ALEMDAR FOOD · v2026-08-21.2
Privacy and Personal Data Protection Notice
This notice explains how — processes customer data for ordering and delivery under the Algerian framework, including Law 18-07 as amended and supplemented by Law 25-11. It is not legal advice.
Last updated: 21.08.2026Controller and contact
Controller: —, —. Data protection contact: —. Email: —; phone: —. The actual controller and any declaration or authorisation formalities with the national authority must be verified before launch.
Data processed
We process minimum account data — first name, last name, email, phone and hashed password — saved addresses, order contents and options, delivery instructions, status history, reviews and privacy requests. Limited security logs may include time and an irreversible network-address fingerprint. No payment-card data is collected.
Purposes and basis
Data is used to create and secure accounts, prepare and deliver orders, communicate with customers, retain contracts and order history, handle cancellation and complaints, protect the service and meet business and legal duties. Where express consent is required, it is requested separately. Email is never automatically subscribed to marketing.
Recipients and transfers
Access is limited to authorised staff and hosting or support providers needed for the service, on a need-to-know and confidentiality basis. Disclosure may occur where legally required by a public authority. Customer data is not sold. Hosting location, any transfer outside Algeria and any national-authority approval must be reviewed before launch.
Retention and security
Configurable retention considers account, contract, invoicing, complaint and legal needs. An account-deletion request does not automatically erase a transaction that must be retained; an account may be separated or anonymised where permitted. The platform uses access controls, hashed passwords, CSRF protection, audit logging and production HTTPS.
Individual rights
Customers may request information, access and correction and, where conditions are met, erasure or blocking, and may object on legitimate grounds, especially to marketing. Requests are made in the account or to — after identity verification. Any mandatory-retention restriction is explained.
Incidents and changes
The restaurant records data incidents and follows applicable notification duties to the national authority and affected individual when triggered. Material notice updates receive a new version; the version associated with an order is recorded where appropriate.