Privacy policy
Protecting your personal data is central to our mission. We process personal data solely in line with the Swiss Federal Act on Data Protection (FADP/DSG).
Data controller
The controller is orva, Zurich, Switzerland. You can reach us via email at hallo@orva.ch.
Data we collect
When you visit our website, technical data such as IP address, browser type, and access time are collected automatically. This information is used solely to ensure stability and security.
We only capture personal data when you share it voluntarily, for example by providing your first and last name plus email address for notifications or by completing the quiz. We store your names, email, and selected categories (age ranges, hair loss patterns, scalp issues, preferences). This information is used exclusively for marketing and informational purposes related to orva’s launch.
Purpose of processing
We use the collected data solely to inform you about the launch of orva, segment our target audiences, and ensure website stability. We do not provide medical advice or evaluate sensitive health data.
Cookies & analytics
We use a cookie banner that allows essential cookies by default and only activates analytics cookies after your consent. You can withdraw or adjust consent anytime via the “Cookie settings” link in the footer.
For analytics we rely on Google Analytics 4 and Vercel Analytics. IP anonymization is enabled in Google Analytics. It only loads once you approve the “Statistics” category. We also use Consent Mode v2 so that only anonymized signals are processed until you consent.
Vercel Analytics collects anonymous usage data (page views, performance metrics, device type) without personal information. Processing is handled by Vercel Inc. (USA) under Standard Contractual Clauses (SCC). Learn more in the Vercel privacy policy.
With your additional consent for “Advertising & conversion tracking” we use Google Ads conversion tracking, remarketing, enhanced conversions, and Google Signals for extended demographic insights and cross-device tracking. This improves understanding of user behavior across devices and enables more precise conversion measurement. These features are optional and can be disabled anytime.
With consent for “Functionality & personalization” we store preferences such as language settings and enable personalized product recommendations. With consent for “Security” we activate fraud prevention and safety features to protect your data.
Legal basis: your consent (Art. 6 para. 1 lit. a GDPR; Art. 6 para. 6 revDSG). You can withdraw consent at any time with future effect. Data retention in Google Analytics is minimized (e.g., 2 months).
Recipients: Google Ireland Ltd. and Vercel Inc. (USA). Transfers to the USA may occur. Both providers rely on EU Standard Contractual Clauses (SCC). More details in the Google privacy policy and the Vercel privacy policy.
Cookie settings: You can adjust or withdraw your consent anytime via the “Cookie settings” link in the footer. All non-essential cookies are removed automatically once you withdraw consent.
Sharing with third parties
We treat your data confidentially and do not share it with third parties, except for technical providers that support website operations or notification emails. These providers process data solely on our behalf and based on our instructions.
Data storage
All personal data (names, email address, quiz answers) are stored exclusively in data centers located in Switzerland. We partner with Swiss hosting providers that meet high security standards.
Retention period
We store your personal data until you withdraw consent. You can revoke consent or request deletion at any time. Log data collected for security is anonymized or deleted automatically after a short period.
Your rights
You have the right to request information about stored personal data, correct inaccuracies, and request deletion. Please contact hallo@orva.ch. We aim to respond promptly and in line with legal requirements.
Data security
We implement appropriate technical and organizational measures to protect your data from loss, misuse, and unauthorized access. This includes encrypted transmission of information on our website.
Changes
We reserve the right to update this privacy policy at any time. The current version published on this website always applies.
Last updated: September 2025