Privacy policy
This policy explains how RepariDZ processes personal data, in line with Algerian Law 18-07 and, for shops established in the European Union, the GDPR.
Who we are
Controller for shop accounts, billing, support and audience analysis: [TO BE COMPLETED] (identity, address).
Privacy contact: [TO BE COMPLETED] (email). Data protection officer, if any: [TO BE COMPLETED]. ANPDP receipt number: [TO BE COMPLETED] (after the declaration is filed).
Roles: controller and processor
RepariDZ is the controller of account, billing, support and security data.
For customer records that the shop enters in the app (customers, devices, repairs, payments), the shop is the controller and RepariDZ is its processor, under the data processing agreement (DPA).
Data collected
- Account: name, phone number (verified by SMS or WhatsApp code), shop name, language, role.
- Usage: connected devices, technical and security logs, audit log of sensitive actions.
- Billing: plan, invoices, manual payment proofs; card data stays with the payment gateways.
- Support: messages exchanged with our team.
Legal bases: performance of the contract, legal obligations (accounting), legitimate interest (security), consent where the law requires it.
Shops' customers data
The shop is responsible for its customers' data: to exercise your rights over a repair, contact the shop first.
The public tracking page of a repair (receipt link or QR code) shows the reference, status and amounts, with a masked phone number.
Recipients and processors
We use service providers (hosting, SMS, email, payment, error monitoring). The public list and its change log are on the “Sub-processors” page. 30 days' notice is given before any addition or replacement.
Transfers outside Algeria
Data is hosted in the European Union ([TO BE COMPLETED]: France or Germany). This transfer is subject to the ANPDP authorisations provided for by Law 18-07 [TO BE COMPLETED BY COUNSEL]. For any transfer outside the EU (for example some payment gateways), appropriate safeguards are put in place.
Retention
Account data is kept as long as the account exists. After the service ends, shop data is kept for 90 days to allow an export, then purged [TO BE COMPLETED BY COUNSEL]. RepariDZ's accounting records are kept for 10 years. Backups expire within 30 days. Final periods will be confirmed before publication.
Your rights
You can request access, rectification, erasure or anonymisation, objection and restriction of the processing of your data, and, in the EU, portability.
Write to [TO BE COMPLETED] (privacy email); we reply within 30 days [TO BE COMPLETED].
You may also contact the ANPDP (Algeria) or the data protection authority of your country of residence in the EU.
Security
Encryption in transit and at rest, field-level encryption of unlock codes, per-shop data isolation, two-factor authentication for administration, audit log, encrypted backups and an incident response plan. In case of a data breach, the people and authorities concerned are informed within legal deadlines.
Cookies, minors, automated decisions
See the “Cookies and trackers” page. The service is intended for professionals, not for people under 18. No automated decision with legal effects is taken about you.
Changes and contact
Any substantial change is announced with 30 days' notice; version history is kept. Questions and complaints: [TO BE COMPLETED].