Legal

Privacy notice

Version 1.0 · 7 October 2026

This notice explains how Tara Gold AG handles personal data: what we collect, why, where it is held, who may see it and what rights you have. It follows the Swiss Federal Act on Data Protection and, where it applies, the EU General Data Protection Regulation.

01Who is responsible

Tara Gold AG, Sennweidstrasse 45, 6312 Steinhausen, Switzerland, UID CHE-415.829.802, is responsible for the processing described in this notice.

Questions about data protection, and requests to exercise your rights, can be sent to info@taragold.ch or by post to the address above.

02What we collect

We process personal data only where we need it to do business with you or to meet our legal obligations.

• Identification and due diligence data: name, date of birth, nationality, address, identity documents, and the information Swiss anti-money-laundering law requires us to establish, including beneficial ownership and the origin of assets.
• Contact and correspondence data: email addresses, telephone numbers and the content of our communications with you.
• Account and custody data: the metal allocated to you, including the serial number, weight and fineness of each bar, together with transaction records and statements.
• Data from public sources: the commercial register and sanctions and screening lists, where we are required to consult them.

We do not sell or rent personal data, and we do not pass it to third parties for their marketing.

03When you visit this website

This website sets no cookies, uses no analytics or tracking tools and loads no content from third parties.

As with any website, our hosting provider records technical data whenever a page or file is requested, including the small mark shown in our email signatures: for example the IP address, the date and time and the item retrieved.

These server logs are used only to operate and secure the service. They are not used to identify or follow visitors, nor to establish whether an email has been opened.

04Why we process it

• To establish and maintain our business relationship with you and to carry out your instructions.
• To comply with our legal obligations, in particular under the Swiss Anti-Money Laundering Act, including identification, establishing beneficial ownership, record keeping and, where required, reporting to the Money Laundering Reporting Office Switzerland (MROS).
• To protect our legitimate interests, including the security of our systems, the prevention of fraud and the establishment or defence of legal claims.

Where the EU General Data Protection Regulation applies, we rely on the performance of a contract, compliance with a legal obligation and our legitimate interests as the legal bases for this processing.

05Where your data is held

Our email, website and document storage are provided by Infomaniak, which operates its own data centres in Switzerland. We do not depend on US cloud providers.

Our management is located in Switzerland and in Ireland, so personal data may be accessed from Ireland. As a member state of the European Union, Ireland is recognised by the Swiss Federal Council as providing an adequate level of data protection.

Email travels across networks outside our control. For that reason we do not accept client documentation by email: it reaches us through a dedicated encrypted channel.

06Who may receive it

We share personal data only where it is necessary, and only with:

• the custodian and vault operator that hold your metal;
• banks and payment service providers involved in your transactions;
• our IT service providers, acting on our instructions;
• professional advisers, including legal advisers and, where applicable, auditors and self-regulatory bodies;
• authorities and courts, where we are legally required to disclose it.

Service providers that process personal data on our behalf may do so only on our instructions and in accordance with Swiss data protection law.

07How long we keep it

We keep personal data for as long as our business relationship lasts, and afterwards for as long as the law requires. The Swiss Anti-Money Laundering Act requires us to keep identification and transaction records for at least ten years after the relationship ends.

We may keep data for longer where this is needed to establish or defend legal claims.

08How we protect it

We apply technical and organisational measures appropriate to the sensitivity of the data. These include restricted access, two-factor authentication, encrypted transfer of client documents and a rule that client documentation is never sent by email. Access is limited to the people who need it for their work.

09Your rights

You may ask what personal data we hold about you, have inaccurate data corrected, have data deleted, object to processing and receive certain data in a portable format. Where processing is based on your consent, you may withdraw it at any time.

These rights are subject to legal limits. In particular, we cannot delete records that anti-money-laundering law requires us to keep.

To exercise your rights, write to info@taragold.ch. We may ask you to confirm your identity. You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) or, where the GDPR applies, with the supervisory authority in your country.

10Changes to this notice

We may update this notice. The version published on this website applies.