Skip to main content
Start free

Language

Log in Create my store

Privacy policy

What data we collect, why, how long we keep it and how to exercise your rights.

Last updated:

Data controller

The data controller is SOCIETE WEBATG, SARL (limited liability company) operating the Yalla Souk platform, with its registered office at Immeuble Les Jardins, Office 6-1, Rue Moustapha Ben Jannet, Cité Stade, 5000 Monastir, Tunisia (RNE 1557686R). This policy covers the yalla-souk.tn website, the vendor dashboard (dashboard.yalla-souk.tn), the online stores hosted on the platform and the Live Commerce feature. It follows Organic Law No. 2004-63 of 27 July 2004 on the protection of personal data.

For the data of a store's customers, each vendor decides how it is used; Yalla Souk processes it on the vendor's behalf, to run their store.

Data collected

  • Vendors: name, email, phone, store name and address, logo, store settings, products, conversations with support.
  • Vendor payments: credit purchase history, amount, payment method (Flouci or bank transfer), transaction reference, invoices. Card details are entered on Flouci's page and are never sent to us.
  • Store customers: name, phone, email, delivery addresses, orders placed, and their customer account and wishlist if they create one.
  • Live Commerce: text of public comments posted during a Facebook or TikTok live, username, display name, public profile photo, platform identifier and time of the comment.
  • Newsletter: your email, if you subscribe.
  • Site analytics: pages viewed, visit duration, traffic source, device and browser type, approximate country and city, through Google Analytics (ID G-2EQLNHX5FV) and, to measure our campaigns, the Meta pixel.

Purposes of the collection

  • create and manage the vendor account and its online store;
  • let customers place orders, and let vendors process those orders and their deliveries;
  • sell and invoice order credits, and meet our accounting and tax obligations;
  • help vendors spot purchase intents in the comments of their lives (automatic analysis by artificial intelligence);
  • answer support requests and complaints;
  • send the newsletter to subscribers;
  • measure site traffic and the performance of our campaigns, to improve our services;
  • keep the platform secure and prevent fraud.

We never sell personal data.

Recipients and service providers

Your data is shared only with the providers the service needs:

  • Hetzner Online GmbH (Germany): server and storage hosting;
  • Flouci: card and wallet payment processing;
  • the delivery companies chosen by each vendor, to deliver their orders;
  • Meta (Facebook, WhatsApp) and TikTok, through the authorized EulerStream service, for the Live Commerce feature;
  • our email delivery provider and our artificial intelligence provider;
  • Google (Analytics, fonts) and Meta (pixel) for analytics.

As our servers are located in Germany, your data is transferred outside Tunisia, to a European Union country subject to the General Data Protection Regulation (GDPR).

Data retention periods

  • Vendor account and store: for as long as the account is active, then deleted within 30 days of its closure.
  • Data of a store's customers: for as long as the vendor's store is active, then deleted within 30 days of its closure or of a deletion request.
  • Invoices and payment records: 10 years, as required by Law No. 96-112 of 30 December 1996 on the accounting system of companies.
  • Live Commerce comments: for as long as the vendor account is active, then deleted within 30 days of its closure.
  • Newsletter: until you unsubscribe.
  • Analytics: 14 months at most.

Cookies and local storage

Google Analytics sets the _ga and _ga_* cookies, and the Meta pixel sets the _fbp cookie. Your browser's local storage (localStorage) keeps your display preferences on your device. You can block or delete these cookies in your browser settings without affecting your use of the site.

Live Commerce and third-party platforms

Vendors explicitly authorize access to the comments of their lives through Facebook Login. We use Meta's Graph API in line with the Meta Platform Terms and the Meta Platform Data Policy. We only access public comments on live videos, never read private messages and never post on the vendor's behalf. The legal basis is the vendor's legitimate interest in processing orders that come from their lives.

Security

  • all communications are encrypted with HTTPS;
  • passwords are stored in hashed form and can never be read;
  • card payments are processed by Flouci only;
  • access to data is limited to the people who need it to run the service.

Your rights

Under Organic Law No. 2004-63, you have the following rights over your data:

  • right of access: know what data we hold about you and get a copy of it;
  • right to rectification: have inaccurate or incomplete data corrected;
  • right to erasure: have your data deleted, except data the law requires us to keep (invoices);
  • right to object: object to the processing of your data, in particular for analytics and the newsletter.

If you are a store's customer, you can also contact the vendor concerned directly. You can also file a complaint with the Tunisian data protection authority, the Instance Nationale de Protection des Données Personnelles (INPDP).

How to exercise your rights

Send your request to SOCIETE WEBATG (Yalla Souk):

Include your name, the email or phone linked to your data and, for a live comment, your username and the vendor's page. We may ask you to prove your identity. We reply within 30 days at most.

Changes

We may update this policy; the date of the last update is shown at the top of the page. See also our terms and conditions and our legal notice.