Privacy Policy

Last updated: February 21, 2026  •  Version: 1.2

This Privacy Policy explains how Maison La Clef (“Maison La Clef”, “MLC”, “we”, “us”, “our”) collects and processes personal data when you use our website, become a member, or submit requests. We apply Swiss data protection principles and, where applicable, align with GDPR principles for EU/EEA residents.

1) Controller & contact

The controller of your personal data is:

  • Service provider: Zayra Lab GmbH
  • Registered address: 5400 Baden, Switzerland
  • Company number / UID: CHE-147.500.701
  • VAT number: CHE-147.500.701 MWST
  • Email: Email
  • Phone / WhatsApp: Call / WhatsApp
  • Website: maison-la-clef.ch

If you have privacy questions or requests (access, deletion, correction, etc.), contact us using the details above.

2) Scope

This Policy applies to:

  • website visits and enquiries;
  • membership sign-up and administration;
  • reservation and access requests (restaurants, hotels, events, transport, and related preferences);
  • communications via email, phone, WhatsApp, and other channels you choose to use.

Third-party venues/providers you book with (restaurants, hotels, event organisers, transport providers) process data under their own policies. Your contract for the booked service is between you and the provider.

3) Data we collect

3.1 Identification & contact

  • name, address, country, email, phone number;
  • if relevant: company name, VAT/UID information.

3.2 Membership & account

  • selected tier, membership status, renewal/cancellation dates;
  • history of requests and confirmations;
  • support messages and operational notes.

3.3 Request data

  • place name/address/link, date/time, party size, occasion;
  • preferences (e.g., window seat, quiet corner, late check-in, bedding, etc.);
  • constraints (e.g., “avoid terrace”, “not too noisy”).

3.4 Preferences (may include sensitive data)

If you share information such as allergies, dietary restrictions, religious constraints, health-related mobility needs, or other details, some of this may qualify as sensitive personal data under Swiss law. You choose whether to provide it; if you do, we process it only to deliver and personalise the service.

3.5 Communications

  • Emails and messages you send us;
  • Call/WhatsApp metadata and conversation context necessary to execute requests.

4) How we use your data

We process personal data for the following purposes:

  • Service delivery: execute requests, follow up, confirm bookings, handle changes/cancellations where possible.
  • Membership administration: activate access, manage tiers, renewals, downgrades next-month, cancellations.
  • Personalisation: apply your preferences to identify suitable options and improve outcomes.
  • Operational quality & security: prevent abuse, protect communications, maintain service integrity.
  • Legal & compliance: record-keeping, handling disputes, and meeting legal obligations where applicable.

We do not sell personal data, and we do not use your data for unrelated advertising purposes.

5) Who we share data with

5.1 Venues/providers (in scope of your request)

To fulfil your request, we may share the minimum necessary information with the relevant third-party provider (e.g., restaurant, hotel, event organiser, transport provider). This typically includes your name, party size, time window, and any essential preferences or constraints (e.g., allergies).

5.2 Service infrastructure (to operate Maison La Clef)

We use trusted service providers for infrastructure such as email, hosting, storage, collaboration, and payments. They process data only to provide their services to us and under appropriate safeguards.

5.3 Legal requests

We may disclose data if required by law, regulation, or valid legal process, or to protect our rights and safety.

6) Swiss-based infrastructure

Wherever reasonably possible, we build and operate Maison La Clef using Swiss-based providers and infrastructure (currently including Infomaniak SA and Proton AG for operational tooling). Payments are processed via Stripe. This choice reflects our commitment to privacy, operational trust, and a responsible footprint — and, where possible, supporting the Swiss economy.

7) AI processing (Infomaniak Euria)

Maison La Clef may use Infomaniak's Euria as an operational tool to assist with request handling (e.g., extracting preferences, improving internal summaries, and drafting confirmations). We limit processing to what is reasonably necessary for service delivery and do not use it for unrelated purposes.

We limit AI processing to what is reasonably necessary for service improvement and personalisation. We do not authorise AI processing for unrelated purposes.

8) Payments & billing data

Paid memberships are processed via Stripe. Payment details (e.g., card data) are handled by Stripe according to their systems and security standards. We typically receive transaction references and status (e.g., paid / failed), and the billing details required for accounting.

Depending on the situation, third-party costs (e.g., deposits or prepayments required by venues/providers) may be paid directly by you, or advanced by Maison La Clef on your behalf and then invoiced to you. In such cases, we process the billing and reimbursement details required for accounting and service delivery. Any advance payment handling fee is described in our Terms & Conditions.

If you are on Clé Découverte (trial), no payment is taken unless you choose to upgrade to a paid tier.

9) International transfers

We aim to keep operational tooling in Switzerland wherever reasonably possible. However, some communication channels you choose to use (for example WhatsApp or other third-party platforms) and our payment processor Stripe may involve processing outside Switzerland. When this occurs, we limit what we share via such channels and apply appropriate safeguards where feasible.

10) Retention

We keep personal data only as long as necessary to provide the service, manage membership, maintain confirmations, and meet legal obligations. Retention periods may vary depending on the type of data and the context (e.g., accounting records).

11) Security

We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration. This includes access controls, role-based handling, and the use of reputable Swiss infrastructure wherever reasonably possible.

No system is perfectly secure; you should avoid sending highly sensitive information through channels that are not appropriate for it.

12) Cookies & website data

Our website may collect basic technical data such as IP address, browser type, device information, and access logs, mainly to operate and secure the website. If we use analytics or additional cookies in the future, we will update this Policy accordingly.

13) Your rights

Depending on your location and applicable law, you may have rights including:

  • access to your personal data;
  • correction of inaccurate or incomplete data;
  • deletion of data (where applicable);
  • restriction or objection to certain processing (where applicable);
  • data portability (where applicable);
  • withdrawal of consent, where processing is based on consent (e.g., optional preference data / AI processing).

To exercise your rights, contact us using the details in Section 1.

14) Changes to this Policy

We may update this Policy to reflect service improvements, legal requirements, or operational changes. The latest version is published on our website and applies from the date shown above.

15) Contact

For privacy requests or questions, contact: Email