Privacy Policy

Last updated: 7 October 2026

This policy explains how Flummox AG handles personal data when you visit goflummox.com or contact us through it. We process personal data in line with the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR).

1. Who is responsible

Flummox AG, Rebstein, Switzerland (UID CHE-454.993.954) is responsible for the processing described here. For any privacy question or request, email info@goflummox.com.

2. When you visit the website

Our website is hosted by Squarespace. When you visit it, technical data is processed automatically to deliver the pages and keep them secure: your IP address, browser and device type, the pages you request, the referring page and the time of your visit. We use this to run the website and protect it from misuse, which is our legitimate interest.

3. Cookies and analytics

The website uses cookies that are strictly necessary for it to work. With your consent, given through the cookie banner, it also uses Squarespace Analytics to understand how visitors use the site, for example which pages are read and where visitors come from. These analytics cookies are only set if you accept them, and you can change your choice at any time through the cookie banner or by deleting cookies in your browser.

4. When you contact us

If you use our contact form or email us, we process the details you give us: your name, work email, brand, website or Amazon link, how you sell on Amazon today, the markets you are interested in and your message. We use them to answer your enquiry and to assess a possible partnership. This is necessary to take steps at your request before a contract, and is in our legitimate interest in replying to business enquiries.

The contact form is protected against spam by Google reCAPTCHA, which checks whether the form is used by a person. For this, reCAPTCHA collects information about your device and browser and sends it to Google. We use it in our legitimate interest in protecting the form from automated abuse.

5. Who receives your data

We share personal data only where needed for the purposes above:

  • Squarespace (Squarespace Ireland Limited and Squarespace, Inc.), which hosts the website, the contact form and the analytics;
  • Google (Google Ireland Limited and Google LLC), for reCAPTCHA;
  • companies of the Flummox group in Switzerland and the United Kingdom, where needed to handle your enquiry or a partnership with you.

We do not sell personal data. Fonts are served from our own website, not from third-party font services.

6. Transfers abroad

Some of the recipients above process data in the United States or the United Kingdom. The United Kingdom is recognised by Switzerland and the EU as providing adequate protection. For the United States, transfers rely on the Swiss-U.S. and EU-U.S. Data Privacy Frameworks where the recipient is certified, and otherwise on the standard contractual clauses approved by the Swiss and EU authorities.

7. How long we keep data

We keep enquiries for as long as needed to handle them and any resulting partnership. If no partnership follows, we delete them within 24 months, unless the law requires us to keep them longer. Analytics data is kept in aggregated form.

8. Your rights

You can ask us for access to your personal data, and to correct or delete it, restrict or object to its processing, or receive it in a portable format. Where processing is based on your consent, you can withdraw it at any time with effect for the future. To exercise these rights, email info@goflummox.com.

You also have the right to complain to a data protection authority: in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); in the EU, the authority in your country of residence or work.

9. Changes

We may update this policy when our website or the law changes. The current version is always available on this page.