Back to home

The legal pages

Privacy policy

How PHTM Consulting handles personal information when you visit this website or contact us about working together.

Draft updated:

Business details

Legal operator
Phantom Consulting
Location
Vaud
Country of establishment
Switzerland
Privacy and legal enquiries
contact@phtm.ch

Who is responsible

PHTM Consulting is the public-facing name of Phantom Consulting, based in Vaud, Switzerland. Phantom Consulting is responsible for the personal information covered by this notice. Contact us at contact@phtm.ch.

This notice covers website visitors and people who contact us about our services. If we process personal information on a client's behalf while delivering a project, our agreement with that client and any applicable data processing agreement govern that work.

Information we handle

You can browse the website without creating an account or making a payment. Enquiry links open your email application so you can write to contact@phtm.ch; this website does not collect enquiries through a form. Visiting a page still sends technical information to our hosting provider.

  • Website requests: IP address, requested page, browser and device information, request time, and information needed to deliver pages, investigate errors and prevent abuse.
  • Correspondence: your name, contact details, business details and the information you choose to include when contacting us, together with our replies.
  • Business discussions: information about your offer, team and operational needs that you voluntarily share while discussing a potential engagement.

Why we use it

We use technical information to operate and protect the website. We use correspondence to answer questions, assess whether our services are a fit and discuss a proposal. You choose whether to contact us, but we may be unable to respond without appropriate contact details.

Our handling of personal information is subject to the Swiss Federal Act on Data Protection. Where EU or UK data protection law also applies, the relevant grounds depend on the activity:

  • Our legitimate interests in running a reliable, secure website and communicating with business contacts, balanced against the rights of the individuals concerned.
  • Steps requested before entering a contract, or performance of a contract, where you personally are the prospective client or contracting party. Correspondence with someone representing a company is generally handled under legitimate interests.
  • A legal obligation, where we must keep or disclose information to comply with applicable law.

Hosting and other recipients

The website is hosted on Vercel. Vercel processes technical request information to serve the website and operate its infrastructure. Its privacy notice describes its own processing of website visitor information.

Our email is provided through Google Workspace (Gmail). Enquiry messages and our replies stay in our inbox; we do not routinely forward them to other people or copy them into a CRM, AI service or separate enquiry database. Google and the services used by the sender necessarily process messages to transmit and store them. Disclosure may still be required by law.

This website has no advertising pixels or data brokerage functionality. Following a link to LinkedIn or another external website takes you to a service governed by its own privacy notice.

Vercel privacy notice

Google Workspace data processing terms

Google Workspace subprocessors

International processing

Google and Vercel operate international infrastructure. Email and technical website information may be processed outside Switzerland, including in the United States. Their published information describes their international processing and transfer frameworks; the arrangements applicable to an individual account depend on the service and agreement in use.

The precise processing destinations and contractual safeguards for our current provider accounts remain under review. This section must be finalised before the policy is published. You can contact contact@phtm.ch for questions about these arrangements.

How long information is kept

Enquiry messages and replies are kept in our Google Workspace inbox. We have not set a fixed automatic deletion period for unsuccessful enquiries. You can request deletion at contact@phtm.ch. Any continued retention must take account of an active discussion, an engagement, a legal retention duty or the need to establish, exercise or defend legal claims.

Technical logs and provider backup copies follow the hosting and email services' applicable retention and deletion arrangements. Deleting a message from an inbox does not necessarily remove provider backup copies immediately. We do not promise a particular provider deletion deadline that we have not verified for our accounts.

Cookies and tracking

This website does not currently include optional analytics, advertising cookies or embedded social media feeds. Hosting and security services may use essential technologies to deliver pages and prevent abuse. The website's fonts are served with the site, rather than requested from Google by your browser.

If we introduce optional tracking, we will update this notice and obtain consent before using it where the law requires. You can manage cookies through your browser settings; blocking essential technologies may affect how a website works.

Your privacy rights

Depending on the law that applies and the circumstances, you may have rights to access, correct or delete your personal information, restrict its use, or receive a portable copy. These rights are subject to applicable conditions and exceptions.

You may object to processing based on legitimate interests on grounds relating to your situation. Where applicable, you may object to direct marketing at any time. If processing relies on consent, you may withdraw that consent without affecting the lawfulness of earlier processing.

Contact the operator using the privacy email in the business details above to exercise your rights. We may request proportionate information to verify your identity and will respond within the applicable legal deadline.

In Switzerland, the relevant federal supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC). Contact us first so we can try to resolve your concern; you may also report suspected data protection violations to the FDPIC. Rights to contact another competent authority, where applicable, are unaffected.

Federal Data Protection and Information Commissioner

Security and sensitive information

No internet transmission or storage system can be guaranteed completely secure. Please do not send passwords, payment card details, health information or identifiable client records in an initial enquiry. If a project requires access to confidential material, the access method and responsibilities should be agreed separately.

The website does not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

Changes and questions

We will update this notice when our website or relevant processing changes. The date above identifies the version. Where required, we will provide further notice of material changes before they take effect.

For questions about this notice or your information, use the privacy and legal contact in the business details above.