Privacy Policy.
This policy explains how ALLURE Portfolio processes personal data in accordance with the Swiss Federal Act on Data Protection (nFADP/nDSG) and its ordinance. Where the EU General Data Protection Regulation applies to visitors in the EU/EEA, we also observe it. Last updated: October 2026.
1. Controller
The controller is the operator of ALLURE Portfolio named in the Impressum. For any privacy request, contact info@allureportfolio.com.
2. Data we process
Account data (email address, login information); application data (name, date of birth, nationality or residence, height and selected unit, measurements, hair and eye colour, contact details, Instagram handle); photographs you upload; portfolio content you create; technical data (IP address, browser type, device, time of access, error logs); and, once payments open, payment and subscription status. Card details are handled by the payment provider, not stored by us.
3. Purposes and legal basis
We process data to create and manage your account, review your application, provide the portfolio, comp card and website you order, communicate with you, secure and improve the service, and meet legal obligations (for example bookkeeping). Processing is based on performing our contract with you, your consent where requested, our legitimate interest in a secure and functioning service, and legal obligations. Photographs and measurements are used for eligibility, completeness and personalised presentation — never to rate attractiveness and never for automated decisions with legal effect.
4. Publication
Applying does not publish anything. A portfolio link or website becomes public only when you create and share it. You can revoke a shared link at any time.
5. Recipients and service providers
We do not sell personal data or photographs. Data is disclosed only to authorised reviewers and to carefully selected providers acting on our behalf: cloud hosting, database and file storage, email delivery and, once available, payment processing. They may process data only according to our instructions and must protect it appropriately. We disclose data to authorities only where legally required.
6. Transfers abroad
Some providers store or process data outside Switzerland, in particular in the EU/EEA and the United States. Transfers take place only to countries with adequate protection as recognised by the Federal Council (including the Swiss-US Data Privacy Framework for certified companies) or on the basis of the standard contractual clauses recognised by the FDPIC.
7. Retention
We keep data only as long as needed for the purposes above. Unsuccessful applications are deleted no later than 12 months after the decision. Account and portfolio data are kept while your account exists and deleted after you close it, except where the law requires longer retention (accounting records: 10 years). Drafts saved in your own browser remain on your device until submitted or cleared.
8. Cookies and local storage
We use only technically necessary storage to keep you signed in and to save unfinished application drafts on your device. We do not currently use advertising or tracking cookies. Should we introduce analytics or marketing tools, we will update this policy and ask for consent where required.
9. Security
We use encrypted connections, access controls limiting each account to its own data, private photo storage with short-lived access links, and restricted reviewer access. No system is completely secure; we will inform you and the FDPIC where a breach is likely to result in a high risk to you.
10. Your rights
You may request access to your data, correction, deletion, restriction, objection to processing, receipt of your data in a common format (data portability), and withdraw consent at any time with effect for the future. Send requests to info@allureportfolio.com; we may ask you to verify your identity and will respond within 30 days. You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC/EDÖB), Feldeggweg 1, 3003 Bern, edoeb.admin.ch.
11. Minors
The service is intended exclusively for persons aged 18 or over. We do not knowingly process data of minors and delete it when we become aware of it.
12. Changes
We may update this policy. The version published on this page applies.