Privacy Policy

NeoFidu (hereinafter "NeoFidu", "we" or "our") is committed to protecting the privacy of its users and clients. This Privacy Policy explains how we collect, use, store and protect your personal data.

This policy applies to all data collected through our neofidu.ch website and as part of our fiduciary services.

By using our services, you accept the practices described in this policy.

The data controller for personal data is:

NeoFidu – Sole Proprietorship
Tel: +41 78 691 39 12
Email: contact@neofidu.ch

For any questions regarding the protection of your data, you can contact us at the above address.

3.1 Identification Data

• First and last name
• Postal address
• Email address
• Phone number
• Date of birth
• Marital status

3.2 Tax and Financial Data

• Income and assets
• Bank statements
• Salary certificates
• Tax documents
• Real estate information

3.3 Connection Data

• IP address
• Browser type
• Pages visited
• Date and time of connection

3.4 Payment Data

Payment data (credit card) is processed securely by our certified payment provider (Stripe) and is not stored on our servers.

Your personal data is collected and processed for the following purposes:

• Service execution: preparation of tax returns, accounting, property management
• Customer relationship management: communication, request follow-up, billing
• Legal obligations: compliance with Swiss tax and accounting requirements
• Service improvement: anonymized statistical analysis to optimize our services
• Security: fraud prevention and system protection

We never sell your data to third parties and do not use it for advertising purposes without your explicit consent.

The processing of your data is based on the following legal grounds:

• Contract execution: processing is necessary for the execution of services you have ordered
• Legal obligation: certain processing is required by law (retention of accounting documents, tax returns)
• Legitimate interest: improvement of our services, IT security
• Consent: for marketing communications, when you have expressly consented

Your data is retained for the following periods:

• Tax and accounting documents: 10 years in accordance with Swiss law
• Billing data: 10 years
• Connection data: 12 months
• Client correspondence: 5 years after the end of the contractual relationship

Upon expiration of these periods, your data is deleted or irreversibly anonymized.

Your data may be shared with the following recipients:

• Tax authorities: as part of preparing your tax returns
• Technical providers (all subject to confidentiality obligations):
  • Web application hosting: Vercel (Frankfurt, Germany, EU)
  • Database and document storage: Supabase (Dublin, Ireland, EU)
  • Payments: Stripe (Dublin, Ireland, EU, PCI DSS Level 1 certified)
  • Transactional emails: Resend (USA — contact data only: name and email)
• Legal professionals: in case of dispute, with your prior consent

Only our transactional email provider (Resend) is based in the United States. This transfer is governed by Standard Contractual Clauses (SCC) approved by the European Commission. No client tax documents transit through the United States: your documents are stored exclusively in the European Union (Dublin, Ireland).

We implement appropriate technical and organizational measures to protect your data:

• Data encryption in transit (SSL/TLS) and at rest (AES-256)
• Secure authentication and access management
• Regular backups and business continuity plan
• Staff training on data protection
• Regular security audits

Our infrastructure is hosted through GDPR and DPA compliant providers, all located in the European Union: Vercel (web application, Frankfurt), Supabase (database and document storage, Dublin), Stripe (payments, Dublin, PCI DSS Level 1 certified). Transactional emails are sent via Resend (USA), the only non-EU provider, governed by Standard Contractual Clauses. Industry-standard security (AES-256 encryption at rest, SSL/TLS in transit) protects all your data.

In accordance with applicable legislation, you have the following rights:

• Right of access: obtain a copy of your personal data
• Right to rectification: correct inaccurate or incomplete data
• Right to erasure: request deletion of your data (subject to legal retention obligations)
• Right to restriction: restrict the processing of your data
• Right to portability: receive your data in a structured format
• Right to object: object to processing for legitimate reasons
• Right to withdraw consent: at any time for consent-based processing

To exercise these rights, contact us at contact@neofidu.ch. We will respond within one month.

Our website uses cookies to improve your browsing experience:

• Essential cookies: necessary for site operation (session, security)
• Analytics cookies: to understand how you use our site (anonymized)

You can configure your browser to refuse cookies or to be alerted when a cookie is placed.

We may modify this Privacy Policy at any time. Modifications take effect upon publication on our website.

In case of substantial modification, we will inform you by email or through a visible notice on our site.

Last updated: February 2026