Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

2. What data we collect and why

Contact form

When you submit the contact form, we collect your name, phone number, email address, trade name, and message. We use this data to respond to your inquiry and to assess whether our service is a fit for your business. Legal basis: your consent (FADP Art. 6 / GDPR Art. 6(1)(a)) and our legitimate interest in responding to business inquiries.

Phone calls via Nora

When Nora answers a missed call on behalf of a client, the following data is collected from the caller: name, phone number, nature of the job request, and availability. This data is captured for the sole purpose of relaying the lead to our client. Callers are informed that their call is being handled by an AI receptionist at the start of every call. Legal basis: legitimate interest of the service operator and the client business.

WhatsApp messages

If you contact us via WhatsApp, we process your phone number and message content. Legal basis: your consent by initiating contact.

Website analytics

We use Google Analytics 4 (GA4) to understand how visitors use our website. GA4 collects anonymised usage data including pages visited, time spent, and general location (country level). This is only activated after cookie consent. Legal basis: your consent.

Advertising pixels

With your consent, we use Meta Pixel (Facebook/Instagram) and may use TikTok Pixel to measure the effectiveness of our advertising campaigns. These tools may collect data about your visit and link it to your social media profile if you are logged in. Legal basis: your consent.

3. Data processors and international transfers

We work with the following third-party processors who may access personal data:

• Retell AI — AI voice processing (United States)
• Twilio Inc — Telephony infrastructure (United States)
• Meta Platforms Inc — Advertising analytics (United States)
• Google LLC — Website analytics via GA4 (United States)
• Vercel Inc — Website hosting (United States)

Transfers to the United States and other countries outside Switzerland are made on the basis of Standard Contractual Clauses approved by the Swiss Federal Data Protection and Information Commissioner (FDPIC), ensuring an adequate level of data protection.

4. Data retention

Contact form data is retained for 12 months from the date of submission, unless a business relationship is established, in which case data is retained for the duration of the relationship plus 3 years.

Call data captured by Nora is retained for 90 days and then permanently deleted, unless the client requests earlier deletion.

Analytics and advertising data is governed by the retention settings of the respective platforms (GA4: 14 months maximum; Meta: per their data policy).

5. Your rights

Under the Swiss FADP and, where applicable, the GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Request data portability
• Withdraw consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at: cedric@nora41.ch

You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) at www.edoeb.admin.ch.

6. Cookies

We use cookies to operate the website (strictly necessary), and with your consent, to run analytics and advertising tools. You can manage your cookie preferences at any time via the cookie banner or by contacting us.

See our full Cookie Policy for details.

7. Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the website after changes constitutes acceptance of the updated policy.