Privacy Policy

1. Who we are and who is responsible

Heritage - a Patreau Company ("Heritage", "we", "us" or "our") is the operating name used for the Heritage project, a Swiss sole proprietorship based in Basel, Switzerland. The individual sole proprietor is responsible for personal data processed in connection with this website.

Sole proprietor / legal data controller: Paul Patreau.

Privacy and data-protection requests: contact@theheritageproject.ch.

This policy covers the public Heritage website and partnership enquiry form, not future brand or owner platform services that have not been launched. Swiss data protection law applies and, where applicable, the EU/EEA GDPR may also apply.

2. What personal information we collect

Information you provide. The enquiry form collects your name, organisation or brand, email address and message, plus any further information you choose to include in correspondence. It does not currently ask for a phone number or postal address. Please avoid including sensitive information in your message.

Technical information. Website and infrastructure providers may process IP addresses, request dates and times, requested pages, browser or device information, and relevant operational or error logs to deliver, maintain and secure the site. This public website does not currently provide user accounts.

Anti-abuse information. Cloudflare Turnstile may process technical/browser signals to assess whether submissions are automated. Rate limiting uses keyed, pseudonymous hashes of request identifiers with temporary counters. Infrastructure providers may separately process technical connection information.

3. Why we process information

We use information to respond to enquiries, explore possible business relationships, maintain relevant correspondence, operate and secure the website, protect against spam and abuse, and comply with legal obligations when required.

Submitting an enquiry does not create an account or conclude a contract. We do not automatically subscribe enquirers to newsletters, sell their personal information or currently use this website for behavioural advertising.

4. Legal grounds where GDPR applies

Where the GDPR applies, processing may be necessary for steps you request before entering a contract (Article 6(1)(b)), for legitimate interests in responding to enquiries and protecting the website (Article 6(1)(f)), or to comply with a legal obligation (Article 6(1)(c)). We request separate consent if a specific activity requires it. Browsing the website does not constitute blanket consent.

5. Cookies, fonts and similar technologies

Browser features necessary for operation and security may be used. Cloudflare Turnstile can use technical browser signals or related mechanisms to verify form submissions. We do not currently intend to include advertising or behavioural marketing analytics cookies.

Our current site loads EB Garamond and DM Sans through Google Fonts, which may involve connections to Google's servers. This statement must be updated if the fonts are instead hosted locally. If we add optional analytics or marketing technologies, we will update this notice and offer any choices required by law.

6. Service providers and disclosure

We use service providers for website hosting, business mailbox hosting, email transmission (Resend), bot prevention (Cloudflare Turnstile), rate limiting (Upstash Redis), and Google Fonts if externally hosted. The names of the final website and mailbox hosts should be confirmed before publication.

They may process information needed to perform the relevant service. Information may also be disclosed where required by law or reasonably necessary to investigate abuse or protect legal rights.

7. International processing

Some providers may process data outside Switzerland, including in the United States. Resend states that email content and related records are stored in the United States even when a European sending region is selected. Other locations depend on the deployed configuration. Where required, we assess transfers and use an adequate destination or appropriate safeguards, including contractual arrangements.

8. Data retention

Our intended practice is to retain initial partnership enquiries for up to 12 months after the last meaningful exchange, unless discussions remain active or a longer period is needed for a legitimate legal or business reason. This retention practice must be implemented and checked before publication.

Temporary rate-limit counters expire according to their configured windows. Email delivery records and infrastructure logs may be retained for different periods by their respective providers. Business relationships may create separate accounting or statutory retention obligations.

9. Security

We use proportionate security measures including server-side form validation, Turnstile verification, submission limits and restricted access to service credentials. No Internet or storage system is completely free from risk.

10. Your rights

Depending on applicable law, you may request access, correction, deletion or restriction of personal data, or object to certain processing. Where GDPR applies, additional rights, including portability and withdrawal of consent where relevant, may apply. To exercise a right, email contact@theheritageproject.ch. We may reasonably verify your identity before acting on a request. You may also contact the Swiss Federal Data Protection and Information Commissioner or another competent authority where applicable.

11. Automated security checks

Turnstile automatically assesses whether a submission may be abusive and can prevent a form request when verification fails. We do not use this public website to make automated decisions with legal or similarly significant effects on visitors.

12. External sites and children

External websites linked here are subject to their own policies. Heritage is intended for business-oriented visitors and is not specifically directed at children. If inappropriate personal data from a child comes to our attention, we will review appropriate action, including deletion where warranted.

13. Changes to this policy

We may revise this policy as our website, providers or processing activities change. The current version will appear on this page, with an updated review date. Where legally required, we will provide further notice or request consent.

14. Contact

Questions about this policy or the handling of your information can be sent to contact@theheritageproject.ch or through our contact page.