What we know about you, and why.

We process your data in accordance with the Swiss Federal Act on Data Protection. This page says what we collect, what for, and who we entrust it to.

PPG-Doctors AG, Bibersteinerstrasse 4, 5022 Rombach, Switzerland.

01. Data controller

PPG-Doctors AG, Bibersteinerstrasse 4, 5022 Rombach, Switzerland. For any question about your data, write to support@oya.organic.

02. What we collect

When you order: name, delivery and billing address, e-mail address, and the details of your order. A phone number if you give one, for the delivery.

When you browse: aggregated usage data about the website, which helps us see which pages work and where people drop off.

We collect no health data, and we do not ask you for any.

03. Your payment data

It never passes through our servers. Your card number, your TWINT or PayPal account are processed directly by the payment provider. We only receive confirmation that the payment was accepted.

04. Why

To fulfil your order and deliver it to you. To keep our accounts, as the law requires. To write to you about your order or your subscription. And, if you have agreed to it, to send you our advice e-mails and our offers.

05. Who we share it with

The carrier, to deliver to you. The payment provider, to collect payment. Our technical providers for hosting, e-mail delivery and audience measurement, who act on our instructions and are not allowed to use it for themselves.

We do not sell your data and we do not rent it to anyone.

06. For how long

Data linked to an order is kept for ten years, as the law requires for accounting records. Your account and your history remain as long as you keep them: at your request, we delete whatever is not subject to that obligation.

07. Your rights

You can ask for access to your data, its correction, its deletion, and object to its use for marketing purposes. An e-mail to support@oya.organic is enough; we reply within thirty days. Every marketing e-mail carries an unsubscribe link that works.

08. Cookies

The cookies needed for the website to work — cart, session, language — are set without your consent because the website does not work without them. Measurement and advertising cookies are only set after your consent, which you can withdraw at any time.

Our providers, as of 15 September 2026:

- Vercel Inc. (United States, European servers in Frankfurt) hosts the website.

- Shopify International Ltd. (Ireland) runs the shop and processes payments: card, TWINT and the other methods shown at checkout.

The website loads no audience-measurement or advertising tool. If we add one, it will be listed here, with its country, before it goes live.