Last updated: January 2026

This Privacy Notice explains how Incorp AG (“Incorp”, “we”, “us”) collects and processes personal data when you use
Incorp.ch (the “Website/Application”) and when you request or purchase our company formation Services (the
“Service”) for:

“LTD” = Swiss GmbH / Sàrl (private limited liability company)

“PLC” = Swiss AG / SA (public limited company / joint-stock company)

This Notice is designed to align with the terminology used in our Terms & Conditions (e.g., “Customer Materials”,
“Third Parties”).

1. Controller and Contact

Data Controller:

Incorp AG

Address: Bubenbergplatz 8, 3011 Bern, Switzerland

Phone: +41 31 312 13 64

Email: support@incorp.ch

For all privacy-related questions, requests, or complaints, contact: support@incorp.ch

2. Key Definitions

Website/Application:
Incorp.ch, including forms, tools, and pages.

Service:
Company formation coordination and administrative services for LTD and PLC.

User / You:
Any person using the Website/Application.

Customer:
A User who requests or purchases the Service.

Customer Materials:
Information and documents you provide (e.g., ID documents, signatures, formation data, correspondence).

Third Parties:
Parties involved in delivering the Service (e.g., notary, commercial register authorities, banks, couriers), and operational providers (e.g., hosting/IT, email systems, document tools, payment providers). 

3. What Personal Data We Process

We process personal data depending on how you use Incorp.ch and which Service steps apply to your file.

A) Data you provide (Customer Materials)

This may include:

Identity data:
Full name, date of birth, nationality, place of birth (if required), gender (if shown on ID), civil status (only if required for a specific formation step), copies/photos of passport/ID card, ID number, validity dates.

Contact data:
Postal address, email address, phone number.

Formation data:
Proposed company name, purpose, registered office address, share capital, shareholders/members, directors/board members, signing powers, beneficial owner information, and related instructions.

Verification data:
Signature specimens, powers of attorney, declarations, confirmations, and other required statements.

Correspondence:
Emails, messages, call notes, and documents you send to us.

B) Data created during the Service

• Internal file references and status history.
• Drafts and versions of documents (as required for coordination).
• Support interactions and operational notes.
• Invoice data, payment status, and accounting references.

C) Website technical data

When you browse or use the Website/Application, we may process:

• IP address, date/time of access, pages visited, device and browser type, operating system, language settings, referring pages.
• Security logs (e.g., to prevent abuse).
• Cookies and similar technologies (see Section 10). 

4. Sources of Data

We receive personal data:

• Directly from you (website forms, uploads, emails, phone calls, instructions).
• From Third Parties involved in your file (e.g., confirmations from a bank or notary where relevant).
• From public sources/authorities (e.g., commercial register publications after registration). 

5. Why We Process Personal Data

We process personal data for the following purposes:

Providing and managing the Service:
Preparing, coordinating, and delivering the LTD/PLC formation process; creating and managing your formation file and documentation pack.

Communicating with you:
Answering questions, providing instructions, confirmations, and status updates; customer support and troubleshooting.

Coordinating with Third Parties:
Sharing required information with the notary, commercial register, banks (where applicable), couriers, and other necessary providers.

Compliance, security, and fraud prevention:
Identity checks and file integrity steps; preventing misuse of the Website/Application and Service.

Billing, accounting, and record-keeping:
Invoicing, payment follow-up, bookkeeping, audit preparation where needed.

Operating and improving the Website/Application and Service:
Maintaining security, reliability, and performance; analyzing usage (where enabled) to improve user experience and processes.

Marketing communications (where permitted):
Sending updates or information about our services (you can opt out at any time). 

6. Legal Bases (Where Applicable)

Depending on your location and the context, we rely on one or more of the following bases:

• Contract performance / pre-contractual measures (to provide the Service or respond to your request).
• Legal obligations (e.g., accounting/record-keeping duties, compliance obligations).
• Legitimate interests (e.g., security, fraud prevention, service improvement, protecting our business).
• Consent (e.g., certain marketing communications, non-essential cookies where required).

Where consent is required, you can withdraw it at any time (without affecting processing done before withdrawal). 

7. Sharing Personal Data with Third Parties

We share personal data only when necessary for the purposes described above, including:

A) Notary partner (confidential business relationship)

• We work with a notary partner to complete notarisation and formation steps where required.
• We may treat the identity of the notary partner as confidential as a business relationship element and do not publicly disclose it.
• However, your necessary data must be shared with the notary to perform notarisation, legal checks, and required filings.
• Where operationally or legally necessary (e.g., signature instructions, appointment, document finalisation), the notary’s identity may be disclosed to you for execution of your file.

B) Authorities and registers

Competent authorities and Commercial Register offices involved in formation.

C) Banks (where applicable)

Banks involved in capital deposit confirmation steps and related documentation.

D) Operational service providers (processors)

• Hosting and IT/security providers.
• Email, productivity, CRM/document management tools.
• Payment providers (if used).
• Analytics providers (if enabled).

These providers process data on our behalf under appropriate contractual arrangements.

E) Professional advisors (limited cases)

Accountants or legal advisors engaged for a specific case where necessary and permitted.

No selling of personal data:

We do not sell your personal data.

8. International Transfers

Your data is primarily processed in Switzerland and/or Europe. If we (or our providers) transfer data to countries that do not offer an equivalent level of protection, we implement appropriate safeguards where required (e.g., contractual safeguards and access controls). 

9. Data Retention

We keep personal data only as long as needed for:

• Providing and documenting the Service and any follow-up;
• Meeting legal obligations (including record-keeping and accounting requirements);
• Resolving disputes and enforcing agreements; and
• Ensuring security and preventing abuse.

Retention periods vary depending on the data category and the legal context. When data is no longer required, we delete it or anonymize it where appropriate, unless we must keep it by law. 

10. Cookies and Similar Technologies

We may use cookies or similar technologies for:

• Essential functions (site operation, security, session integrity).
• Performance and analytics (to understand usage and improve the Website/Application).
• Marketing (only where enabled/allowed).

If your jurisdiction requires it, we provide a cookie banner or preference tools for non-essential cookies. You can also manage cookies through your browser settings (note that disabling essential cookies may affect functionality). 

11. Security Measures

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure. These measures are designed to be proportionate to the risk and may include access controls, data minimization, secure operational procedures, and monitoring.

No online system is 100% secure. You should also protect your own communications and devices. 

12. Marketing Preferences

If we send marketing communications (where permitted), you can opt out at any time by:

• Using the unsubscribe link (if provided), or
• Contacting support@incorp.ch.

Opting out of marketing does not affect essential service communications (e.g., order confirmations, required instructions, invoices). 

13. Your Rights

Depending on applicable law (Swiss data protection rules and/or GDPR where applicable), you may have the right to:

• Request access to your personal data.
• Request correction of inaccurate or incomplete data.
• Request deletion (where legally possible).
• Request restriction of processing (in certain cases).
• Object to processing (in certain cases, especially where based on legitimate interests).
• Request data portability (where applicable).
• Withdraw consent (where processing is based on consent).

To exercise your rights, contact support@incorp.ch. We may request verification of identity before fulfilling requests. 

14. Children

Our Website/Application and Service are not intended for children. We do not knowingly collect personal data from minors for Service purposes. 

15. Complaints

If you have concerns, please contact us first at support@incorp.ch and we will try to resolve the issue. Depending on your jurisdiction, you may also have the right to lodge a complaint with the competent supervisory authority. 

16. Changes to This Privacy Notice

We may update this Privacy Notice from time to time. The latest version published on Incorp.ch is the valid version. The “Last updated” date at the top indicates when changes were made.