Privacy notice

Who is responsible

The data controller is Destockiha, which operates the Destockiha marketplace in Algeria.

The declaration of this processing to the National Authority for the Protection of Personal Data (ANPDP) is in progress. The reference will be published here once issued.

For any question about your data: privacy@destockiha.com.

What we collect

We collect only what is needed to identify you, deliver to you, and keep our commercial records.

• Account: name, email address, and your password as an irreversible hash. If you use Google, we receive your name and email — never your Google password.
• Delivery: recipient name, phone number, wilaya, commune and address. These are copied onto each order at the moment you place it.
• Orders and auctions: items, amounts, statuses, bids, auction outcomes, and any tracking number the carrier gives the seller.
• Messages sent through the contact page: name, email, phone if given, the message, our replies and the sending IP address (against abuse). They are used only to answer you.
• Sellers: store name, business phone, wilaya and delivery fees. A seller's phone is never shown publicly.
• Technical: IP address and server logs, used for security and abuse limits. The IP address you place an order from is saved with the order to fight fake orders: if sellers report 3 of your orders as fake, your account is suspended and that address can no longer order or create an account.

We collect no payment card data at all: payment is cash on delivery, directly between you and the seller.

Why we process it

• To create and secure your account.
• To process your orders and let the seller deliver and call you.
• To run auctions: validate bids, decide the winner, and enforce the payment and delivery deadlines.
• To tell you in the app how your orders, bids and auctions are progressing.
• To meet our accounting and commercial obligations.
• To prevent fraud and abuse of the service.

What is required

Name, email and password are required to create an account. Recipient name, phone and address are required to place an order: without them the seller cannot deliver. You can browse Destockiha without providing any of this; you simply cannot order or bid.

Who can see it

• The seller concerned sees the recipient name, phone and delivery address for their own order — nothing else from your account, and nothing about your orders with other sellers.
• In public auction history your name is shortened (for example “Yasmine K.”).
• Our administrators access what they need for support and moderation.
• We do not sell or rent your data. The one advertising use is measuring our Meta ads, described below, where your email and name leave only in hashed form.

Audience measurement (Google Analytics)

To understand how the site is used (pages viewed, visit length, device type, approximate country or region) and improve it, we use Google Analytics, a Google service. It sets cookies in your browser and sends these statistics to Google, whose servers may be outside Algeria. We configured it without advertising signals or ad personalisation: this data is used for visit statistics only, never for advertising. It does not include your name, email, phone number or addresses. You can refuse this tracking by blocking Google Analytics cookies in your browser or with Google's opt-out add-on.

To count each product page's visitors, the site also sets its own technical cookie ("dk_vid"): a random identifier, kept for a year, so that the same visitor is counted only once a day. It contains nothing about you and is never linked to your account; we keep only a hashed fingerprint of it for two days, after which only the product's visitor total remains.

Facebook and Instagram ads (Meta Pixel)

We promote Destockiha with ads on Facebook and Instagram. To know which ones actually bring visitors, sign-ups and orders, the site uses the Meta Pixel, a tool from Meta Platforms. It sets cookies and tells Meta which pages are viewed and which actions are taken (viewing a product, adding it to the cart, ordering, signing up), with the product and amount involved.

If you are signed in, your email address, name and account identifier are also sent so these actions can be matched to your Meta account. They are hashed (SHA-256) in your browser before anything is sent: Meta does not receive them in readable form. Your phone number, addresses and payments are never sent. This data is used to measure and deliver our ads, and Meta's servers may be outside Algeria. You can refuse this tracking by blocking Meta's cookies in your browser, and manage the ads you see in Facebook's or Instagram's ad settings.

Transfer outside Algeria

The site is hosted with an international infrastructure provider and listing photos are stored with an international image provider, so your data may be processed on servers outside Algeria, solely to operate the service. Any transfer falling under article 44 of law 18-07 requires the prior authorisation of the ANPDP.

How long we keep it

Your rights

Law 18-07 gives you the right to access your data, have it corrected if it is inaccurate, object to its processing on legitimate grounds, and have it erased where the law allows.

• Access and correction: your profile and address book can be edited at any time from your dashboard.
• Erasure: you can close your account yourself from Settings. Your identity is removed immediately; past orders are kept in anonymised form for the legal period.
• Anything else: write to privacy@destockiha.com. We answer within a reasonable time.

You may also refer the matter to the ANPDP if you believe your rights have not been respected.

Security

• Passwords are stored as an irreversible hash, never in clear text.
• Traffic to and from the site is encrypted (HTTPS).
• Access is limited by role: a seller sees only their own orders.
• Photo uploads are signed server-side and confined to that seller's own folder.

Changes

If this notice changes materially, the date above is updated and the change is announced in the app.