ch or make a purchase. We process data in compliance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the European General Data Protection Regulation (GDPR).

Data Controller

SWISSVOIP SA ("Napoli Caffè" online store)
c/o A.G.R.Consulting Sagl, Via Vira 2, 6805 Mezzovico, Switzerland
Commercial Register No.: CH-501.3.017.169-8 · UID/VAT: CHE-182.147.868 VAT
Email: support@napolicaffe.ch · Phone: +41 78 620 45 47

What data we collect

  • Account and order data: name, address, email, phone number, order history. These are used to process orders, shipping, and invoicing.
  • Payment data: managed directly by payment providers (Stripe, PayPal, PostFinance). Full card details never pass through our systems.
  • Browsing data: IP address, device type, pages visited, and cookies (see the Cookies section).
  • Communications: messages sent to our customer service via email, chat, or WhatsApp.

Purposes for which we use data

  • Contract performance: management of orders, deliveries (DPD, Swiss Post), returns, and customer support.
  • Legal obligations: accounting and retention of business documents.
  • Marketing, only with your consent: newsletters and promotions; you can unsubscribe at any time using the link provided in every email.
  • Analytics and advertising, only with your consent: website usage statistics and measurement of advertising campaigns.
  • Custom audiences: we may transmit your email address in encrypted (hashed) form to Google or Meta to show you relevant ads or to exclude you from campaigns targeting new customers. You may object at any time by writing to support@napolicaffe.ch.
  • Security and abuse prevention: anti-fraud checks and verification of compliance with promotional terms (e.g., comparing names, addresses, emails, phone numbers, and payment methods between orders and accounts to identify multiple accounts or fictitious email addresses). These checks are based on our legitimate interest in preventing abuse; the resulting decisions are always verified by a person.

Cookies and similar technologies

Upon your first visit, we show you a banner where you can accept, reject, or customize the use of cookies. Non-essential cookies remain disabled until you provide consent.

  • Necessary cookies: essential for the shopping cart, checkout, language preferences, and security; always active.
  • Analytics cookies: help us understand how the site is used (e.g., Google Analytics); active only with your consent.
  • Marketing cookies: used for personalized advertising (e.g., Meta/Facebook and Instagram, Google); active only with your consent.

You can modify or revoke your choice at any time via the "Manage preferences" link in the cookie banner or through your browser settings.

Third-party services

We rely on selected providers who process data only for the indicated purposes: Shopify (e-commerce platform and store hosting), Google Analytics (statistics, only with consent), Google Ads (measurement and advertising), Meta (advertising on Facebook and Instagram, only with consent), Stripe, PayPal, and PostFinance (payments), DPD and Swiss Post (shipping), Shopify Inbox and WhatsApp (customer support), Anthropic and OpenAI (artificial intelligence tools for customer support, see the dedicated section).

Customer support and artificial intelligence tools

To respond more quickly to inquiries and manage orders, we may use artificial intelligence (AI) tools provided by Anthropic PBC (San Francisco, USA) and OpenAI, L.L.C. (San Francisco, USA). These tools may process the content of communications you send us (email, chat, WhatsApp), your name, and order data necessary to respond, in order to: draft responses, translate, summarize, and categorize requests, and detect fraud and promotional abuse.

The providers process this data exclusively on our behalf and according to our instructions, based on a data processing agreement; they do not use it to train their own models or for their own purposes, and they delete it within 30 days. Processing takes place on servers in the United States: see the "Data transfer abroad" section.

Responses generated with the help of AI are checked by a person before being sent. No decision that significantly affects you (e.g., order cancellation, refund, or account closure) is made solely by automated means: it is always verified by a person, and you can request a review or ask at any time to be assisted directly by a person by writing to support@napolicaffe.ch.

Shopify, the platform on which the store is based, also offers AI features (e.g., suggested responses in Shopify Inbox) that may process your requests to propose a draft; in this case as well, the response is sent by a person.

Data transfer abroad

Some of our providers process data outside of Switzerland, particularly in the European Union and the United States. For transfers to the United States, we rely, depending on the provider, on (a) certification under the Swiss-U.S. Data Privacy Framework, recognized by the Federal Council as guaranteeing an adequate level of protection (e.g., Google and Meta), or (b) standard contractual clauses recognized by the Federal Data Protection and Information Commissioner (FDPIC), supplemented for Swiss law, and a data processing agreement (e.g., Shopify, Anthropic, and OpenAI). Upon request to support@napolicaffe.ch, we can indicate the safeguards applied to each provider.

Data retention

We retain data only for the time necessary for the indicated purposes: accounting documents for 10 years as required by Swiss law, and marketing data until consent is withdrawn. Customer service communications are retained for 3 years from the last contact, unless they are needed for longer to assert or defend legal rights.

Your rights

You have the right to access your data, rectify it, have it deleted, restrict its processing, receive it in a portable format, object to its processing, and revoke any consent given at any time. To exercise these rights, write to support@napolicaffe.ch or consult the page Privacy and data rights (GDPR). You may also file a complaint with the Federal Data Protection and Information Commissioner (FDPIC) or, if you are in the EU, with your supervisory authority.

Security

All store pages use TLS/SSL encryption. Payments are handled exclusively by certified providers; Napoli Caffè does not store full payment card details.

Newsletter

The newsletter is sent only after confirmed subscription (double opt-in). You can unsubscribe at any time via the link at the bottom of every email or by contacting customer service.

Changes to this policy

We may periodically update this policy: the version published on this page is the authoritative one.