Privacy Policy

Last updated: March 2026

1. Controller

Friction Ventures GmbH, Zurich, Switzerland ("we", "us") operates the shift_ labs website and platform. For questions about this policy, contact us at privacy@shiftlabs.ch.

2. Data We Collect

We collect the following categories of personal data:

• Account data: Email address provided when you sign in via Magic Link.
• Usage data: Pages visited, timestamps, browser type, and device information collected via server logs and analytics.
• Payment data: Processed securely by Stripe. We do not store card numbers.
• Communication data: Emails and messages you send us.

3. Purpose and Legal Basis

• Contract performance: Processing bookings, delivering workshops, managing your account.
• Legitimate interest: Website analytics, fraud prevention, improving our services.
• Consent: Marketing communications (opt-in only).

4. Data Sharing

We share personal data only with service providers necessary to operate our business: Stripe (payments), email delivery services, and hosting providers. All processors are bound by data processing agreements. We do not sell personal data.

5. Data Retention

We retain personal data for as long as your account is active or as needed to provide services. Account data is deleted upon request. Legal retention obligations (e.g., tax records) may require longer retention of certain data.

6. Your Rights

Under Swiss and applicable EU data protection law, you have the right to:

• Access, correct, or delete your personal data
• Object to or restrict processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with the Swiss Federal Data Protection Commissioner (FDPIC)

7. Cookies

We use essential cookies for authentication and session management. Analytics cookies are only set with your consent.

8. Changes

We may update this policy from time to time. Material changes will be communicated via email or a notice on our website.