Privacy Policy

Last updated: October 2026 · Governed by the Swiss Federal Act on Data Protection (FADP)

1. Who we are

The Audit Room is operated by BUERGY GmbH, Recheraulaz 10, 3280 Meyriez, Switzerland. BUERGY GmbH is the controller responsible for your personal data.

2. What data we collect

• Contact details — name, email address, company and, optionally, phone number, provided when you order.
• Submitted materials — files, links and context you provide for review.
• Order details — audit type, language, scope and the time you accepted the NDA.
• Payment data — processed exclusively by Stripe. We never see or store card numbers. We receive a payment confirmation and a transaction reference.
• Technical data — to prevent abuse, the server keeps a one-way hash of your IP address for up to 24 hours.
• Advertising and measurement data — see section 7.

3. How we use your data

• To deliver the audit you ordered and to communicate with you about it.
• To send your order confirmation and your completed audit.
• To meet accounting and tax obligations.
• To protect the website against abuse.
• To measure the effectiveness of our advertising and to show our ads to people who have visited this website, as described in section 7.

Where the EU General Data Protection Regulation (GDPR) applies, we rely on the following legal bases: performance of a contract (Art. 6(1)(b) GDPR) for orders, legal obligations (Art. 6(1)(c)) for accounting, our legitimate interest in a secure website (Art. 6(1)(f)) for abuse prevention, and your consent (Art. 6(1)(a)) for advertising and measurement.

4. Confidentiality of submitted materials

Every order is covered by a mutual confidentiality agreement. Uploaded files are stored encrypted on our web server and are accessible only to the reviewer. They are used solely to perform the requested audit and are never shared, published, used as references or case studies, or used to train AI models. Submitted materials and order contents are never passed to advertising providers.

5. Retention

• Uploads from orders that are not paid are deleted automatically after 48 hours.
• Files from paid orders are deleted automatically 90 days after payment, or earlier on request.
• Order and invoice records are kept for 10 years as required by Swiss commercial law.
• Advertising and measurement data are kept by the respective provider according to its own retention periods, see section 7.

6. Service providers

• Stripe — payment processing. Stripe acts as an independent controller for payment data, see the Stripe Privacy Policy. The payment form is loaded from Stripe only when you reach the payment step, and Stripe may set cookies there to prevent fraud.
• MADLAB // Publishing — website hosting in Switzerland, including the storage of orders and uploaded files.
• Hostpoint AG, Switzerland — email. Order confirmations and audits are sent through our mailbox hosted by Hostpoint.

Fonts and images are served from our own server. Apart from the advertising tools in section 7, no content is loaded from third parties until you reach the payment step.

7. Advertising and conversion measurement

We advertise The Audit Room on LinkedIn, Google and Meta (Instagram, Facebook) and use the following tools on this website:

• LinkedIn Insight Tag — LinkedIn Ireland Unlimited Company, Ireland; data may be transferred to LinkedIn Corporation, USA. Privacy policy
• Google Ads conversion tracking and remarketing — Google Ireland Limited, Ireland; data may be transferred to Google LLC, USA. Privacy policy
• Meta Pixel — Meta Platforms Ireland Limited, Ireland; data may be transferred to Meta Platforms, Inc., USA. Privacy policy

Visitors from Switzerland: these tools are active when you visit the website. You can object at any time via «Cookie settings» at the bottom of every page. Visitors from other countries: the tools are only loaded if you agree in the cookie banner. We determine which applies from the time zone set in your browser; no location lookup takes place. If in doubt, we ask for your consent.

These tools set cookies or similar identifiers and send the provider information such as the pages you visit, the ad you came from, your browser and device, your IP address and, after a purchase, the fact that an order was completed and its value. We do not pass on your name, email address, the content of your order or any submitted materials. The providers may link this information to your account with them and use it for their own purposes; for that, they are responsible themselves.

We use the results to see which ads lead to orders and to show our ads again to past visitors. You can object or withdraw your consent at any time via «Cookie settings»; the tools are then no longer loaded. Cookies already set expire according to the providers' settings or can be deleted in your browser.

8. Cookies and local storage

Apart from the advertising tools in section 7, this website sets no cookies of its own. Your browser stores your order progress for the current session so that you can return after a payment redirect; this is deleted when you close the tab. Your choice in the cookie settings is stored in your browser for 12 months.

9. Disclosure abroad

Stripe and the advertising providers in section 7 may process data in the EU and in the USA. Transfers to the USA take place on the basis of the Swiss-U.S. Data Privacy Framework where the recipient is certified under it, and otherwise on the basis of standard contractual clauses recognised by the FDPIC. Our hosting and email remain in Switzerland.

10. Your rights

You may request access to your personal data, its correction or deletion, subject to legal retention obligations, and the release of data you provided to us in a common electronic format. You may object to processing and withdraw any consent at any time with effect for the future. To exercise your rights, contact us at the address below. You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) or, where the GDPR applies, with the supervisory authority in your country.

11. Data security

All connections are encrypted (TLS). Uploaded files are encrypted at rest, access is restricted, and payment data never reaches our server.

12. Changes

We may update this policy when our services or tools change. The version published on this page applies.

13. Language

This policy is available in several languages. The English version is binding.

14. Contact

BUERGY GmbH — Recheraulaz 10 — 3280 Meyriez — Switzerland
fabian@buergy.co