Privacy Policy – NAVA

Effective Date: [June 2025]
Location: Constantine, Algeria

NAVA (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and store your personal information when you use our vehicle-rental platform (the “Platform”).

1. Information We Collect

We gather information to provide and improve our services. The categories of personal data we collect include:

• Account Information: Full name and email address (required for registration & login) .
• Location Data: Your general location (city/region) to show nearby vehicles and agencies.
• Driver’s License Details: During booking confirmation, agencies collect and verify your government-issued driver’s license.
• Booking & Transaction Data: Rental dates, vehicle preferences, and any communication exchanged with agencies.
• Usage Data: How you interact with the Platform (pages visited, buttons clicked, etc.), collected via cookies or similar tracking technologies.

2. How We Collect Information

• Directly from You: When you register, log in, or book a vehicle.
• Via SMS API Provider: We use a local Algerian SMS service (e.g., SMSing Algérie) to send OTP codes for phone verification. We never store OTP codes after verification; only your verified phone number is saved.
• From Third-Party Services: Google Maps to display rental locations. Only limited data (e.g., IP address for map loading) is processed by Google.
• Automatically: Through cookies and tracking scripts for platform analytics and session management.

3. Purpose of Processing

We use your data to:

• Register and verify your account via OTP (using a local SMS provider).
• Enable you to search, request, and complete vehicle bookings.
• Share required information with partner agencies strictly for booking and pickup procedures.
• Maintain and improve platform security, functionality, and user experience.
• Send booking confirmations, reminders, and notifications via SMS or email (if provided).
• Comply with Algerian regulations, including law n°18‐07 relating to the protection of personal data.

4. Data Sharing & Disclosure

We do not sell or rent your personal data. We may share your information only in the following cases:

• With Partner Agencies: Upon booking confirmation, we transfer your name, phone number, and booking details to the specific agency you selected.
• Service Providers: Our local SMS API provider processes your phone number to deliver OTP codes. Google Maps may process limited data to render maps. These providers are bound by confidentiality obligations.
• Legal Compliance: If required by law, regulation, or court order, or to protect our rights or users’ safety.

5. Data Retention

We retain your personal information for as long as needed to provide our services and comply with legal obligations. Specifically:

• Account Data: Retained until you request account deletion.
• Booking Records: Stored for a minimum of five (5) years to satisfy regulatory requirements and potential dispute resolution.
• Analytics Data: Aggregated and anonymized where possible; retained for up to two (2) years for internal analysis.

6. Cookies & Tracking Technologies

We use cookies and similar technologies to:

• Maintain your login session securely.
• Understand how you interact with the Platform to improve performance.
• Implement basic analytics; we do not engage in behavioral advertising or third-party tracking.

You can configure your browser settings to block or delete cookies, but please note that some features of the Platform may not function properly without cookies.

7. Security Measures

We implement reasonable administrative, technical, and physical safeguards to protect your information against unauthorized access, disclosure, alteration, or destruction. These include:

• Secure password hashing and session management.
• Encrypted data storage for sensitive fields (e.g., phone numbers, driver’s license details).
• Use of HTTPS/TLS for all communications between your device and our servers.
• Restricted access to personal data; only authorized personnel can view or process your information.

8. Your Rights

Under Algerian law and applicable data protection regulations, you have the right to:

• Access and obtain a copy of your personal data.
• Correct or update inaccurate or incomplete information.
• Request deletion of your data, subject to our legal obligations to retain certain information (e.g., booking history for audits).
• Withdraw any consent you have previously provided (e.g., for communications).
• Object to or restrict the processing of your data in certain circumstances.

To exercise any of these rights, please contact us using the information in Section 11 below.

9. Children’s Privacy

Our Platform is not intended for individuals under the age of 18. We do not knowingly collect or process personal data from minors. If we learn that a minor has registered or provided personal data, we will promptly delete that information upon verification.

10. International Data Transfers

All data processing and storage occur within Algeria, and we do not transfer personal data to servers outside Algeria. However, some third-party services (e.g., Google Maps) may process limited data on their global systems. We ensure those providers comply with applicable data protection standards.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will notify you via the Platform or through the contact information you provided. The “Effective Date” at the top of this page will be updated accordingly.

12. Contact Information

If you have questions, concerns, or wish to exercise your data rights, please contact us at:
• Email: nava.algerie@gmail.com
• Phone: +213 698395009
• Address: Constantine, Algeria

Effective Date: June 2025