Privacy policy

1. Controller

Management Consulting Mayr, Waldaustrasse 2, 9500 Wil SG, Switzerland. Contact: info@opendeal.ch, +41 71 554 72 93.

2. Data processed

Depending on use, we process identity and contact data, account data, Swiss billing and delivery addresses, order and invoice data, product and communications data, payment references, consent choices and technical security data.

3. Purposes

Data is used to operate the shop and marketplace, register users, process contracts, reservations, payments, shipping, direct shipping, invoices, returns, complaints, supplier accounting, customer communications, fraud prevention and statutory retention.

4. Stripe and Stripe Connect

Stripe processes payments. For platform retail, Management Consulting Mayr receives the customer payment. For marketplace sales, Stripe Connect attributes the payment to the connected seller account and deducts the OpenDeal application fee. OpenDeal does not store complete card numbers or security codes.

5. Direct-shipping suppliers

For a dropshipping product, OpenDeal gives the relevant Swiss supplier only the data required for that order: order reference, items, quantity, name and delivery address and, only where contractually and technically required, email or phone for delivery updates. Payment data are never shared.

The supplier may use the data only for delivery, tracking, returns and its B2B settlement with Management Consulting Mayr. Own marketing, customer profiling or direct sales to the buyer are prohibited. Access, retention, subprocessors, security and deletion are governed by contract.

6. Independent sellers

For marketplace sales, the named seller receives order data required for contract performance, invoicing, shipping, communications and refunds. The seller processes those data for its own contractual and legal duties. OpenDeal remains responsible for platform processing.

7. Email, hosting and logs

Transactional messages are sent through Microsoft Graph. The server processes connection data for delivery, security, rate limiting and fault analysis. Logs are retained only as long as required.

8. Cookies and statistics

Essential cookies and local storage support sessions, CSRF protection, the cart, language and privacy settings. OpenDeal also operates cookieless basic statistics without an external analytics provider. Analytics data are retained for no more than 90 days.

9. Recipients and international processing

Recipients may include technical processors, Stripe, Microsoft, hosting providers, independent sellers, contractually bound suppliers and fulfilment partners, carriers and authorities. Delivery addresses are restricted to Switzerland. Suitable legal safeguards are used where processing occurs outside Switzerland.

10. Retention

Account data are generally kept while the account exists, contract, order, supplier and invoice data for statutory periods, and technical logs for the necessary operational period. Temporary supplier delivery data must be deleted after the agreed period unless law requires longer retention.

11. Rights

Subject to applicable law, individuals may request access, correction, delivery or deletion and may object to specific processing. Requests should be sent to info@opendeal.ch with sufficient identification.

12. Changes

This policy is updated when processing activities or legal requirements change. The published version applies.

Seller enquiries and double opt-in

A seller enquiry is forwarded only after the sender has confirmed the email address provided.