Privacy Policy
Effective date: October 15, 2026
This Privacy Policy explains how ChartLab collects, uses and protects your personal data when you visit our pages, sign up for free content, receive our emails or purchase the ChartLab program. ChartLab is an independent education project based in Switzerland and is the controller of your personal data. You can reach us at any time at the contact address below.
1. Data we collect
Contact data: your first name and email address when you sign up or buy.
Purchase data: what you bought, the amount and the date. Card details are handled directly by our payment provider, Stripe; we never receive your full card number.
Member data: your login, lessons you open and lessons you mark as completed.
Email interaction data: whether you open our emails or click their links.
Technical data: IP address, browser and device type, and pages visited, collected by our hosting platform for security and basic analytics.
Messages: anything you send us when you contact us.
2. How we use it
To deliver free content you asked for and the program you purchased (performance of a contract).
To send you educational and marketing emails, which you can unsubscribe from at any time with one click (consent or legitimate interest).
To process payments, prevent fraud and meet accounting and tax obligations (legal obligation).
To answer your questions and improve our content (legitimate interest).
We do not sell your personal data, and we do not share it for cross-context behavioral advertising.
3. Who processes your data
We use trusted service providers who process data on our behalf, under contracts that protect it:
TinyPages: website hosting, member area and email delivery.
Stripe: payment processing.
We may also disclose data when required by law or to protect our rights.
4. International transfers
Your data may be processed in Switzerland, the European Union, the United States or other countries where our providers operate. When data leaves Switzerland or the EU, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.
5. How long we keep it
We keep contact data while you are subscribed or a member, and delete it within a reasonable time after you unsubscribe or ask us to, unless we must keep it longer. Purchase records are kept for as long as accounting law requires, usually up to 10 years under Swiss law.
6. Your rights
Depending on where you live, you can ask to access, correct or delete your data, receive a copy of it, object to or restrict its use, and withdraw consent at any time. To exercise these rights, email us; we will answer within 30 days. You can also lodge a complaint with your data protection authority (in Switzerland, the FDPIC).
California residents
You have the right to know what personal information we collect, to request its deletion or correction, and not to be discriminated against for exercising these rights. We do not sell or share personal information as defined by California law.
7. Cookies
Our pages use cookies that are necessary for the site, checkout and member area to work, and may use basic analytics cookies. You can control cookies in your browser settings.
8. Children
The Services are intended for adults aged 18 and over. We do not knowingly collect data from anyone under 18.
9. Security
We use reputable providers and reasonable technical and organizational measures to protect your data. No online service is perfectly secure, so please use a strong, unique password for your member account.
10. Changes
We may update this policy. The current version is always on this page, with its effective date.
11. Contact
Privacy questions or requests: bullbook@proton.me