Privacy Policy

Effective date: 10 September 2026

We handle your data the way we handle your things — with care.

Your dingx account and everything we hold about your items are stored in a Swiss data centre, under Swiss data-protection law — not abroad, and not moved abroad as a matter of course.

We set no cookies. We run no analytics. We embed no advertising or social-media trackers. There is no consent banner to click away, because there is nothing to consent to.

Where something does sit outside Switzerland, we say so here rather than in the small print: our waitlist and e-mail run on Brevo (EU), and card payments on Stripe (Ireland). Sections 6 and 7 have the detail.

1. Who we are (controller)

The controller responsible for the processing of your personal data is:

dingx GmbH, Winterthur, Switzerland · UID CHE-313.578.669 Email: info@dingx.ch · Web: dingx.ch

For any data-protection question, or to exercise your rights (§9), contact us at info@dingx.ch.

2. Scope

This Policy explains what personal data dingx collects when you use the dingx website or application and our item-lifecycle services (collection, transport, managed storage, digital inventory, and the onward handling of your belongings), why we process it, with whom we share it, and the rights you have. It applies alongside our Terms & Conditions and Cookie Policy.

3. What data we collect

  • Account & identity — name, email, phone number, password (stored only in hashed form), and, where required to provide a service or verify you, further identity details.
  • Addresses & logistics — pickup and delivery addresses, access notes (floor, lift, where to ring), and booked dates and time windows.
  • Item data — descriptions, declared values, photographs taken at intake, categorisation, and RFID tag identifiers used to track items in managed storage, all visible to you in your dashboard.
  • Booking & payment — services booked, estimates, invoices, and payment details. Card data is processed by our payment service providers; dingx does not store full card numbers.
  • Communications — messages, support requests, and correspondence (including via email and messaging channels) and the records needed to handle them.
  • Usage & technical data — device, browser, IP address, and interaction logs needed to operate, secure, and improve the Platform. See the Cookie Policy for cookies and similar technologies.
  • Marketing preferences — your consent choices for newsletters or promotional messages.

We collect this data directly from you (when you create an account, request an estimate, or book a service), automatically when you use the Platform, and from our Partners where needed to perform a service you booked.

4. Why we process your data, and on what basis

We process personal data to:

  • Provide the services — create and manage your account, produce estimates, take and fulfil bookings, coordinate pickup/transport/storage, run the inventory dashboard, and handle lifecycle actions (sell, lend, donate, service, dispose);
  • Take payment and keep records — billing, accounting, and statutory record-keeping;
  • Communicate with you — confirmations, status updates, reminders, and support;
  • Secure and improve the Platform — fraud prevention, troubleshooting, and product improvement;
  • Market our services — only where you have consented or as otherwise permitted, and you can opt out at any time;
  • Comply with legal obligations and establish, exercise, or defend legal claims.

Under the revFADP, a private controller may process personal data for these purposes in line with the data-protection principles (lawfulness, good faith, proportionality, purpose limitation). Where the EU GDPR applies to a given processing activity, our legal bases are performance of the contract (Art. 6(1)(b)), our legitimate interests in operating and securing the service (Art. 6(1)(f)), your consent where requested (Art. 6(1)(a)), and compliance with legal obligations (Art. 6(1)(c)).

5. Cookies and tracking

dingx sets no cookies — not on the public website and not in the signed-in app — and we use no analytics and no advertising trackers. The app keeps your sign-in session in your browser's session storage so a page refresh does not log you out; it is discarded when you close the tab. That is strictly necessary to provide the service, so we do not ask for consent for it, and there is no consent banner because nothing optional is set. Details are in the Cookie Policy. If we later introduce analytics or marketing technologies, we will update the Cookie Policy and ask for your consent before anything takes effect.

6. Who we share data with

We share personal data only as needed to provide the services and run our business, with:

  • Partner contractors — movers, warehouse operators, and refurbishment, disposal, or other service providers, limited to the data needed to perform your booking;
  • Payment service providers — Stripe (Stripe Payments Europe, Ltd.), to process card payments and prevent fraud. Your card details are collected and held by Stripe; dingx does not store your full card number and keeps only a payment token;
  • Hosting — Google Cloud, which hosts the Platform and your data in its Switzerland (Zürich) region on our behalf as a processor;
  • Communication and messaging providers — to send transactional and (where consented) marketing messages, including Brevo (Brevo SAS, EU) for e-mail and our launch waitlist, and WhatsApp (Meta) for our chat and support channel;
  • Web-font delivery — Adobe (Adobe Inc., USA) serves our typeface from use.typekit.net. Your browser therefore contacts Adobe every time you load a page on the public website, which necessarily transmits your IP address; the same page load sends Adobe a font-usage report identifying our account and which fonts were served. Adobe states that it sets no cookies for this. Nothing you type or do on the site is involved;
  • Buyers — where you sell an item through the marketplace, the limited data needed to complete the sale and delivery;
  • Authorities and advisers — where required by law, or to establish, exercise, or defend legal claims.

Processors act on our documented instructions under data-processing agreements. We do not sell your personal data.

7. Where your data is stored (Switzerland)

dingx hosts your personal data on Google Cloud servers located in Switzerland (Zürich region), under Swiss data-protection law, and does not transfer it abroad as a matter of course. One transfer does happen on every page view, and we would rather name it than bury it: the typeface on the public website is served by Adobe (USA), so loading any page sends your IP address to Adobe — see section 6. We are reviewing whether to serve the typeface ourselves, which would remove that transfer entirely. Where, for a specific service (for example a sub-processor), data must be processed in another country, we limit this to the EU/EEA where possible; and for any country without an adequate level of protection recognised under Swiss law, we put appropriate safeguards in place (such as the Swiss-approved Standard Contractual Clauses) and will provide a copy on request.

8. How long we keep data

We keep personal data only as long as needed for the purposes above:

  • Account and item data — for as long as your account is active and you have items in our care;
  • Booking, invoice, and accounting records — for the statutory retention period under Swiss law (generally 10 years for business records, OR Art. 958f);
  • Item photographs — while the item is in storage and for a reasonable period afterwards;
  • Marketing data — until you withdraw consent or object.

When data is no longer needed, we delete or anonymise it.

9. Your rights

Subject to the conditions of the revFADP (and the GDPR where it applies), you have the right to:

  • access the personal data we hold about you and obtain information about its processing;
  • rectify inaccurate or incomplete data;
  • request deletion or destruction of your data;
  • object to or request restriction of processing;
  • data portability — receive certain data you provided in a common electronic format;
  • withdraw consent at any time, without affecting processing already carried out.

To exercise any right, contact info@dingx.ch. We may need to verify your identity. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC / EDÖB) — and, where the GDPR applies, with your local supervisory authority.

10. Automated decisions

dingx does not make decisions producing legal or similarly significant effects about you based solely on automated processing. Some steps (such as availability checks and estimate calculation) are automated to support a booking, but a human is involved in decisions that materially affect you; where any solely automated individual decision is ever introduced, we will inform you and offer the right to express your view and to obtain human review.

11. Data security

We apply appropriate technical and organisational measures to protect personal data against loss, misuse, and unauthorised access — including encryption in transit, access controls, and the RFID-based inventory system that lets items be tracked without exposing your data publicly. No system is perfectly secure, but we work to protect your data and to address incidents promptly, including notifying you and the authorities where the law requires.

12. Children

The services are intended for users aged 18 and over. We do not knowingly process the personal data of children for the purpose of providing the services.

13. Changes to this Policy

We may update this Policy from time to time. The current version is always available on the website with its effective date; we will notify you of material changes by appropriate means.

14. Contact

Questions about this Policy or your personal data: dingx GmbH, Winterthur, Switzerland — info@dingx.ch.