Controller: Barbarij, Soliman, Nabeul, Tunisia — contact.barbarij@gmail.com (also acting as DPO contact).

Scope: We operate under Tunisian Law No. 2004-63 on personal data protection. For EEA/UK/CH users, we also apply GDPR principles.

Account/Profile: name, email, phone, photo (optional), role (customer/vendor/admin).

Orders & Delivery: billing/shipping addresses, products, amounts, discounts, tracking, carrier, delivery instructions.

Payments: transaction references, status (card numbers are not stored; processed by a third-party PSP).

Support: messages (forms, email, WhatsApp Business, chat), attachments.

Marketing & Analytics: subscription preferences; IP address, session IDs, pages visited, time spent, clicks, traffic source, device/browser type (via cookies/trackers).

Sellers: business name, logo, description, product photos, prices, inventory; compliance documents as required by law.

Service provision and communications (contract execution).

Payment & fraud prevention (legitimate interest/legal obligations).

Marketplace management (contract/legal obligations).

Service communications (confirmations, tracking) (contract execution).

Marketing with opt-in (consent).

Audience measurement & UX improvement (legitimate interest and/or consent for non-essential cookies).

Legal compliance (invoicing, accounting, disputes) (legal obligation).

We use:

• Essential cookies (login, cart, security). • Analytics/UX cookies (consent-based).

Manage preferences via our cookie banner and browser settings.

We share your data only with:

Hosting: OVHcloud Tunisia (Al Karama Holding Building, 1st floor, Rue du Lac d'Annecy – Passage du Lac Malawi, Les Berges du Lac, 1053 Tunis). Core hosting is operated by OVHcloud in the EU (notably France).

Analytics: Google Analytics, Hotjar.

Payment / Emailing: third-party providers may be used and will be disclosed/updated on this page when designated.

Carriers: depending on your delivery choice.

Authorities: when required by law.

All processors are contractually bound to confidentiality, security and legal compliance.

Data may be hosted/processed within the EU (notably France with OVHcloud). When transfers occur outside Tunisia/EU, we ensure appropriate safeguards (contracts, security) consistent with applicable law.

Account: active use + 3 years inactivity, then archiving if legally required.

Orders/billing: legal retention periods.

Support: 3 years after closure.

Marketing: until consent withdrawal or 3 years inactivity.

Sellers: for the contractual relationship + legal periods.

You have the rights: information, access, rectification, deletion, restriction, objection, portability, and consent withdrawal where applicable.

Exercise your rights: contact.barbarij@gmail.com (provide ID if necessary).

Complaints: INPDP (Tunisia) or your local DPA (e.g., CNIL in France).

We implement reasonable technical/organizational measures: access controls, in-transit encryption, backups, logging, environment separation, vendor reviews. In case of an incident, we will apply the notification procedures provided by law.

You are responsible for keeping your credentials confidential. Use strong, unique passwords; enable enhanced authentication if available.

The Site is not intended for individuals under 18. If you believe a minor has provided us with data, contact us for deletion.

Opt-in required.

Unsubscribe anytime via link or contact.barbarij@gmail.com.

Service emails (order confirmations, technical notifications) are non-promotional.

Certain shop information (name, description, products, reviews) is public. Customer reviews are published as-is; avoid including personal data.

If you interact via Facebook/Instagram/WhatsApp Business, your data is also subject to those platforms' policies.

Third-party sites linked from ours have their own policies. We are not responsible for them.

We may update this policy to reflect legal/technical changes. The current version is displayed on this page with its effective date.

Barbarij – Soliman, Nabeul, Tunisia Email (DPO / rights): contact.barbarij@gmail.com