French version authoritative. English courtesy translation. Version dated 01.04.2026.
Privacy Policy & General Data Protection Statement
of Sheep-Me Sàrl
(“Sheep-Me”)
General information
In accordance with the Swiss Federal Act on Data Protection (FADP), this General Data Protection Statement (the “Statement”) is intended to indicate:
the personal data processed by Sheep-Me;
the purposes of the processing of such personal data;
the methods of processing such personal data; and
the organizational and technical measures taken to ensure the protection of the personal data processed, as well as respect for the personality of the persons concerned.
This Statement is also intended to indicate the rights of the persons concerned in connection with the processing of their data.
If this Statement is available in several languages, only the French version is authoritative, the others being provided strictly for illustrative purposes.
Full identity and address of Sheep-Me
Sheep-Me is a limited liability company under Swiss law, whose address is as follows:
Sheep-Me Sàrl
Route des Flumeaux 45
1008 Prilly, Switzerland
Telephone: 058 590 88 89
E-mail: info@sheep-me.com
Website: https://sheep-me.com
Commercial register: CH-550.1.256.887-6General description of Sheep-Me’s activities
Sheep-Me’s purpose is to operate the website “https://sheep-me.com” (the “site”) and the related “Sheep-Me” mobile application (together: the “platform”), which allow any person registered as a buyer (“buyer”), by creating an account, to order consumable goods (“products”) from third-party sellers and to have them delivered by Sheep-Me, and any person registered as a seller (“seller”), by creating an account, to offer products for sale, in accordance with the applicable legal framework, including the general terms and conditions appearing on the platform.
Data processed
The personal data processed by Sheep-Me is described below by categories of data subjects: Sheep-Me’s contracting parties (section 4.1) and internet users (section 4.2).
Sheep-Me acts as controller (Art. 5 let. j FADP) when it processes personal data concerning its contracting parties in connection with contracts concluded with them, or concerning internet users.
Sheep-Me acts as processor (Art. 5 let. k FADP) when it processes personal data concerning its contracting parties, not in connection with contracts that it has itself concluded with them, but in connection with contracts concluded separately by such contracting parties (as buyers or sellers) directly with each other.
In general, Sheep-Me ensures that the processing of personal data is limited to what is necessary in relation to the purposes for which such personal data is processed (data minimization).
Sheep-Me’s contracting parties
Sheep-Me processes all personal data arising from the contracts it concludes and their performance.
Sheep-Me also processes personal data that does not arise from contracts concluded by Sheep-Me itself, but from contracts concluded between buyers and sellers through its platform, to which Sheep-Me is not a party.
The personal data processed may include in particular, depending on the contracting parties (buyers on the platform; sellers on the platform; employees), the following:
Identification data (first name(s) and last name(s); gender; date of birth; civil status; names and ages of dependent children; Swiss AVS number; nationality(ies) and residence permits; postal address(es); e-mail address(es); telephone number(s); profession(s); functions and titles).
Contractual data (type of contract concluded; related general terms and conditions; content of the contract concluded; agreed services; pre- and post-contractual communications).
Financial data (financial flows related to contractual performance; bank details; payment history).
Communications (messages, exchanges and comments), regardless of medium and content, addressed to Sheep-Me.
Geolocation data (only in connection with the delivery of products).
Push notifications may be used to inform users of the status of an order, delivery, payment, internal message, operational alert or account-security matter.
Geolocation may be used to determine or confirm a delivery address, calculate a route, organize a delivery, show nearby delivery opportunities, dispatch orders and monitor the operational status of an active delivery. For deliverers (“Sheepers”), Sheep-Me may collect, transmit and store the precise location of the device when the deliverer is marked as active in the application, as well as while completing a delivery.
Such data may include identity documents, residence or work permits, AVS number, bank details, contractual data, remuneration data, delivery history, internal messages, notifications, technical logs and geolocation data strictly necessary for active deliveries.
Where Sheep-Me has a contractual relationship with a deliverer (“Sheeper”), it may process data necessary for identification, contract performance, employment law, social insurance, AVS, verification of the right to work, remuneration, payouts, security, deliveries and proof of performance of services.
Internet users
The Sheep-Me website and mobile application may use cookies, tags, technical identifiers, push notifications and other technical means of identification and local storage (the “cookies”), i.e. files stored on the computer or mobile device of persons connecting to the website (“internet users”).
Sheep-Me may therefore process the following personal data concerning internet users: pages viewed on the website; the internet user’s IP address; type of browser used; time, duration and frequency of connections; use of links from and to the website.
In addition, data (first name(s) and last name(s); e-mail address; content of messages) of any person contacting Sheep-Me through its website is processed by Sheep-Me.
Furthermore, subscription to Sheep-Me’s newsletter on its website involves the processing by Sheep-Me of data relating to the e-mail address of the subscribed person.
Purposes of the processing of personal data
The personal data described above is processed for the purposes described below.
Sheep-Me’s contracting parties
Identification of contracting parties.
Performance of contracts concluded with Sheep-Me itself or directly between contracting parties.
Preparation of statistics for the purpose of developing the range of services.
Advertising concerning other Sheep-Me services.
Internet users
Improvement of the website and its visibility.
Preparation of statistics.
Provision of services.
Advertising.
Recipients of personal data (processors)
All data processed by Sheep-Me in electronic format via the site, its e-mail addresses, its mobile application, its databases, its document storage and its IT interface is hosted mainly in Switzerland by Infomaniak, including the databases, backups and S3-compatible storage used by Sheep-Me.
Financial, payment, refund, dispute and payout data is processed in particular via Stripe, including Stripe Connect, for card payments, TWINT, seller and deliverer onboarding, and bank payouts to sellers and deliverers.
In detail, Sheep-Me’s processors are as follows:
Infomaniak: hosting in Switzerland of the site, the application, databases, backups, e-mails, possible newsletters, document storage and S3-compatible storage.
Stripe / Stripe Connect: processing of payments, cards, TWINT, refunds, disputes, fraud prevention, onboarding of sellers and deliverers, identity or business verification, bank details and payouts.
Google Maps, Places and Geocoding: address search, geocoding, maps, routes, distance calculations and estimated delivery times.
Firebase Cloud Messaging: sending push notifications and processing notification tokens associated with users’ devices.
Social login providers: Apple, Google, Facebook and X, only to enable authentication, account creation or account login. These providers may transmit certain identification data to Sheep-Me, such as name, e-mail address, account identifier and, depending on the user’s choices, a relay or masked e-mail address.
Odoo self-hosted on Infomaniak infrastructure: internal accounting, invoicing, orders, payments, accounting entries, payouts to sellers and remuneration or payouts to deliverers.
App stores and mobile services: Apple App Store and Google Play may process data relating to download, distribution, diagnostics, error reports or rules applicable to mobile applications.
Clarifications concerning deliverers / Sheepers. Where Sheep-Me has a contractual relationship with a deliverer (“Sheeper”), it may process data necessary for identification, contract performance, employment law, social insurance, AVS, verification of the right to work, remuneration, payouts, security, deliveries and proof of performance of services.
Such data may include identity documents, residence or work permits, AVS number, bank details, contractual data, remuneration data, delivery history, internal messages, notifications, technical logs and geolocation data strictly necessary for active deliveries.
Geolocation, notifications and mobile application.
Geolocation is used to determine or confirm a delivery address, calculate a route, organize a delivery, show nearby delivery opportunities, dispatch orders, monitor the operational status of an active delivery and allow support, the relevant customers and operational teams to follow the progress of a delivery.
Background location is used only for deliverers (“Sheepers”) when their status is active or when a delivery is in progress. It is not required for customers placing orders, except to confirm or facilitate a delivery address when the user chooses to use that feature.
For deliverers (“Sheepers”), Sheep-Me may collect, transmit and store the precise location of the device when the deliverer is marked as active in the application, as well as while completing a delivery. When the deliverer is active or completing a delivery, location updates may continue in the background so that order dispatch, route calculation, delivery tracking, operational safety, support and dispute resolution can function even when the application is not displayed on screen.
Location tracking stops when the deliverer goes inactive, logs out or when Sheep-Me disables the active status in accordance with the application’s features. Sheep-Me does not collect continuous GPS traces from deliverers when they are not active for deliveries.
Location and route history related to active deliveries may be retained to the extent necessary for delivery operations, proof of performance of services, safety, support, remuneration, invoicing, fraud prevention, legal obligations and dispute resolution. Data that is no longer necessary is deleted, anonymized or archived in accordance with applicable requirements.
Push notifications may be used to inform users of the status of an order, delivery, payment, internal message, operational alert or account-security matter.
Camera.
The Sheep-Me application may request access to the camera in order to scan QR codes related to pickups or deliveries, and to allow sellers or suppliers to add or update product photos where this feature is available. Camera access is used only when the user voluntarily activates a feature requiring the camera. Sheep-Me does not access the camera in the background.
Account deletion, withdrawal of consent and disabling permissions.
The user may request deletion of their account and associated personal data by contacting Sheep-Me at info@sheep-me.com or through the features available in the application where such features are provided.
Certain data may however be retained for as long as necessary to comply with legal, accounting, tax, social-security or contractual obligations, to prevent fraud, ensure security, prove transactions or resolve disputes.
The user may withdraw certain permissions at any time from their device settings, including location, camera and push notifications. Withdrawing a permission may limit certain application features, such as delivery tracking, QR code scanning or receipt of operational alerts.
Retention, proof of acceptance and signed documents.
Sheep-Me may retain proof of acceptance of the general terms and conditions, this Statement and contracts concluded electronically, including the user identifier, role, document version, language, timestamp, IP address, user agent, cryptographic fingerprint of the document and, where applicable, a generated and stored PDF copy.
Retention periods are determined taking into account contractual, accounting, tax, social-security, evidentiary and limitation-period obligations. Data that is no longer necessary is deleted, anonymized or archived in accordance with applicable requirements.
International transfers and applicable safeguards.
Where certain service providers, including Google, Firebase, Stripe, Apple App Store or Google Play, may process data in the United States or in other countries, Sheep-Me relies on the applicable safeguards for international data transfers, including relevant adequacy decisions, the Swiss-U.S. Data Privacy Framework where applicable, standard contractual clauses or other safeguards recognized by applicable law.
Respect for personality rights
Sheep-Me processes personal data on the basis of the applicable legal grounds, including performance of a contract, compliance with legal obligations, legitimate interest where permitted by applicable law, and consent where consent is required, in particular for certain mobile permissions or communications.
The processing of personal data by Sheep-Me, as controller, is not regulatory in nature.
The processing of contracting parties’ data is necessary for the conclusion of a contract with Sheep-Me or of a contract with a third party through the platform and for their performance. A person’s refusal to allow Sheep-Me to process their personal data may therefore prevent the conclusion of a contract or entail its termination, because Sheep-Me would be unable to fulfil its obligations arising from that contract.
Internet users refusing the processing of their data by Sheep-Me may be restricted in their use of the Sheep-Me website.
Place of data processing
Personal data is processed mainly in Switzerland, in particular by Infomaniak. However, certain data may be disclosed or made accessible to service providers located abroad or using foreign processors, in particular Stripe, Google, Firebase, Apple, Facebook, X, social login providers and app stores, in accordance with the applicable data protection safeguards.
Technical and organizational data protection measures
Security of processed personal data
Management of incidents and security breaches. In the event of a security incident likely to result in unauthorized access, loss, modification or disclosure of personal data, Sheep-Me takes the reasonable measures necessary to limit the consequences of the incident, analyze its cause, document the measures taken and, where the legal conditions are met, inform the competent authority and/or the persons concerned.
The personal data processed by Sheep-Me is hosted on servers protected by effective and current technical means, according to a high protection standard, in order to prevent any unauthorized use, disclosure, alteration or destruction. Restoration of the availability of personal data and access to it is ensured in the event of a physical or technical incident.
Where processed data takes physical form, it is filed at Sheep-Me’s registered office, in locked premises.
Subject to its transfer to processors, where Sheep-Me processes data as controller, the personal data processed may be consulted only by Sheep-Me’s bodies and employees, who are bound to Sheep-Me by duties of care and loyalty and may access the processed data only to the extent necessary to achieve the processing purposes described in this Statement.
Where Sheep-Me processes data as processor, i.e. in connection with contracts concluded between buyers and sellers through the platform, it may transmit data concerning each party to such contracts to the other parties to them.
Retention period and destruction of processed personal data
Data processed by Sheep-Me is destroyed as soon as the purposes described in this Statement no longer require it to be retained.
Rights of the persons concerned
Right of access (Art. 25 FADP)
Any person may, by identifying themselves, ask Sheep-Me whether or not Sheep-Me processes personal data concerning them.
If personal data is in fact processed by Sheep-Me, Sheep-Me will communicate free of charge to the person concerned, within 30 days, the following information, to the extent that it does not already appear from this Statement:
the identity and contact details of the controller;
the personal data processed as such;
the purpose of the processing;
the retention period for the personal data or, if this is not possible, the criteria used to determine it;
the available information on the origin of the personal data, insofar as it was not collected from the person concerned;
where applicable, the recipients or categories of recipients to whom personal data is disclosed.
Right to delivery or transmission of personal data (right to data portability) (Art. 28 FADP)
The person concerned may ask Sheep-Me to provide them free of charge, within 30 days, in a structured, commonly used and machine-readable format, with the personal data concerning them and/or to transmit it directly to one or more third parties.
Right to rectification (Art. 32 FADP)
If the person concerned by the processing of personal data considers that all or part of it is inaccurate or incomplete, they may ask Sheep-Me to rectify or complete it, to the extent that they can establish the inaccurate or incomplete nature of the personal data in question.
If the person concerned cannot establish the inaccuracy of the personal data whose rectification they request, but its accuracy cannot be established by Sheep-Me either, the person concerned may request that the personal data concerned be marked as disputed.
Contact
For any question or request relating to the processing of data by Sheep-Me, Sheep-Me may be contacted by post at the address indicated in section 2 of this Statement or by e-mail at: info@sheep-me.com.
Amendments
This Statement may be adapted at any time without notice, in particular in order to comply with legal requirements relating to data protection. Only the current version published on the site is authoritative.
