Privacy Policy

Last Updated: 28 October 2025

1. Introduction

IMT Analytics AG ("we," "us," or "our") is committed to protecting your personal data. This Privacy Policy outlines how we collect, process, and safeguard your data in compliance with applicable data protection laws, including but not limited to:

• European Union: General Data Protection Regulation (GDPR)
• Switzerland: Federal Act on Data Protection (nFADP)
• United States: Applicable state-level privacy laws, including the California Consumer Privacy Rights Act (CPRA)

This Privacy Policy applies to all websites and landing pages operated by IMT Analytics AG, including imtanalytics.com. Any personal data collected through this platform is processed in accordance with the terms outlined below.

Data Controller: IMT Analytics AG is the data controller for the processing of personal data described in this policy.

United States Operations: IMT Analytics Inc. (United States) may act as a data processor or joint data controller for order fulfillment, logistics, and customer service activities in the United States.

Data Protection Contact: For any privacy-related inquiries, please contact customerservice@imtanalytics.com.

By using our website and services, you consent to the practices described in this policy.

2. Data Collection and Usage

We collect and process personal data for various purposes, including website visits, customer inquiries, order fulfillment, and marketing activities.

2.1 Website Visits

When you visit our website, our web server automatically collects the following information for security and functionality purposes:

• IP address
• Internet service provider
• Session start and end times
• Call status/success messages
• Browser type
• Operating system

This data is collected based on our legitimate interests under Article 6(1)(f) GDPR to ensure website security and functionality.

2.2 Contacting Us

When you contact us via a contact form or email, we collect the personal data you provide (e.g., name, email address, company, role) to process your request. This data is not shared with third parties unless required to fulfill your request or provide customer support.

2.3 Chatbot and Automated Interactions (Lyro by Tidio)

Data Required for Personalized Support

To provide personalized support and track prior inquiries, our chatbot may request your name and email address. This helps us ensure service continuity, quality, and fraud prevention.

• Legal bases: Consent (Art. 6(1)(a) GDPR) and legitimate interests (Art. 6(1)(f) GDPR).

If you prefer not to share this information, you may contact us directly at customerservice@imtanalytics.com for assistance.

2.4 Shopify and Data Processing

Our store is hosted on Shopify, which may collect and process personal data such as:

• IP address, browser information, and device type
• Purchase history and payment details
• Location and language preferences

Shopify processes this data to facilitate transactions, enhance security, and improve user experience. Shopify complies with GDPR and CPRA. You can review Shopify’s Privacy Policy here.

International Data Transfers: Shopify’s servers are located in the United States, Canada, Ireland, and Singapore. Personal data may be transferred internationally under safeguards such as Standard Contractual Clauses (SCCs).

Security Measures:

• TLS encryption for data transmission
• Access controls and authentication safeguards
• Regular security audits and monitoring

2.5 Marketing & Analytics (Google Analytics, GetResponse & Zoho Campaigns)

We use Google Analytics and email marketing platforms to analyze user behavior and improve website performance and communications.

3. Cookies and Tracking Technologies

We use cookies to enhance user experience, including:

• Essential Cookies – Required for site functionality (e.g., checkout, login).
• Analytical Cookies – Used for traffic and performance measurement.
• Marketing Cookies – Used for ad performance measurement and retargeting.

Users can manage cookie preferences via browser settings or our Cookie Consent Manager.

3.1 Shopify Network Intelligence

We participate in Shopify’s Network Intelligence program, which uses aggregated and anonymized commerce data to help detect fraud and improve store performance. No personally identifiable information is shared.

4. Legal Basis for Data Processing

We process personal data based on:

• Contractual Necessity (Art. 6(1)(b) GDPR)
• Consent (Art. 6(1)(a) GDPR)
• Legitimate Interests (Art. 6(1)(f) GDPR)

5. Data Transfers and Security

Personal data may be transferred outside Switzerland and the EEA under safeguards such as SCCs, encryption, and controlled access procedures.

6. Data Retention Periods

• Chatbot data: 12 months
• Google Analytics data: 14 months
• Newsletter subscription data: Until you unsubscribe
• Purchase-related data: 10 years (legal/tax compliance)
• Customer account data: Accounts inactive for 24 months may be anonymized or deleted unless retention is required by law.

7. Your Rights

You may have the right to access, correct, delete, restrict, or object to processing of your personal data under applicable data protection laws.

7.1 California / CPRA Notice

IMT Analytics does not sell personal data, and we do not share personal data for cross-context behavioral advertising as defined under the CPRA. California residents may still exercise their rights to access, correct, or delete their personal information by contacting us.

8. Third-Party Service Providers

We collaborate with service providers including Shopify, Tidio, Google Analytics, GetResponse, and Zoho Campaigns, each of which processes data under GDPR and CPRA-compliant frameworks.

9. External Links

Our website may contain links to external websites. We are not responsible for their privacy practices.

10. Contact Information

• IMT Analytics AG
• Gewerbestrasse 8, 9470 Buchs, SG, Switzerland
• Email: customerservice@imtanalytics.com
• Telephone: +41 81 750 67 10

11. Policy Updates

We may update this Privacy Policy from time to time. Changes will be posted with an updated revision date.