THE SWISS LUMP-SUM REGIME — home
Consultation

Privacy Policy

Version 2026-10-10.3

1. Who is responsible

The controller for the personal data described here is IBEX SERVICES Ltd, Via Serafino Balestra 6, CH-6830 Chiasso, Switzerland (UID CHE-114.803.997), a commercial fiduciary company supervised by the Ticino authority for the fiduciary professions.

For any question about your data, or to exercise the rights set out in section 6, write to info@ibex.services.

2. What we collect, and why

If you write to us, directly or by preparing an e-mail with the form on the home page, we receive what you send: usually your name, your e-mail address, a telephone number if you give one, and your message. We use it to answer you and, if a mandate follows, for that mandate; not for a newsletter, profiling or advertising, and we do not sell it or pass it on for anyone else's purposes.

The form on the home page sends nothing to this website. It places what you type into a new e-mail in your own e-mail program, and nothing reaches us until you send that e-mail yourself.

When you open a page, our web server necessarily receives your IP address with the request. The web server and the application behind it record the time, the page requested, the response and the technical details your browser sends, such as its identification, but not your IP address or the page you came from. If a request fails because of a technical fault, the record of that fault includes your IP address. These records serve to operate and secure the site. The web server's record is overwritten as it fills, at current volume after about a day; the others are deleted after about five weeks. Records made before 10 October 2026 may also contain your IP address and the page you came from; they are deleted on the same schedule, by mid-November 2026 at the latest.

Please do not send account numbers, identity-document details or other confidential financial information by e-mail. If we need those, we will agree a secure channel with you first.

3. Cookies and browser storage

This website sets no cookies for its visitors and stores nothing in your browser. Signing in to the editing interface, which only the firm's staff use, sets the technical cookies that signing in needs. Cookies or storage set by earlier versions of the site are no longer used, and you can delete them through your browser settings.

4. Third parties and transfers abroad

Fonts, stylesheets, scripts and images are served from this website; displaying a page does not cause your browser to contact another website.

There are no analytics, advertising, tracking or social-media components on this site, and no content delivery network sits in front of it.

DigitalOcean hosts the site for us on a server in Frankfurt, Germany, and processes the records described in section 2 on our behalf. Germany is recognised by the Swiss authorities as providing adequate data protection.

When you write to us, your e-mail reaches our own mailbox, where a person answers it. That mailbox is operated for us by Microsoft (Microsoft 365), on servers in Switzerland.

Your own e-mail provider, or a webmail service your browser opens, also handles your message on its way to us.

5. How long we keep it

We keep your e-mails as long as we need them to answer you. Where an enquiry leads to a mandate, the resulting client file is kept for as long as the professional and statutory record-keeping obligations applicable to a Ticino fiduciary require — in principle ten years from the end of the relationship, under art. 958f of the Swiss Code of Obligations.

Messages sent through the earlier version of the contact form, before this version of the notice, were stored on the website's server and are anonymised at the latest 365 days after they were sent.

Backups of the database are kept for thirty days on the server and ninety days on a second, encrypted and access-restricted copy held in Switzerland, so an enquiry can persist in a backup for that much longer after it has been anonymised in the live system. Backups are used only to restore the site after a failure.

6. Your rights

Under the Federal Act on Data Protection you may:

  • ask whether we process personal data about you, and obtain a copy of it (art. 25);
  • have inaccurate data corrected (art. 32 al. 1);
  • have data erased, or its processing stopped (art. 32 al. 2);
  • object to a processing operation;
  • receive data you provided in a machine-readable format, or have it passed to another controller (art. 28).

We answer within 30 days. Exercising these rights is free of charge. If you are not satisfied with our answer, you may refer the matter to the Federal Data Protection and Information Commissioner (FDPIC) in Bern.

If you are in the European Union or the United Kingdom, the General Data Protection Regulation may also apply to the processing described here, in which case equivalent rights arise under it.

7. Security

Enquiries are held with access limited to the people who need it to answer you. No transmission over the internet can be guaranteed absolutely secure; e-mail in particular is not a confidential channel, and we will not ask you for financial or identity details by e-mail.

8. Changes

This notice carries a version identifier (2026-10-10.3). If it changes materially, the new version will be published here.

Back to home