Privacy Policy

1. Scope and Application

This privacy policy complies with Algerian Law No. 18-07 of 10 June 2018 on the protection of natural persons in personal data processing. It applies to all personal data processing activities conducted by WeCanServices in Algeria and abroad.

WeCanServices is registered with the National Data Protection Authority (ANPDP) of Algeria and operates in full compliance with Algerian data protection regulations.

2. Legal Basis for Processing

We process your personal data based on the following legal grounds as required by Algerian law:

• Express consent: For marketing communications and non-essential services
• Contractual necessity: To fulfill our warehouse and fulfillment services
• Legal obligation: For tax, customs, and regulatory compliance
• Legitimate interest: For fraud prevention and security purposes

3. Personal Data We Collect

In accordance with Algerian data protection principles, we collect only adequate, relevant, and non-excessive personal data:

• Identity data: Name, surname, date of birth, national ID number
• Contact information: Email address, phone number, physical address
• Business information: Company name, commercial registry number, tax identification
• Order data: Shipping details, product information, delivery preferences
• Financial data: Payment information, billing address, transaction history
• Technical data: IP address, browser type, device information, cookies
• Communication data: Customer service interactions, feedback, preferences

4. Purposes of Processing

We process your personal data for the following specific purposes:

• Providing warehouse fulfillment and logistics services
• Processing and managing orders and shipments
• Customer account management and authentication
• Payment processing and financial transactions
• Customer support and communication
• Legal and regulatory compliance (customs, tax, commercial law)
• Fraud prevention and security monitoring
• Service improvement and analytics (with your consent)
• Marketing communications (only with explicit consent)

5. Data Sharing and Disclosure

We share your personal data only when necessary and in compliance with Algerian law:

• Shipping carriers: Yalidine, ProColis, ZR Express, DHD, Ecotrack for order fulfillment
• Payment processors: Secure third-party payment providers
• E-commerce platforms: Shopify, WooCommerce, YouCan for order synchronization
• Government authorities: When required by Algerian law (customs, tax administration)
• Legal proceedings: To protect our rights or comply with court orders
• Service providers: Cloud hosting, technical support (under strict data processing agreements)

We do not sell, rent, or trade your personal data for commercial purposes.

6. Your Rights Under Algerian Law

In accordance with Law No. 18-07, you have the following rights regarding your personal data:

• Right to information: Know how your data is processed
• Right of access: Request copies of your personal data
• Right of rectification: Correct inaccurate or incomplete data
• Right to object: Object to data processing for legitimate reasons
• Right to withdraw consent: Withdraw consent for optional processing
• Right to data portability: Receive your data in a structured format
• Right to deletion: Request deletion when processing is no longer necessary

To exercise these rights, contact our Data Protection Officer at [email protected]. We will respond within 30 days as required by Algerian law.

7. Data Security Measures

We implement comprehensive technical and organizational security measures to protect your personal data:

• Encryption: AES-256 encryption for data at rest and TLS 1.3 for data in transit
• Access controls: Role-based access with multi-factor authentication
• Regular audits: Annual security assessments and penetration testing
• Employee training: Mandatory data protection training for all staff
• Incident response: 24/7 monitoring and breach response procedures
• Data minimization: Automatic deletion of unnecessary data
• Backup security: Encrypted backups with restricted access

8. International Data Transfers

As required by Algerian law, any transfer of personal data outside Algeria is subject to prior authorization from the ANPDP. We ensure adequate protection levels through:

• Standard contractual clauses approved by Algerian authorities
• Adequacy decisions for countries with sufficient protection levels
• Specific authorization from the ANPDP when required
• Regular compliance monitoring of international partners

Current authorized transfer destinations include: European Union (adequacy decision), Canada (adequacy decision), and specific cloud providers with approved safeguards.

9. Data Retention

We retain personal data only for as long as necessary for the stated purposes:

• Customer accounts: Until account closure + 3 years for legal compliance
• Order data: 10 years for commercial and tax obligations
• Payment data: 13 months for payment disputes, then securely deleted
• Marketing data: Until consent withdrawal + 30 days
• Technical logs: 12 months for security purposes
• Legal proceedings: Until resolution + applicable statute of limitations

10. Cookies and Tracking Technologies

We use cookies and similar technologies in compliance with Algerian regulations:

• Essential cookies: Required for platform functionality (no consent needed)
• Performance cookies: Anonymous analytics (consent required)
• Marketing cookies: Advertising and tracking (explicit consent required)

You can manage cookie preferences through our consent banner or browser settings. Withdrawing consent may limit platform functionality.

11. Data Breach Notification

In accordance with Algerian law, we will:

• Notify the ANPDP within 72 hours of discovering a data breach
• Inform affected individuals without undue delay if the breach poses high risk
• Provide detailed information about the breach and mitigation measures
• Implement immediate containment and remediation actions

12. Children's Privacy

Our services are not intended for individuals under 18 years old. We do not knowingly collect personal data from minors without parental consent as required by Algerian family law.

13. Regulatory Compliance

WeCanServices is committed to full compliance with:

• Algerian Law No. 18-07 on personal data protection
• Algerian Commercial Code (Ordinance No. 75-59)
• Algerian Customs Code for import/export data
• Tax Code provisions on financial data retention
• ANPDP regulations and guidelines

14. Changes to This Policy

We may update this privacy policy to reflect changes in law or our practices. Material changes will be communicated through:

• Email notification to registered users
• Prominent notice on our platform
• 30-day notice period before changes take effect
• ANPDP notification when required by law

15. Contact Information

For privacy-related inquiries, data subject requests, or complaints: