Privacy Note
Updated 8th September 2026
This Privacy Notice explains how Lock and Key Biosciences GmbH ("LKB", "we", "us") collects and handles the personal data of our customers and their representatives when you request, order, pay for, or contact us about our products. We are committed to protecting your privacy and to processing your data lawfully, fairly, and transparently under the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR).
1. Our approach to your data
We take a deliberately data-minimal approach. In practice this means:
-
We collect only the personal data we genuinely need to process your order and meet our legal obligations — nothing more.
-
We never sell, rent, or trade your personal data.
-
We never share your data with third parties for their own marketing, and we do not send you marketing without your consent.
-
We disclose your data to others only where it is strictly necessary to fulfil your order or where the law requires it.
-
We keep your data only as long as we need it, and then delete or anonymise it.
2. Who is responsible for your data
The data controller responsible for your personal data is Lock and Key Biosciences GmbH, [Dollikerstrasse 1, 8706 Meilen, Switzerland]. For any question about this notice or your personal data, contact us at info@lockandkeybiosciences.com.
3. What personal data we collect
We collect only the data necessary to deal with your order and enquiry, namely:
-
Identity and contact details of your ordering representative — name, business email, and telephone number.
-
Organisation details — company or institution name, VAT or registration number, and billing and delivery addresses.
-
Order and transaction details — the products ordered, order reference, and payment confirmation.
-
Correspondence — the content of enquiries or messages you send us.
We do not ask for, and do not want to receive, any sensitive (special-category) personal data. Please do not send us any.
4. Why we use your data, and our legal basis
We use your personal data only for the following purposes, each with a lawful basis:
-
To process, fulfil, and deliver your order and to communicate with you about it — necessary for the performance of our contract with you (GDPR Art. 6(1)(b); FADP: processing necessary to perform a contract).
-
To meet our legal, tax, accounting, and export-control obligations — necessary for compliance with a legal obligation (GDPR Art. 6(1)(c)).
-
To keep our systems secure and to establish or defend legal claims — our limited legitimate interests, weighed against your rights (GDPR Art. 6(1)(f)).
We do not use your data for marketing, profiling, or any purpose beyond those above unless you give us your explicit consent, which you may withdraw at any time.
5. Who we share your data with
We keep your data within LKB and disclose it only where strictly necessary, and only to:
-
the carrier we use to deliver your order, limited to the delivery details required to ship it;
-
our bank or payment provider, to process and reconcile your payment;
-
our professional advisers (for example, accountants or lawyers) where reasonably needed; and
-
public authorities or courts where we are legally required to disclose.
Any service provider that handles data on our behalf is bound by confidentiality and acts only on our instructions under a data-processing agreement. We do not disclose your data to anyone else, and never for their own purposes.
6. International transfers
We store and process your personal data in Switzerland and the European Economic Area. We do not transfer your data to a country outside these regions unless that country offers an adequate level of protection or the transfer is protected by appropriate safeguards, such as the European Commission’s and Swiss authorities’ standard contractual clauses.
7. How long we keep your data
We keep your personal data only for as long as necessary for the purpose for which we collected it. Order and payment records are then retained for the period required by Swiss commercial and tax law — currently ten years for accounting records — after which we securely delete or anonymise them. Data we hold only to answer an enquiry is deleted once the enquiry is resolved.
8. How we protect your data
We apply appropriate technical and organisational measures to protect your data against loss, misuse, and unauthorised access, and we limit access to those members of our team who need it to do their work.
9. Automated decision-making
We do not make decisions about you based solely on automated processing, and we do not profile you.
10. Your rights
Subject to applicable law, you have the right to:
-
access the personal data we hold about you and obtain a copy;
-
have inaccurate data corrected and incomplete data completed;
-
have your data erased, and to restrict or object to our processing;
-
receive your data in a portable format and, where processing is based on consent, withdraw that consent; and
-
lodge a complaint with a supervisory authority — in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC), or, in the EU, your local data protection authority.
To exercise any of these rights, contact us at [privacy@lockandkeybiosciences.com — to be confirmed]. We will respond within the time limits set by applicable law.
11. Our website and cookies
Our website uses only cookies that are strictly necessary for it to function, and does not use advertising or third-party tracking cookies.
12. Changes to this notice
We may update this Privacy Notice from time to time. The current version and its date are shown at the top. Material changes will be communicated by appropriate means.

