Protecting your personal data is a priority for PRIVYA DZ. This policy explains how we collect, use, and protect your information.
PRIVYA DZ, an online private sales platform, is the data controller responsible for processing your personal data. Headquarters: Algiers, Algeria Email: contact@bayya-digital.com
We collect the following categories of data: Identification data: — First and last name — Email address — Phone number — Profile picture (optional) Delivery data: — Postal address — Wilaya and commune — Postal code Order data: — Order history — Chosen payment method — Products viewed and favourites Technical data: — IP address — Device type and operating system — In-app browsing data
Your data is processed for the following purposes: — Managing your user account — Processing and tracking your orders — Delivering ordered products — Sending order-related notifications — Sending commercial notifications (private sales, promotions) — Improving our services and user experience — Fraud prevention and platform security — Compliance with our legal obligations
The processing of your data is based on: — Your consent (registration, notifications) — Performance of the sales contract (orders, delivery) — Our legal obligations (accounting, invoicing) — Our legitimate interest (security, service improvement) In accordance with Law No. 18-07 of 10 June 2018 on the protection of individuals in the processing of personal data, we are committed to protecting your personal information.
Your data may be shared with: Delivery partners: — Carriers for shipping your orders (name, address, phone number) Technical providers: — Supabase (hosting and database, EU servers) — OneSignal (push notifications) — Sentry (technical error monitoring) — PostHog (anonymised usage analytics) Your data is never sold to third parties for advertising purposes.
— Account data: retained as long as your account is active, then 3 years after your last login — Order data: 5 years from the date of purchase (accounting obligations) — Browsing data: 13 months maximum — If you delete your account, your personal data will be erased within 30 days, except for data required by law.
We implement the following technical and organisational measures: — Encrypted communications (HTTPS/TLS) — Role-based access control (Row Level Security) — Secure authentication with JWT tokens — Hashed passwords (bcrypt) — Regular security audits — Hosting on certified infrastructure (SOC 2)
In accordance with Law No. 18-07, you have the following rights: Right of access: obtain confirmation of data processing and receive a copy. Right of rectification: correct inaccurate or incomplete data. Right of erasure: request deletion of your data in cases provided by law. Right to object: object to the processing of your data for marketing purposes. Right to withdraw consent: withdraw your consent at any time for consent-based processing. To exercise your rights, contact us at: contact@bayya-digital.com
The application uses the following technologies: PostHog (usage analytics): — Anonymised collection of in-app interactions — Purpose: improving user experience OneSignal (push notifications): — Device identifier for sending notifications — Purpose: order and promotional notifications Firebase Cloud Messaging: — Delivery of push notifications on Android You can disable push notifications from your device settings.
We reserve the right to modify this privacy policy at any time. Any significant changes will be notified through the application. The last update date is shown at the top of this document.
For any questions regarding your personal data or to exercise your rights: Email: contact@bayya-digital.com Subject: "Data protection — [your request]"