Privacy Policy

Last updated: March 2026

1. Who we are

This Privacy Policy applies to Bark and Beauty AG, a company incorporated under Swiss law and registered in Adliswil, Switzerland (company registration number CHE-251.390.557). We operate the Noodle Box suite of business products, accessible at www.noodlebx.com.

Bark and Beauty AG is the data controller for personal data collected through our website and services. When we say "we", "us", or "our" in this policy, we mean Bark and Beauty AG.

2. What data we collect

We collect only the data necessary to operate our services and communicate with you. This includes:

Contact form data. When you submit a contact or early access request form on our website, we collect your name, email address, and company name. You may also provide additional information voluntarily in the message field.

Usage analytics. We collect anonymised information about how visitors interact with our website, such as pages visited, time spent on each page, and the general geographic region of visits. This data does not identify you personally and is aggregated for statistical purposes.

Technical data. Our servers may automatically record standard technical information such as your IP address, browser type, and operating system when you visit our website. This data is used solely for security and operational monitoring.

3. How we use your data

We use the data we collect for the following purposes:

Service delivery. To respond to your enquiries, process early access requests, and provide you with the Noodle Box products and services you have requested.

Communication. To send you important updates about your account, product changes, or other operational matters related to your use of our services. We will only send marketing communications if you have explicitly opted in.

Improvement. To understand how our website and products are used so we can improve them. This analysis is performed on aggregated, anonymised data wherever possible.

Legal compliance. To meet our obligations under applicable Swiss and European Union law, including data protection, tax, and anti-money-laundering regulations.

We process your personal data on the basis of your consent (where provided), on the basis of our legitimate interests in operating and improving our services, and where necessary to fulfil a contract with you.

4. Cookies

We use essential cookies only. Essential cookies are strictly necessary for our website to function correctly — for example, to remember your cookie preference or maintain a secure session.

We do not use tracking cookies, advertising cookies, or any third-party cookies that monitor your behaviour across other websites. You will not find any retargeting pixels, social media trackers, or behavioural profiling scripts on our website.

You can configure your browser to refuse all cookies, but please note that some parts of our website may not function correctly without essential cookies enabled.

5. Data sharing

We do not sell, rent, or trade your personal data to any third party. We do not share your data for advertising purposes.

Service providers. We may share limited data with trusted service providers who assist us in operating our website and services — for example, hosting providers and email delivery services. These providers are contractually bound to process your data only on our instructions and in compliance with applicable data protection law.

Legal requirements. We may disclose your data if required to do so by a Swiss court order, regulatory authority, or other applicable legal obligation. We will notify you of any such disclosure where we are legally permitted to do so.

All service providers we engage are carefully selected and are required to maintain data security standards consistent with this policy.

6. Data retention

We retain your personal data only for as long as necessary for the purposes described in this policy, or as required by applicable law.

Data submitted through contact forms is retained for a maximum of three years from the date of submission, after which it is securely deleted unless an ongoing business relationship requires longer retention.

Anonymised analytics data may be retained indefinitely as it cannot be used to identify you.

Technical server logs are retained for a maximum of 90 days for security and operational purposes.

7. Your rights

Under the Swiss Federal Act on Data Protection (revDSG) and, where applicable, the European Union General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

Right of access. You may request a copy of the personal data we hold about you.

Right to correction. You may request that we correct any inaccurate or incomplete personal data we hold about you.

Right to deletion. You may request that we delete your personal data, subject to any legal obligations that require us to retain it.

Right to data portability. Where we process your data on the basis of your consent or a contract with you, you may request a copy of your data in a structured, commonly used, and machine-readable format.

Right to object. You may object to our processing of your personal data where we rely on legitimate interests as the legal basis, and we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

Right to withdraw consent. Where our processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact us using the details in Section 9 below. We will respond to all valid requests within 30 days.

8. Data security

We take the security of your personal data seriously. Our infrastructure is hosted in Switzerland and we apply industry-standard technical and organisational measures to protect your data against unauthorised access, loss, or disclosure.

All data transmitted between your browser and our servers is encrypted using TLS. Access to personal data within our organisation is restricted to personnel who need it to perform their role.

In the unlikely event of a data breach that affects your rights and freedoms, we will notify you and the relevant supervisory authority as required by applicable law.

9. Contact for privacy matters

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how we handle your personal data, please contact us at:

Bark and Beauty AG
Adliswil, Switzerland
Email:

We take all privacy enquiries seriously and aim to respond promptly.

10. Supervisory authority

If you are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) at www.edoeb.admin.ch.

If you are located in the European Union or European Economic Area, you may also have the right to lodge a complaint with the data protection supervisory authority in your country of residence.

11. Jurisdiction and governing law

This Privacy Policy is governed by the laws of Switzerland. Any disputes arising from or in connection with this policy shall be subject to the exclusive jurisdiction of the courts of Zurich, Switzerland, unless mandatory consumer protection provisions in your country of residence require otherwise.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email.

We encourage you to review this policy periodically. Continued use of our website or services after any changes have been posted constitutes your acceptance of the updated policy.