Back
Legal noticesPrivacyTerms of useTerms of saleCookies

Privacy Policy

Last updated: May 9, 2026

This privacy policy describes how Walo, operated by Houssem Ben Ghorbel, Auto-Entrepreneur (ID 1981345N), collects, uses, and protects your personal data when you use our website getwalo.com and our digital loyalty card service (hereinafter "the Service").

1. Data Controller

  • Name: Houssem Ben Ghorbel
  • Address: Rue Imam Chafii, Ben Arous Radès, Tunisia
  • Email: contact@getwalo.com
  • Phone: +216 21 050 126

2. Data Collected

We collect the following data:

2.1 Directly provided data

  • Registration: name, surname, email address, password (hashed)
  • Business profile: business name, address, logo, industry
  • Billing: payment information (processed by our secure payment provider)

2.2 End customer data

  • Name, surname, email and/or phone number (when signing up for a loyalty card)
  • Stamp/points history and rewards

2.3 Automatically collected data

  • IP address, browser type, operating system
  • Pages visited, visit duration, actions performed
  • Cookies and similar technologies (see our Cookie Policy)

3. Purposes of Processing

Your data is processed to:

  • Provide, maintain, and improve the Service
  • Manage your account and authentication
  • Process payments and billing
  • Send Service-related notifications (push, email)
  • Ensure security and prevent fraud
  • Analyze Service usage for improvement
  • Comply with our legal obligations

4. Legal Basis for Processing

  • Contract performance: processing is necessary to provide the Service
  • Consent: for analytics cookies and marketing communications
  • Legitimate interest: Service improvement, security
  • Legal obligation: retention of billing data

5. Data Sharing

We never sell your personal data. We may share it with:

  • Clerk — authentication and account management
  • Vercel — website hosting
  • Supabase — database
  • PostHog — usage analytics (anonymized)
  • Apple / Google — Wallet pass generation
  • Payment provider — secure payment processing

These providers are contractually required to protect your data and use it only for the defined purposes.

6. International Transfers

Some of our providers are located outside Tunisia (notably in the United States and the European Union). Where applicable, we ensure that appropriate safeguards are in place to protect your data.

7. Data Retention

  • Account data: retained while your account is active, then deleted within 30 days of closure
  • Billing data: retained for 10 years in accordance with accounting obligations
  • Connection logs: retained for 12 months
  • Analytics cookies: 13 months maximum

8. Your Rights

In accordance with Tunisian law No. 2004-63 on the protection of personal data, you have the following rights:

  • Right of access: obtain a copy of your data
  • Right of rectification: correct inaccurate data
  • Right of deletion: request the deletion of your data
  • Right of objection: object to the processing of your data

To exercise these rights, contact us at contact@getwalo.com. We will respond within 30 days.

9. Security

We implement appropriate technical and organizational measures to protect your data: encryption in transit (TLS), password hashing, strict access control, regular backups.

10. Minors

The Service is not intended for persons under 18 years of age. We do not knowingly collect data from minors.

11. Changes

We may update this policy. In case of substantial changes, we will inform you by email or via a notification on the Site. The last update date is shown at the top of this page.

12. Contact

For any questions regarding this policy, contact us:

  • Email: contact@getwalo.com
  • Phone: +216 21 050 126
  • Address: Rue Imam Chafii, Ben Arous Radès, Tunisia