Privacy policy

Privacy Policy — JaOcCo (RISC-V8)

Our imagination, your identity
Last updated: June 2026

1. Data Controller

JaOcCo Spicher — Controller: Benoît Spicher
Bodelenweg 56, 3172 Niederwangen, Switzerland
📩 hello@jaocco.com

2. Data Processed

Identity and contact data (name, address, email, phone if provided).
Order and delivery data (products, amounts, addresses, tracking).
Payment data (processed by payment providers; JaOcCo does not store card numbers).
Communications (customer service), marketing preferences.
Technical data (cookies, session identifiers, analytics, advertising pixels).

3. Purposes and Legal Bases

Contract performance: order processing, on-demand manufacturing, delivery, customer service.
Legitimate interests: website improvement, fraud prevention, aggregated statistics, security.
Legal obligations: accounting, warranty, retention, processing of withdrawal requests (EU Directive 2023/2673).
Consent: newsletter, non-essential cookies, personalised advertising.

4. Recipients and Data Processors

E-commerce platform (Shopify), technical on-demand production service providers, payment providers (e.g. Stripe, PayPal), carriers, analytics providers (e.g. Google Analytics) and advertising partners (e.g. Meta, Google), Revoq (Germany, EU) — processing of electronic withdrawal requests (EU Directive 2023/2673).

Data processing agreements compliant with GDPR, the Swiss nFADP and UK GDPR are in place where required.

5. International Data Transfers

When data is transferred outside Switzerland or the EU/EEA:

use of adequacy decisions or standard contractual clauses;
for the United Kingdom, application of mechanisms recognised under UK GDPR;
implementation of appropriate technical and organisational measures (encryption, access controls).

6. Retention Periods

Order data: duration necessary for performance + accounting obligations (up to 10 years).
Marketing data: until withdrawal of consent.
Technical logs: limited duration necessary for security.

7. Your Rights and Supervisory Authorities

Switzerland / EU / United Kingdom
Rights of access, rectification, erasure, restriction, objection, portability (GDPR / UK GDPR) and equivalent rights under the nFADP.
Withdrawal of consent possible at any time.

Exercise your rights: 📩 hello@jaocco.com

Supervisory authorities:

Switzerland: Federal Data Protection and Information Commissioner (FDPIC).
EU: competent national supervisory authority.
United Kingdom: Information Commissioner's Office (ICO).

8. Region-Specific Rights

United States (California — CPRA/CCPA)

California residents have rights of access, deletion, correction and opt-out of the "sale or sharing" of data for targeted advertising purposes.
JaOcCo honours the Global Privacy Control (GPC) signal where applicable.

Canada (PIPEDA)

Under PIPEDA, you have a right of access and rectification of your data as well as information on cross-border transfers.
Complaints may be filed with the Office of the Privacy Commissioner of Canada (OPC).

9. Security

Appropriate technical and organisational measures: encryption in transit, access controls, data minimisation, logical separation.

10. Cookies

Categories, durations and consent management procedures are described in the current Cookie Policy (including refusal options).

11. SMS Marketing Programme

If you choose to subscribe to JaOcCo SMS communications, we collect your phone number to send you:

order confirmations and delivery information;
promotional messages relating to JaOcCo collections;
abandoned cart reminders.

Message frequency may vary depending on your activity and current campaigns.

You may unsubscribe at any time by replying STOP to any message received.
For assistance, reply HELP or contact 📩 hello@jaocco.com.

Message and data rates from your mobile carrier may apply.

12. Abandoned Cart SMS

The JaOcCo website uses cookies and similar technologies to track items added to your cart, including when you leave the site without completing your purchase.

This information may be used to identify abandoned carts and, where applicable, to send an SMS reminder, if you have given your consent.

13. Data Sharing and Specific SMS Exclusion

Where this policy refers to sharing data with technical or marketing service providers, this explicitly excludes SMS opt-in data and associated consent.

Data related to the SMS programme is not shared with unaffiliated third parties for independent sales or marketing purposes.