Introduction

• This policy explains how ForsaTaw collects, uses, stores, and protects your personal data when you use our service. We comply with the principles of the European GDPR and Tunisian Law No. 2004-63 on personal data protection.

Collected Data

• Account information: first name, last name, email address, phone number.
• Transaction data: reserved baskets, amounts, timestamps.
• Location data: city and approximate GPS coordinates (to display nearby shops).
• Technical logs: IP address, device type, app version.

Data Sharing

• Partner merchants: only the information required to prepare and hand over the basket (first name, reservation code).
• Subcontractors: payment service provider, cloud hosting, push notification services. All our subcontractors comply with GDPR data protection clauses.
• Authorities: in case of legal or judicial obligations.

Security

• End-to-end SSL/TLS encryption.
• Passwords hashed and salted (bcrypt, minimum 12 rounds).
• Daily encrypted backups hosted in a data center located in Tunisia or the EU.

Your Rights

You have the right to access, rectify, erase, restrict processing, object, and port your data. To exercise these rights, contact us at contact@forsataw.tn attaching a copy of your identity document.

Cookies and Trackers

ForsaTaw uses:

• Essential cookies for secure login.
• Analytical cookies (self-hosted Matomo, anonymized IPs) to improve the user experience. You can refuse non-essential cookies through the consent banner.

Policy Update

This version is dated June 13, 2025. Any substantial modification will be notified in the app and will take effect 30 days after publication.