Privacy Policy

Effective date: 23 September 2026

We handle your data the way we handle your things — with care.

Your dingx account and everything we hold about your items are stored in a Swiss data centre, under Swiss data-protection law. Your items' photographs are analysed in the EU; nothing about your items is processed further afield.

We set no cookies while you browse — not on the website, not in the app. We run no analytics. We embed no advertising or social-media trackers. The one exception happens only if you act: when you enter card details, our payment processor sets the cookies it needs for that payment. There is no consent banner to click away, because nothing optional is ever set.

Where something does sit outside Switzerland, we say so here rather than in the small print: our waitlist and e-mail run on Brevo (EU), card payments on Stripe (Ireland), and the photographs of your items are analysed in the EU (France). Nothing about your items is processed outside Switzerland and the EU. One thing does leave both: the typeface on this website is delivered from the USA, so loading a page sends your IP address there — section 7 says why, and when that ends. Sections 6 and 7 have the detail.

1. Who we are (controller)

The controller responsible for the processing of your personal data is:

dingx GmbH, Winterthur, Switzerland · UID CHE-313.578.669 Email: info@dingx.ch · Web: dingx.ch

For any data-protection question, or to exercise your rights (§9), contact us at info@dingx.ch.

2. Scope

This Policy explains what personal data dingx collects when you use the dingx website or application and our item-lifecycle services (collection, transport, managed storage, digital inventory, and the onward handling of your belongings), why we process it, with whom we share it, and the rights you have. It applies alongside our Terms & Conditions and Cookie Policy.

3. What data we collect

  • Account & identity — name, email, phone number, password (stored only in hashed form), and, where required to provide a service or verify you, further identity details.
  • Addresses & logistics — pickup and delivery addresses, access notes (floor, lift, where to ring), and booked dates and time windows.
  • Item data — descriptions, declared values, photographs taken at intake, categorisation, and RFID tag identifiers used to track items in managed storage, all visible to you in your dashboard.
  • Booking & payment — services booked, estimates, invoices, and payment details. Card data is processed by our payment service providers; dingx does not store full card numbers.
  • Communications — messages, support requests, and correspondence (including via email and messaging channels) and the records needed to handle them.
  • Usage & technical data — device, browser, IP address, and interaction logs needed to operate, secure, and improve the Platform. See the Cookie Policy for cookies and similar technologies.
  • Marketing preferences — your consent choices for newsletters or promotional messages.

We collect this data directly from you (when you create an account, request an estimate, or book a service), automatically when you use the Platform, and from our Partners where needed to perform a service you booked.

4. Why we process your data, and on what basis

We process personal data to:

  • Provide the services — create and manage your account, produce estimates, take and fulfil bookings, coordinate pickup/transport/storage, run the inventory dashboard, and handle lifecycle actions (sell, lend, donate, service, dispose);
  • Take payment and keep records — billing, accounting, and statutory record-keeping;
  • Communicate with you — confirmations, status updates, reminders, and support;
  • Secure and improve the Platform — fraud prevention, troubleshooting, and product improvement;
  • Market our services — only where you have consented or as otherwise permitted, and you can opt out at any time;
  • Comply with legal obligations and establish, exercise, or defend legal claims.

Under the revFADP, a private controller may process personal data for these purposes in line with the data-protection principles (lawfulness, good faith, proportionality, purpose limitation). Where the EU GDPR applies to a given processing activity, our legal bases are performance of the contract (Art. 6(1)(b)), our legitimate interests in operating and securing the service (Art. 6(1)(f)), your consent where requested (Art. 6(1)(a)), and compliance with legal obligations (Art. 6(1)(c)).

5. Cookies and tracking

dingx sets no cookies while you browse — not on the public website and not in the signed-in app — and we use no analytics and no advertising trackers. The app keeps your sign-in session in your browser's session storage so a page refresh does not log you out; it is discarded when you close the tab. One exception, and it only happens if you act: when you enter card details, our payment processor Stripe sets the cookies it needs to process that payment and to prevent fraud. They appear only at the moment the card field opens, and only because you asked to pay. Both the session storage and those payment cookies are strictly necessary for a service you requested, so we do not ask for consent for them, and there is no consent banner because nothing optional is set. Details are in the Cookie Policy. If we later introduce analytics or marketing technologies, we will update the Cookie Policy and ask for your consent before anything takes effect.

6. Who we share data with

We share personal data only as needed to provide the services and run our business, with:

  • Partner contractors — movers, warehouse operators, and refurbishment, disposal, or other service providers, limited to the data needed to perform your booking;
  • Payment service providers — Stripe (Stripe Payments Europe, Ltd.), to process card payments and prevent fraud. Your card details are collected and held by Stripe; dingx does not store your full card number and keeps only a payment token;
  • Hosting — our cloud hosting provider, which runs the Platform and stores your data in a Swiss data centre (Zürich region) on our behalf as a processor;
  • Communication and messaging providers — to send transactional and (where consented) marketing messages, including Brevo (Brevo SAS, EU) for e-mail and our launch waitlist, and WhatsApp (Meta) for our chat and support channel;
  • Buyers — where you sell an item through the marketplace, the limited data needed to complete the sale and delivery;
  • Authorities and advisers — where required by law, or to establish, exercise, or defend legal claims.

Processors act on our documented instructions under data-processing agreements. We do not sell your personal data.

7. Where your data is stored (Switzerland)

dingx hosts your personal data in a Swiss data centre (Zürich region), under Swiss data-protection law. Your account and your item records stay there.

One kind of processing happens outside Switzerland, and we would rather name it than leave it to "wherever possible": the photographs of your items. When an item is catalogued, and when you ask for a volume estimate from a photo, the picture is analysed by an automated image service running in the European Union (France) — never outside it. The EU offers a level of data protection recognised as adequate under Swiss law, so no further safeguard is required for this.

One transfer to the USA does still happen, on every page view of the public website, and we would rather name it than bury it: the typeface is delivered by a font service in the USA, so loading any page sends your IP address there. Nothing you type or store is involved. It ends when we serve the typeface from our own server — that change is built and waiting on a licence.

For that transfer, and for any future case where a service requires processing in a country without an adequate level of protection recognised under Swiss law, we require the recipient to provide appropriate safeguards — certification under the Swiss-US Data Privacy Framework, or the Swiss-approved Standard Contractual Clauses — and will provide details on request.

8. How long we keep data

We keep personal data only as long as needed for the purposes above:

  • Account and item data — for as long as your account is active and you have items in our care;
  • Booking, invoice, and accounting records — for the statutory retention period under Swiss law (generally 10 years for business records, OR Art. 958f);
  • Item photographs — while the item is in storage and for a reasonable period afterwards;
  • Marketing data — until you withdraw consent or object.

When data is no longer needed, we delete or anonymise it.

9. Your rights

Subject to the conditions of the revFADP (and the GDPR where it applies), you have the right to:

  • access the personal data we hold about you and obtain information about its processing;
  • rectify inaccurate or incomplete data;
  • request deletion or destruction of your data;
  • object to or request restriction of processing;
  • data portability — receive certain data you provided in a common electronic format;
  • withdraw consent at any time, without affecting processing already carried out.

To exercise any right, contact info@dingx.ch. We may need to verify your identity. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC / EDÖB) — and, where the GDPR applies, with your local supervisory authority.

10. Automated decisions

dingx does not make decisions producing legal or similarly significant effects about you based solely on automated processing. Some steps (such as availability checks and estimate calculation) are automated to support a booking, but a human is involved in decisions that materially affect you; where any solely automated individual decision is ever introduced, we will inform you and offer the right to express your view and to obtain human review.

11. Data security

We apply appropriate technical and organisational measures to protect personal data against loss, misuse, and unauthorised access — including encryption in transit, access controls, and the RFID-based inventory system that lets items be tracked without exposing your data publicly. No system is perfectly secure, but we work to protect your data and to address incidents promptly, including notifying you and the authorities where the law requires.

12. Children

The services are intended for users aged 18 and over. We do not knowingly process the personal data of children for the purpose of providing the services.

13. Changes to this Policy

We may update this Policy from time to time. The current version is always available on the website with its effective date; we will notify you of material changes by appropriate means.

14. Contact

Questions about this Policy or your personal data: dingx GmbH, Winterthur, Switzerland — info@dingx.ch.