Privacy Policy

We collect the following categories of data:

• Registration data: first name, last name, e-mail address, password (hashed), shop name, chosen subdomain, country and phone number when creating a seller account.
• Connection data: IP address, browser type, operating system, pages visited, date and time of visit, via cookies and similar technologies.
• Shop data: products, prices, stock, orders, end customers and delivery addresses that you enter to operate your shop.
• Payment data: subscriptions are paid through Paddle or, when enabled, the platform's Stripe checkout. Card details are entered with the payment provider; Shops-DZ does not request or store card numbers in its application database.
• Communication data: the content of the messages you send us via the contact form or by e-mail.

We process personal data to provide the service and meet applicable requirements. The purpose and legal basis are assessed for each processing activity under applicable law.

Your data is never sold. It may be accessible to the following recipients, to the extent necessary to provide the service:

• Shopsdz: authorized personnel (support, engineering, finance).
• Payment providers: Paddle and, when enabled, Stripe for platform subscriptions; Stripe, PayPal or another provider connected by a merchant for that shop's transactions when an online payment method is activated.
• Host: cloud infrastructure provider ensuring the storage and availability of the platform.
• E-mail providers: transactional and marketing e-mail sending services.
• Authorities: when required by law or for fraud prevention.

We retain data only for as long as needed for its purpose and applicable obligations. The exact period depends on the data and applicable requirements:

• Active account: for the entire duration of use of the platform.
• After account deletion: contact us to request deletion or anonymization. Records may be retained where required for legal, accounting, dispute-resolution or security purposes.
• Accounting and tax data: for the applicable mandatory period, which depends on the record and applicable rules.
• Connection logs: for the period needed for security, troubleshooting and applicable legal obligations.
• Analytics cookies: duration depends on the analytics or marketing service configured. The platform currently has no in-page consent preference interface; configured tags may load and process identifiers or set cookies.

We use the following categories of cookies:

• Strictly necessary cookies: required for the platform to function (session, cart, security). They cannot be disabled.
• Audience measurement cookies: analytics or marketing tags may be enabled by the platform operator. The platform currently has no in-page consent preference interface; configured tags may load and process identifiers or set cookies.
• Third-party cookies: set by Paddle and any payment partners, only on payment pages.

You can manage cookies in your browser settings. Browser controls do not replace an in-page preference interface.

We implement appropriate technical and organizational measures to protect your data:

• Encryption of data in transit (TLS 1.2+).
• Payment-provider credentials stored by a shop are encrypted at application level using AES-256-GCM. This does not describe every database field or backup.
• Logical isolation of data between shops (multi-tenant architecture).
• Administrative functions are protected by authentication and authorization controls.
• Backup encryption and disaster-recovery arrangements depend on the hosting configuration.

As no method of transmission or storage is ever completely secure, we cannot guarantee absolute security, but we are committed to notifying any data breach in accordance with legal obligations.

For processing subject to Algerian law, requests are handled under Law No. 18-07 of 10 June 2018, as amended by Law No. 25-11 of 24 July 2025, and other applicable rules:

• Right of access: obtain a copy of your data.
• Right to rectification: correct inaccurate or incomplete data.
• Right to erasure: you may ask us to delete or anonymize data where possible, subject to applicable retention obligations.
• Right to object: to the processing of your data on legitimate grounds.
• Right to lodge a complaint with the competent Algerian authority, the ANPDP (information and complaint portal: plaintes.anpdp.dz).

To exercise these rights, write to us at contact@shops-dz.com specifying the subject of your request. We will ask for identity evidence only when needed to verify the request.