Privacy Policy & Personal Data Protection

We collect and process only the minimal personal data strictly necessary to fulfill our independent review platform mission securely: A) Account & Profile Information: • Full name, email address, optional contact number, and selected Wilaya / Municipality across Algeria's 69 wilayas. B) Review & Experience Content: • Written review body, 1-to-5 star rating, date of transaction, and breakdown ratings (product quality, courier delivery speed, packaging, customer support). • Real user-uploaded imagery documenting the delivered merchandise. C) Proof-of-Purchase Documentation: • Order references, domestic courier tracking numbers (e.g. Yalidine, ZR Express), and delivery vouchers (Bons de livraison) or invoices uploaded voluntarily by shoppers to obtain the 'Verified Purchase' trust badge. D) Commercial Verification Credentials: • Commercial Register certificate (RC), Algerian Fiscal Identification (NIF), Statistical Identification (NIS), or national Auto-entrepreneur card, alongside proof of authority of the legal store representative. E) Technical Telemetry & Security Signatures: • Internet Protocol (IP) addresses, user-agent details, access timestamps, and session markers leveraged to combat automated bot assaults, review manipulation, and duplicate abuse.

We process your personal data under the lawful grounds of your explicit consent, contractual necessity, and the legitimate public interest of maintaining transparency and consumer protection in Algerian digital trade (pursuant to Law 18-05 and Law 18-07), for the following purposes: 1. Publishing authenticated shopper reviews to help Algerian consumers make informed purchasing decisions. 2. Verifying the legitimacy of customer feedback and bestowing 'Verified Purchase' badges upon validated transactions. 3. Computing organic, objective Taqym Scores algorithmically for all listed commercial entities. 4. Providing verified merchants with a formal communication channel to respond constructively to customer grievances. 5. Detecting, thwarting, and mitigating fraudulent reviews, paid endorsements, astroturfing campaigns, and competitor sabotage. 6. Complying with regulatory obligations and legal disclosures mandated by Algerian statutory law.

Taqym enforces institutional-grade protections for all transaction documents: • Invoices, courier receipts (Bons de livraison), and commercial registry extracts uploaded for verification are encrypted using industry-standard protocols (AES-256) and stored in isolated storage volumes. • These documents are never publicly published, never exposed to general site visitors, and never indexable by search engines. • Access is restricted solely to authorized internal compliance officers operating under strict non-disclosure obligations. • Private financial details or personal contact lines appearing on receipts are redacted and never shared with third parties.

Taqym upholds an absolute and irrevocable policy regarding user personal information: • We never sell, rent, lease, trade, or barter any personal data belonging to our shoppers or business users. • We do not furnish third-party advertising networks, telemarketers, or commercial data brokers with user registries or customer contact details. • Our platform operates as a neutral reputation index and SaaS trust engine, entirely independent of personal data commodification.

We use only strictly necessary and functional cookies engineered for high security and performance: 1. Essential Security & Session Cookies: • Encrypted session tokens equipped with modern security flags (HttpOnly, Secure, SameSite) to preserve authenticated sessions and prevent cross-site request forgery (CSRF). 2. Preference Cookies: • Localized cookies retaining your preferred interface language (Arabic / English) and color theme (dark / light mode). • Device cookie: a random ID that lets us limit repeated reviews from one browser. We store only a hash of it with your review, for moderators. It isn't used for advertising. 3. Zero Cross-Site Ad Tracking: • We do not embed invasive cross-site tracking pixels or behavioral advertising beacons. You retain full control to clear or block cookies via your browser preferences.

We disclose personal data strictly within the following narrow statutory boundaries: • Judicial & Law Enforcement Directives: In strict response to valid court subpoenas, judicial warrants, or mandatory orders issued by competent Algerian judicial authorities. • Severe Fraud Investigations: Where concrete evidence of commercial fraud or criminal misconduct has been referred to statutory consumer protection bodies or law enforcement. • Infrastructure Partners: Cloud hosting and data infrastructure vendors bound by stringent Data Processing Agreements ensuring data isolation and continuous security compliance.

We implement defense-in-depth architectural and organizational measures to safeguard your data against unauthorized access, loss, or manipulation: • Full in-transit encryption using modern TLS 1.3 protocols across all endpoints. • Irreversible, salted cryptographic password hashing (Argon2 / bcrypt). • Least-privilege, Role-Based Access Control (RBAC) ensuring only vetted engineers can access database layers for direct administrative mandates. • Continuous automated threat monitoring against intrusion attempts, injection vulnerabilities (SQLi/XSS), and distributed denial-of-service (DDoS) traffic.

• Active Account Credentials: Maintained for the operational life of your account to allow continuous management of reviews and notifications. • Public Reviews: Retained in the platform index to provide a reliable historical reputation record for consumers, unless deleted by the author or removed for verified guideline breach. • Verification Receipts: Maintained during the dispute auditing window, followed by secure redaction and archival according to Algerian accounting record practices. • Account Erasure Requests: Upon receiving a validated deletion request, your identifiable records are permanently expunged from production databases within 30 days.

Algerian Law 18-07 grants you fundamental rights which Taqym facilitates without undue hindrance: 1. Right of Access (Droit d'accès): The right to verify what personal records are held about you and receive an export. 2. Right of Rectification (Droit de rectification): The right to rectify inaccurate or outdated personal details on your profile. 3. Right of Erasure / Right to be Forgotten (Droit à l'effacement): The right to demand the irreversible deletion of your account and personal records. 4. Right to Object (Droit d'opposition): The right to object to specific processing grounds based on legitimate circumstances. 5. Right to Data Portability (Portabilité des données): The ability to receive an electronic export of your posted reviews in a machine-readable format. To exercise any of these statutory rights, email our Data Protection Office at privacy@taqym.com. Validated requests are processed within statutory timeframes.

Taqym is intended for individuals aged 18 and older (the age of civil majority for commercial digital transactions in Algeria), or minors operating under parental guidance. We do not knowingly collect personal data from minors. If we discover that an account was created by an unsupervised minor, we will promptly delete the record and all associated content.

We may revise this Privacy Policy periodically to reflect legislative amendments in Algeria or new technical capabilities on Taqym. In the event of material revisions, we will notify registered users via prominent on-site notices or email. For legal inquiries, exercising your privacy rights, or communicating with our designated Data Protection Officer (DPO): • Dedicated Privacy & DPO Desk: privacy@taqym.com • General Legal & Compliance: legal@taqym.com • People's Democratic Republic of Algeria.