Who we are
Headswap SA runs this website. We are a Swiss IT consultancy, registered in Lausanne and working from Zurich.
- Headswap SA, Rue du Petit-Chêne 22, 1003 Lausanne, Switzerland
- UID: CHE-394.769.078
- Email: hello@headswap.com
We are the controller for the personal data described here. We follow the Swiss Federal Act on Data Protection (FADP). Where it applies, we also follow the EU GDPR.
What we collect, and why
Enquiries and forms. When you use our contact form or the AI use-case intake, we receive your name, email, company and what you tell us about your workflows. We use this to answer you and to prepare a useful first conversation. Legal basis: steps before a contract, or our legitimate interest in responding.
Email and bookings. When you write to hello@headswap.com or book a call, we process your message and contact details to handle the conversation.
Technical logs. Our hosting provider records IP addresses and requests for security and operations. We do not use these logs to identify visitors.
Analytics. We only load Google Analytics after you accept cookies, and IP addresses are anonymised. We also use Vercel Analytics, which works without cookies and shows us aggregated statistics only.
Cookies
We set no tracking cookies unless you accept them. Your choice is stored in your browser, not on our servers. If you decline, the site works fully — we simply measure less. To change your decision, clear this site's data in your browser and the banner will ask again.
Who helps us process data
We work with a small set of providers, each bound by a data processing agreement:
- Vercel (USA) — website hosting, form processing and a secured backup of form submissions
- Salesforce — our CRM, where enquiries become contact records
- Resend (USA) — transactional email notifications
- Google — Workspace for email and documents, and Analytics if you consent
Where your data travels
We keep data in Switzerland and the EU where we can. Some providers process data in the United States. For those transfers we rely on recognised safeguards: the Swiss–US and EU–US Data Privacy Frameworks where the provider is certified, and standard contractual clauses otherwise.
A clear word on AI
We do not use your personal data to train AI models. When we use AI tools in our own work, we use commercial tiers that do not train on customer data — the same standard we recommend to our clients.
How long we keep data
We keep enquiry data for as long as we need it to handle your request and any relationship that follows. User-level analytics data expires in Google Analytics after at most 14 months. You can ask us to delete your data at any time.
Your rights
You can ask for access, correction, deletion, restriction or a copy of your data. You can object to processing based on legitimate interest. Write to hello@headswap.com — we answer quickly and without bureaucracy. You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local EU data protection authority.
Security
The site runs on HTTPS everywhere. Access to your data is limited to the people who need it. We choose established providers with strong security track records.
Changes to this policy
We update this page when our tools or practices change. The date at the top tells you when.