Privacy Policy
Last updated: 17 March 2026
1. Data controller
ImmiLex Immigration Consulting, info@immilex.eu, immilex.ch. This site is subject to the Swiss Federal Act on Data Protection (nFADP, in force from 1 September 2023).
2. Data collected
We collect only data voluntarily provided by the user:
- Consultation booking: first name, surname, email, phone (optional), nationality, immigration situation, appointment date/time.
- Information request: first name, surname, email, phone (optional), message, company name (if applicable).
- Payment: payment data is processed directly by Stripe Inc. (PCI DSS certified). ImmiLex does not store or have access to card data.
3. Purpose of processing
- Provision of the requested consultation service
- Communications relating to the appointment (confirmation, reminder, follow-up)
- Response to information requests
- Legal and tax obligations
4. Legal basis
Processing is based on the performance of a contract (Art. 31 para. 2 let. a nFADP) and, for analytics cookies, on the user's consent.
5. Data recipients
- Stripe Inc. (USA) — payment processing. Stripe adheres to the Swiss-U.S. Data Privacy Framework.
- Vercel Inc. (USA) — site hosting. Log data (IP, user agent) retained for a maximum of 30 days.
- Resend Inc. — transactional email sending (appointment confirmations).
Data is not sold, transferred or shared with third parties for marketing purposes.
6. International transfers
Some providers are based in the USA. The transfer is covered by the Swiss-U.S. Data Privacy Framework and, where applicable, by standard contractual clauses.
7. Retention
Consultation data is retained for 10 years (Swiss tax obligations). Unconverted information requests are deleted within 12 months. Server logs are deleted within 30 days.
8. User rights
Under the nFADP, the user has the right of access, rectification, erasure and portability of their data, as well as the right to object to processing. To exercise these rights: info@immilex.eu.
The user also has the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).
9. Changes
This policy may be updated. The date of the last update is indicated above.