Privacy Policy

The data controller responsible for the Website is:

• Legal entity name: PACHEDU Wehrli & Kirui Co.
• Registered address: KIG, Hofenstrasse 37, 8708 Männedorf, Switzerland
• Contact email: hello@pachedu.io
• Data Protection Officer / privacy contact: Please use hello@pachedu.io

2.1 PACHEDU Private Registry

When you complete the Private Registry form (embedded on the Home page), the following information is collected and submitted directly to our email marketing provider, Mailchimp:

• Email address (required)
• First name and last name (required)
• Organization (required)
• LinkedIn profile URL (optional)
• Category — “Which one best defines you?”, e.g. Investor, Family Office, Start-up/(Co-)Founder, Corporate Executive, Policy-maker, Media, etc. (required)
• Country / location (required)
• Newsletter opt-in (optional checkbox)

Important: this form submits directly from your browser to Mailchimp; it is not received or stored by any PACHEDU server or database. PACHEDU staff view and manage this data inside the Mailchimp platform.

2.2 Contact form

The Contact page collects your name, email address and message only to generate a pre-filled email (a “mailto:” link) that opens your own device's default email application, addressed to hello@pachedu.io. No data entered into the Contact form is transmitted to or stored on any PACHEDU server, database, or third-party platform. PACHEDU only receives your message if your email client is configured and you choose to send that email; the content then exists as an ordinary email in our inbox, subject to our normal email retention practices.

2.3 Account data (Login / Registration for site access)

If you create an account to access restricted areas of the Website (e.g. via the Login/Register pages), we process your email address, a system-assigned role (admin, editor or user), and authentication data needed to keep you signed in. This is managed through Base44, our website hosting and application platform.

2.4 Automatically collected data — analytics

Like most websites, PACHEDU automatically collects limited technical data when you browse the site, via Google Analytics (GA4). This may include your IP address (processed by Google, potentially before truncation/anonymization — to be confirmed and configured, see Section 6), device and browser type, pages visited, referring pages, and approximate location derived from your IP address. See Section 6 (Cookies) for details.

We process your personal data only for the purposes described in this Policy and on the legal bases permitted under the GDPR and FADP, including your consent, our legitimate interests in operating and improving the Website, and the performance of our obligations where applicable.

We do not sell personal data. We share personal data with the following categories of recipients, each acting as an independent controller or as our processor under a data processing agreement:

• Mailchimp (The Rocket Science Group LLC, USA) — receives Private Registry and newsletter sign-up data directly, as described in Section 2.1.
• Base44 — our website hosting and application platform; processes account data and hosts the Website's code, content and (for logged-in areas) database.
• Supabase — a storage subprocessor used by Base44 to serve static assets (images, logo) for the Website.
• Google LLC — provides Google Analytics (GA4), processing the technical/analytics data described in Section 2.4.

Some of our service providers, including Mailchimp, Google and Base44, may process personal data outside Switzerland or the EEA, including in the United States. Where required, PACHEDU relies on appropriate safeguards, such as Standard Contractual Clauses and recognised data-transfer frameworks, in accordance with applicable Swiss and EU data-protection law.

The table below reflects the cookies and tracking technologies confirmed as currently installed on the Website. A cookie consent banner will let visitors accept or reject non-essential cookies (Analytics, Functional/Marketing) before they are set; strictly necessary cookies do not require consent.

Note: Google Analytics currently loads on every visit to the Home page without waiting for consent. Before the cookie banner goes live, this should be updated (e.g. via Google Consent Mode v2) so that GA4 only fires after a visitor has given analytics consent, and so that IP addresses are anonymized in line with GDPR/FADP expectations.

You can manage or withdraw your cookie preferences at any time via the cookie settings link in the Website footer, or through your browser settings.

We retain personal data only for as long as necessary for the purposes described in this Policy:

• Registry and newsletter data is retained in Mailchimp until you unsubscribe or ask us to delete it, or per Mailchimp's own retention settings.
• Contact form messages exist only as emails in our inbox and are retained per our internal email retention practice.
• Account data is retained for as long as your account remains active, plus a reasonable period afterwards for security and legal purposes.
• Analytics data is retained by Google Analytics per its configured retention window (Google's default is 14 months for GA4 unless changed).

Subject to applicable law, you have the right to:

• Access the personal data we hold about you;
• Request rectification of inaccurate or incomplete data;
• Request erasure of your data (“right to be forgotten”);
• Request restriction of, or object to, our processing of your data;
• Request data portability, where technically feasible;
• Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal (e.g. by unsubscribing from the newsletter or via Mailchimp's unsubscribe link, or via the cookie settings link);
• Lodge a complaint with a supervisory authority — in the EU, the data protection authority of your country of residence; in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC).

The Website is directed at professionals (investors, founders, policy-makers, and similar) and is not intended for children. We do not knowingly collect personal data from anyone under the age of 16.

We rely on our providers' (Base44, Supabase, Mailchimp, Google) technical and organizational security measures, including encryption in transit, access controls, and provider-side security certifications, to protect personal data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time to reflect changes to the Website, our providers, or legal requirements. The “Last updated” date at the top of this page will be revised accordingly. Material changes will be highlighted on the Website.

Questions about this Privacy Policy or how we handle your personal data can be sent to hello@pachedu.io.