Privacy Policy
Last updated: 1 April 2026
Alpine Business Exchange SA ("we", "us", or "Alpine Business") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, and safeguard your personal data when you use our platform.
1. Data Collection
We collect the following categories of personal data:
- Account Information: Name, email address, and password when you create an account.
- Profile Data: Company name, investment preferences (buy box), and acquisition criteria you provide.
- Usage Data: Pages visited, features used, and interactions with listings, collected automatically via server logs.
- Communication Data: Messages exchanged with sellers and brokers through our platform.
- Business Listings: Listing data is sourced from publicly available business-for-sale platforms and commercial registries.
2. FADP Compliance
We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP / nDSG), effective 1 September 2023. Our processing is based on the following legal grounds:
- Performance of a contract (account management, messaging)
- Legitimate interest (platform analytics, fraud prevention)
- Consent (marketing communications, optional cookies)
3. Data Hosting & Security
All data is hosted in Switzerland on infrastructure provided by Supabase with Swiss-region data residency. We use industry-standard encryption (TLS 1.3 in transit, AES-256 at rest) and conduct regular security reviews. No personal data is transferred outside of Switzerland without appropriate safeguards.
4. Cookies
We use essential cookies required for authentication and session management. We do not use third-party advertising cookies. Optional analytics cookies are only set with your explicit consent.
5. Your Rights
Under the FADP, you have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate data.
- Right to Deletion: Request deletion of your personal data, subject to legal retention obligations.
- Right to Data Export: Receive your data in a structured, machine-readable format (JSON or CSV).
- Right to Object: Object to processing based on legitimate interest.
6. Data Retention
We retain account data for the duration of your account. Messages are retained for 2 years after the last activity. Upon account deletion, personal data is removed within 30 days, except where retention is required by Swiss law.
7. Contact
For any privacy-related requests or questions, contact our data protection team:
Alpine Business Exchange SA
Email: privacy@alpinebusiness.ch
Zurich, Switzerland