Translation provided for information only: only the French version is binding.
This page explains what personal data we process when you use Shipper.ch, why, to whom we disclose them and what your rights are, under the Federal Act on Data Protection (FADP).
1. Who is responsible
The controller is BlueBird Experience Sàrl, Route du Signal 5, 1080 Les Cullayes, Switzerland, represented by Simon Pellet, CEO and founder. For any question about your data: support(at)shipper(dot)ch.
2. What data we process, and why
Your customer account: name, company, email address, telephone number, billing address, language, password (stored in an irreversible form that no one can read), the addresses in your address book, the history of your login email addresses, date of last login. For API access: access keys and authorised IP addresses. Purpose: to open and manage your account, to identify you and to write to you about your shipments.
Your shipments: contact details of the sender and the recipient (name, company, address, telephone and email of each), weight, dimensions and contents of the parcels, customs value and description of the goods, product identifiers for the European Union where required, tracking numbers and transport events. Purpose: to calculate the offers, book the shipment with the chosen carrier, prepare the customs documents and track the shipment.
Your payments: card payments go through PostFinance Checkout; we neither receive nor keep your card details, only the transaction identifier, its amount and its status. For a refund of Shipper credits by bank transfer: the bank details (IBAN) you provide. Purpose: to collect payments, credit your account, make refunds and keep our accounts.
Insurance: for an insured shipment, we pass on to AXA, in a monthly statement, the order number and dates, the name of your company with the postcode and town of your billing address, the countries of dispatch and destination, the carrier, the insured value and the premium; in the event of a claim, the information needed to handle it. Purpose: to cover the shipment and to handle a claim.
Support: your tickets, messages and attached files. Purpose: to respond to your requests.
Quotes without an account: the route and parcels of the quote, and your email address if you ask to receive it. Purpose: to calculate the quote and send it to you.
Site security: on the login, sign-up and forgotten password pages, we use Google reCAPTCHA to tell people apart from bots; Google then receives technical information from your browser, including your IP address. To limit abuse, we also count quote requests per IP address.
Technical logs: for each order, the exchanges with the carriers are recorded. Purpose: to deal with an incident or a complaint.
3. Audience measurement, without cookies
We measure traffic with Matomo, which we host ourselves: no data are passed on to any third party. Measurement works without cookies and does not recognise you from one visit to the next; your IP address is anonymised (its last two bytes are deleted). In the customer area, we send only the generic name of the page, never an order number, an address or an identifier; in the administration area, we measure nothing. Raw data are deleted after 390 days; only aggregate statistics remain.
4. Cookies
We use only cookies that are necessary for the site to work:
- session cookie: to keep you logged in during your visit and to protect forms; deleted when you close your browser;
- language cookie (selected_locale): to remember your language; deleted after 7 days;
- remember-me cookie: set only if you tick the “Remember me” box when logging in; deleted after 7 days;
- cookies from Google reCAPTCHA: on the login, sign-up and forgotten password pages, Google may set its own cookies.
No advertising cookies, no audience measurement cookies.
5. To whom your data are disclosed
- carriers (UPS, FedEx, TNT, DHL, Chronopost), directly or through a logistics partner established in France: the shipment data, to book and deliver the shipment;
- payment service provider PostFinance (Switzerland): card payments;
- insurer AXA (Switzerland): insured shipments;
- hosting provider in Lausanne (Switzerland): hosting of the site and the data, and sending of emails;
- anti-bot service Google reCAPTCHA: technical information from your browser, on the login, sign-up and forgotten password pages;
- accounting firm: accounting records;
- authorities (customs in particular): where required by law.
6. Data abroad
Your data are hosted in Switzerland, with our hosting provider in Lausanne. The data of certain shipments pass through our logistics partner established in France. The carriers process shipment data in their own systems, including abroad; for an international shipment, these data are by nature transmitted to the authorities of the destination country. Google may process reCAPTCHA data in the United States; Google LLC participates in the Swiss-U.S. Data Privacy Framework.
7. How long we keep your data
- account and address book: for as long as your account is open; you can delete it yourself in “My account”, but data that the law requires us to keep are retained until the statutory period expires;
- shipments, quotes, tickets and technical logs: for as long as necessary to perform and prove the shipments and to handle complaints, insurance claims and late invoices from carriers, which sometimes arrive several years after the shipment; longer only where required by law;
- accounting records (invoices, receipts, payments): 10 years, as required by the Swiss Code of Obligations;
- audience measurement: 390 days for raw data.
8. Security
Encrypted connection (HTTPS), irreversibly stored passwords, team access restricted according to role, data hosted in Switzerland, forms protected against bots and abuse.
9. Your rights
You may ask to access your data, to have them corrected or erased (within the limits of legal obligations, in particular accounting obligations), to receive a copy of them in a commonly used format and to object to processing. Write to support(at)shipper(dot)ch. If you believe that your rights are not being respected, you may contact the Federal Data Protection and Information Commissioner (FDPIC).
10. Changes
We update this page when our processing activities change; the date at the top indicates the version in force.