Section 01Introduction
Glyca is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you visit our website or purchase products through our platform.
We act as a data controller under the terms of the applicable data protection legislation and, where applicable, the European Union’s General Data Protection Regulation (GDPR).
To be confirmed · governing law
The source document cites the new Swiss Federal Act on Data Protection (nFADP), in force since September 1, 2023. Confirm Glyca’s country of registration and replace this block with the statute that applies.
Section 02Data we collect
2.1 Information you provide
—Full name, email address, billing and shipping address
—Login credentials, if you create an account on our platform
—Communications you send us, including support requests
2.2 Information collected automatically
—IP address, browser type, device information
—Pages visited, time spent on the site, referral URLs
—Cookies and similar tracking technologies
2.3 Information from third parties
—Logistics and delivery providers may share order tracking data with us
—Analytics partners may share aggregated audience data
Legal basis for processing
We process your personal data based on the following legal grounds:
—Contract: to process your orders and manage your account
—Legitimate Interests: to improve our services, prevent fraud, and communicate with you
—Legal Obligation: to comply with applicable laws and regulations
—Consent: for marketing communications, where you have opted in to receive them
How we use your data
—To process and fulfill your orders
—To manage your account and provide customer support
—To send order confirmations, shipping updates, and service notifications
—To send marketing communications (where you have consented)
—To improve our website, products, and services
—To comply with legal and regulatory obligations
—To detect and prevent fraud or misuse
Sharing your data
We do not sell your personal data. We may share it with:
—Logistics and delivery providers
—IT service providers and cloud hosting platforms
—Legal and regulatory authorities where required by law
International transfers
Where your data is transferred to other countries, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the competent authorities.
To be confirmed · country of establishment
The source document states that the company is based in Switzerland, a country recognised by the European Union as providing an adequate level of data protection. Confirm where Glyca is established so this paragraph can name it and its adequacy status.
Section 07Data retention
We retain your personal data only for as long as necessary for the purposes described in this policy, or as required by law. Order records are typically retained for 10 years, in compliance with the applicable tax and commercial obligations.
Section 08Your rights
Under the applicable data protection legislation and the GDPR, you have the following rights:
—The right to access your personal data
—The right to rectify inaccurate data
—The right to erasure (“the right to be forgotten”)
—The right to restrict processing
—The right to data portability
—The right to object to processing
—The right to withdraw consent at any time
To exercise any of these rights, please contact us at: info@glycapharma.com
Section 09Cookies
We use cookies to improve your browsing experience. You can manage your cookie preferences through our Cookie Settings tool on the website. For more details, please see our Cookie Policy.
Section 10Changes to this policy
We may update this Privacy Policy periodically. We will notify you of significant changes by email or through a prominent notice on our website. The effective date at the top of this document reflects the most recent revision.
Section 11Contact and complaints
For questions about this policy or to exercise your rights, please contact us at: info@glycapharma.com
If you are not satisfied with our response, you have the right to lodge a complaint with the competent data protection supervisory authority.
To be confirmed · supervisory authority
The source document names the Swiss Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch. Replace with the authority of Glyca’s own jurisdiction, with its website.
