Version of 3 November 2026. This policy explains which personal data we process, why, with whom we share it and what your rights are, in accordance with the Swiss Federal Act on Data Protection (FADP).
1. Controller
Latitude Zen (Anita Graziano Leoni), sole proprietorship
Route de Lausanne 38C, 1052 Le Mont-sur-Lausanne, Switzerland
Email: info@latitude-zen.com · Phone: +41 21 653 45 76
2. Data processed and purposes
- Appointments and client account : first name, last name, email, phone, treatments booked, dates, history and useful notes. To manage your appointments, send you confirmations and reminders (email, WhatsApp) and let you know if anything changes.
- Information relevant to your treatment (e.g. allergy, pregnancy, skin sensitivity): only if you tell us, and only to carry out the treatment safely.
- Online payments : processed by Stripe. We neither receive nor store your card details; we only receive confirmation of payment.
- Gift cards : buyer’s contact details and, if provided, the recipient’s name and message.
- Messages : what you write to us on WhatsApp, by email or by phone, so that we can reply.
- Accounting : invoices and payments, kept in accordance with our legal obligations.
- Website security : IP address and technical connection data (server logs), anti-robot check on forms (Cloudflare Turnstile), optional two-step verification for your account.
Your data is never sold or used for advertising.
3. Cookies and browser storage
The website only uses cookies and browser data needed for it to work: logging in to your account, your current treatment selection (kept in the browser tab), the gift card basket, remembering your cookie choice and anti-robot protection. We do not use advertising cookies or audience measurement tools. If you choose to display the Google Maps map, Google may set its own cookies.
4. Recipients and service providers
We use service providers who process data on our behalf, only to the extent necessary:
- o2switch (France): hosting of the website and booking data, and sending of emails.
- Stripe (Ireland, and United States for some processing): online payments.
- WhatsApp / Meta (Ireland, United States): booking messages and conversations you start on WhatsApp.
- Cloudflare (United States): anti-robot protection of forms (Turnstile).
- Google (Ireland, United States): Google Maps map on the directions page, only if you click on “Show the Google map”. Your browser then loads the map from Google’s servers, which receive your IP address and may set their own cookies.
- Our fiduciary and our accounting software (Switzerland): bookkeeping.
- The authorities, only if required by law.
5. Disclosure abroad
France and Ireland offer a level of data protection recognised as adequate by the Swiss Federal Council. For the United States, data is disclosed to companies certified under the Swiss-U.S. Data Privacy Framework or, failing that, on the basis of standard contractual clauses recognised by the Federal Data Protection and Information Commissioner (FDPIC).
6. Retention period
We keep your account and appointment data for as long as you are a client and at most three years after your last appointment, unless you ask us to delete it. Accounting records (invoices, payments) are kept for ten years, as required by law. Technical server logs are deleted after a short period.
7. Security
The website is fully encrypted (https), access to data is restricted to the people at the institute who need it, administration accounts are protected by two-step verification and regular backups are made.
8. Your rights
At any time, you can ask for access to your data, its correction or deletion, object to processing or ask for your data in a common format. Write to us at info@latitude-zen.com or by post to the address above; we may ask you to prove your identity. You can also contact the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch).
9. Changes
We may update this policy; the version published on this website is the one that applies.