Last updated: 29-10-2026

Privacy policy

Sahla is a local delivery platform in Oued Athmania (Mila province): customers order from neighbourhood shops, shop owners prepare the orders and drivers bring them to the door. Sahla runs on this website and in the Sahla mobile app. This policy explains what personal data we collect, why, who we share it with, how long we keep it and how to use your rights. You can read it without an account and without signing in.

We process your data in line with Algerian Law No. 18-07 of 10 June 2018 on the protection of natural persons in the processing of personal data, and Law No. 18-05 of 10 May 2018 on electronic commerce.

Who is responsible

The controller of your data is Sahla, Oued Athmania, Mila province, Algeria. Sahla is not meant for children: to create an account you must be at least 19 (the age of legal majority in Algeria) or use Sahla with the consent of a parent or guardian.

Data we collect

• Account. First name, last name, phone number (your sign-in ID), account type (customer, shop owner or driver) and, if you add them, email and address. Your password is stored only as a one-way hash: nobody at Sahla can read it.
• SMS codes. When you sign up or reset your password, we send a one-time code to your number to check that it is yours. The code expires after a few minutes.
• Orders. Items ordered, shop, amounts, delivery fee, order status and times, plus the phone number and delivery address you enter. Customers pay cash on delivery: we collect no bank details from customers.
• Delivery location (optional). Only if you tap the location button when ordering and allow it on your device: your position is turned into a Google Maps link and saved with the order so the driver can find you. We never track your location in the background, and you can order without sharing it.
• Shop owners. Shop name, phone, address, category, opening hours and photo, products and their photos, commission rate, fees due and fee payment history (amount, reference, status). Shop details are public to customers.
• Card payment of fees. When a shop owner pays their fees by CIB or EDAHABIA card, they enter the card on the payment provider’s secure page. Sahla never sees or stores the card number; we only receive the amount, reference and result of the payment.
• Drivers. Availability (online or offline), rides accepted and delivered, and ratings received from customers.
• Ratings, favourites and cart. The stars you give a shop or a driver, your favourite shops and products, and what is in your cart.
• Technical data. A session cookie to keep you signed in, a language cookie and a security cookie that protects forms. Your light or dark theme choice stays in your browser. Our servers also keep technical logs (IP address, date, page requested) for security. We use no advertising cookies or ad trackers.

Why we use your data

• To create, verify and secure your account.
• To pass your order to the shop and then to the driver, and keep you updated on its progress.
• To calculate shop owners’ service fees, collect them and send SMS reminders.
• To show shop and driver ratings so customers can choose.
• To prevent fraud and abuse (for example by limiting orders per hour) and protect the service.
• To meet our legal obligations in Algeria (e-commerce, accounting, requests from authorities).

We process this data because it is needed for the service you ask for (placing an order, running a shop, delivering), with your consent where the law requires it (for example for location), and to comply with Algerian law.

We do not sell your personal data and we do not use it for advertising.

Who we share your data with

We only share what the service needs to work:

• The shop that receives your order sees your name, phone, delivery address, location link if any, and what you ordered.
• The driver who accepts the ride sees the same delivery details; in return, you see their name and number so you can reach them.
• SMSSAK, our SMS provider, receives your number and the message to send (verification code or fee reminder).
• Online fee payments by shop owners go through OneClickDZ and the CIB / EDAHABIA network, which receive the amount and payment reference.
• Google Maps: when you or a driver open a location link, it opens at Google under Google’s privacy rules.
• Backups of our database are stored in a private Google Drive space that only the Sahla administrator can access.
• Algerian authorities, only when the law requires it.

How we protect your data

Encrypted connections (HTTPS), hashed passwords, role-based access (a shop owner only sees their shop’s orders, a driver only open rides and the ones they accepted) and regular backups. If an incident ever affected your data, we would take the necessary measures and inform the people concerned and the authorities where the law requires it.

How long we keep your data

• Account and profile: as long as your account is open.
• SMS codes: a few minutes, until used or expired.
• Orders, fees and payments: these are commercial and accounting records. We keep them as long as Algerian law requires (up to 10 years for accounting records), then delete them.
• Technical logs: as long as needed to keep the service secure.
• Backups: only the most recent ones are kept; deleted data also disappears from backups within about a week.

Your rights (Law No. 18-07)

At any time, you can ask to:

• access your data and get a copy of it;
• correct or update inaccurate data;
• erase your data and delete your account;
• object, on legitimate grounds, to the processing of your data;
• withdraw your consent, for example by turning off location access in your device settings.

You can change your name, phone, email, address and password yourself from your profile. For any other request, contact us using the details below: we check that the account is yours, then reply within 30 days at most.

If you feel your rights are not respected, you can complain to Algeria’s National Authority for the Protection of Personal Data (ANPDP).

Delete your account

You can ask us to delete your account and data without signing in and without installing the app. The steps, what we delete and what the law makes us keep are explained here: Delete my account

The rules for using Sahla and each party’s responsibilities are explained in our Terms of use

Changes to this policy

If we change this policy, we update the date at the top of the page. For important changes, we also announce it on the website and in the app.