Privacy Policy

Virtual Office Zug is a brand owned by Hevea Investment, a company incorporated in Hong Kong. All services are delivered exclusively from our four registered offices in Canton Zug, Switzerland.

We provide a complete suite of services for businesses establishing a legal presence in Switzerland: virtual office domiciliation, mail handling & scanning, Swiss resident director, GmbH & AG formation, business banking, accounting & fiduciary, VOZ Vault (secure document storage), VOZ Docs, VOZ AI Assistant, and VOZ Voice (AI phone receptionist).

Account data

When you register or place an order:

• Full legal name and email address
• Company name, registered purpose, and desired commune
• Mailing address (for correspondence)
• Identity verification documents (passport or national ID) where required by Swiss law

Payment data

All payment processing is handled by Stripe, Inc. We never store your card number, CVV, or full payment credentials on our servers. We retain only the transaction reference, amount, currency, date, and anonymised last-four-digit card fragment for invoicing purposes.

Usage data

We may collect anonymised data about how you use this website via Plausible Analytics (see Section 7).

Communications

If you contact us via email or our support portal, we retain the content of that correspondence to respond to and manage your request.

• Contract performance — processing necessary to deliver the services you have purchased (Swiss OR Art. 394 et seq.).
• Legal obligation — processing required to comply with Swiss AML/KYC regulations, cantonal requirements, and Hong Kong company law.
• Legitimate interest — security of our systems, fraud prevention, and improving our services, where these interests are not overridden by your rights.
• Consent — where we have obtained your explicit consent, for example for optional marketing communications. You may withdraw consent at any time.

We retain personal data for as long as your account is active. After account closure, we retain data for the periods set out below:

Depending on your location, you may have the following rights regarding your personal data:

Essential cookies

We use essential cookies strictly necessary for the website to function, including session management, shopping cart state, and security tokens (WordPress nonces). These cannot be disabled.

Analytics

We use Plausible Analytics — a privacy-first platform that does not use cookies, does not track individuals across sites, and does not transfer personal data to the United States. All analytics data is anonymised and aggregated. We do not use Google Analytics or any tracking-cookie-based service.

Where data is transferred outside Switzerland or the EEA, we rely on Standard Contractual Clauses (SCCs) or equivalent safeguards:

We implement appropriate technical and organisational measures to protect your personal data:

• All data in transit is encrypted using TLS 1.2 or higher
• Data at rest is stored on encrypted volumes
• Access to personal data is restricted to authorised personnel
• Passwords are hashed using industry-standard algorithms — plaintext passwords are never stored
• We conduct periodic reviews of access controls and third-party security practices

If you have questions about this policy, wish to exercise your rights, or have concerns about how we handle your data: