Privacy policy.

Von Peach GmbH, Suurstoffi 37, 6343 Rotkreuz, Switzerland, is the controller for the data described here. Reach us any time at hello@vonpeach.com. We are based in Switzerland and follow the Swiss Federal Act on Data Protection. Where we serve visitors in the European Economic Area or the United Kingdom, we also follow the GDPR.

• Buying a ticket. Your name, email address and optional company name, plus the workshop, ticket quantity and access type you chose. We need this to issue the ticket, send the calendar invite and let you into the session. Legal basis: performance of a contract.
• Payment. Card details are entered on Stripe's checkout and never reach our servers. We store only the amount, currency and Stripe reference so we can match a payment to a ticket. Legal basis: contract and legal record keeping.
• Enquiries and the retreat forms. The name, email and message you send us, so we can reply. Legal basis: your request, and our legitimate interest in answering it.
• Waitlist and marketing emails. Your email address, only if you ask for it by ticking the box or joining a waitlist. Legal basis: consent, withdrawable at any time.
• Server logs. Our hosting keeps short lived technical logs such as IP address and browser type to keep the site up and to spot abuse. Legal basis: legitimate interest.

We do not run advertising pixels, we do not build profiles, and we never sell or rent personal data.

We use a small number of service providers, each bound by a data processing agreement and each given only what it needs.

• Stripe (Ireland and USA), payment processing and fraud checks.
• Supabase, via Lovable Cloud (EU hosting), our database and website infrastructure.
• Resend (USA), sending your ticket, calendar invite and reminders.
• Mailchimp, Intuit (USA), our newsletter list, used only if you opted in.
• Slack (USA), an internal notification when a ticket is sold, so we know to prepare.
• Google (Ireland and USA), Google Meet for the live sessions, calendar invitations, and Search Console for anonymous search statistics.
• YouTube (Google), the embedded trailer, which only loads when you play it.

Some of these are in the United States. Those transfers rely on the EU Standard Contractual Clauses, the EU US Data Privacy Framework, or the equivalent Swiss recognitions, depending on the provider.

Ticket and payment records are kept for ten years because accounting law requires it. Enquiries are kept for up to two years so we can pick up a conversation where it stopped. Newsletter contacts stay until you unsubscribe. Server logs are kept for a few weeks.

You can ask for a copy of your data, ask us to correct or delete it, ask us to restrict or stop a particular use, ask for it in a portable format, and withdraw consent at any time without affecting what came before. Every marketing email carries a one click unsubscribe. Email hello@vonpeach.com and we will answer within thirty days. If you are not satisfied you may complain to the Swiss Federal Data Protection and Information Commissioner, or to your local supervisory authority in the EEA or the UK.

The site runs over HTTPS, payment data never touches our systems, and access to buyer records is restricted to the two of us. We use no tracking cookies, only what the site needs to function, which is set out in the cookie notice. Our workshops are sold to adults and we do not knowingly collect data from anyone under sixteen.