Privacy policyPrivacy policy

ONDE (onde.tn) is responsible for the data processing described here. You can reach us on WhatsApp or by phone at +216 25 875 529.

When you order, we store:

• your name, your phone number and, if you provide it, your email;
• your business name, if you enter it;
• your delivery address, city and governorate, and any notes;
• the products ordered, the amounts and the destination links you want;
• your order history, used to apply the returning-customer offer.

Your name, phone, address, city and governorate are required to deliver: without them, the order cannot be processed. Email, business name, links and notes are optional.

This data is used to confirm, prepare and deliver your order, configure your smart links, contact you about your order and apply the returning-customer discount.

When someone taps or scans an ONDE product, we record enough to count visits, without trying to identify the person:

• the date and time;
• the source: NFC tap or QR scan;
• the device type: iOS, Android, desktop or other;
• the referring site, if the browser sends it;
• a one-way fingerprint of the IP address, computed with the current date and a secret key, so it changes every day.

The IP address is never stored in clear text. The fingerprint is only used to count unique visitors in a day; we do not use it to follow anyone. We collect no name, number or account of the person tapping.

Website visits are measured the same way (page viewed, language, device type, referring site, daily fingerprint of the IP address and browser), with no analytics cookie.

• no ad trackers or social-network pixels;
• no third-party analytics tools;
• no selling, renting or transferring your data;
• no advertising profiling.

The website only uses:

• an "onde-locale" cookie that remembers your language for 1 year;
• your browser's local storage for your cart (products and, if you enter them, business name and destination links), which stays on your device until you order;
• your browser's session storage, cleared when you close the tab, to keep the order form you are filling in if you reload the page and to remember which animations have already played (intro, order confirmation);
• a session cookie reserved for the ONDE team to access the admin area.

None of these is used for advertising or cross-site tracking.

• the courier, who receives the name, phone, address and amount to collect in order to deliver your parcel;
• our hosting provider OVHcloud, as a technical provider: the website and its database run on a virtual private server (VPS) rented from OVHcloud and located in the United Kingdom. Your data is therefore stored outside Tunisia, on this server, protected by OVHcloud's contractual security measures (access-controlled data centre) and by our own (see "Security");
• when internal notifications are enabled, the Telegram messaging service, which sends the ONDE team new-order details (name, phone, address, notes, products, amount); these messages go through Telegram's servers, located outside Tunisia;
• WhatsApp (Meta), if you choose to message us there: its own terms then apply;
• authorities, only when the law requires it.

Transfers outside Tunisia: your data is stored in the United Kingdom (OVHcloud) and, when notifications are enabled, passes through Telegram. If you message us on WhatsApp, your messages go through Meta's servers. We do not transfer your data to any other country.

Order and customer data: kept for the business relationship, then deleted or anonymized 3 years after your last order; the accounting details of orders (number, date, products, amounts) are kept for 10 years. Tap statistics: kept as long as the smart link exists, and deleted with it. Website visit statistics: kept for 25 months at most.

You can ask us to delete your data at any time; we only keep what the law requires us to keep.

Traffic with the website is encrypted (HTTPS). The admin area is reserved for the ONDE team and password-protected; data is backed up regularly.

Under Organic Law No. 2004-63 of 27 July 2004 on the protection of personal data, you have the right to access and correct your data, to object to its processing for legitimate reasons and to withdraw your agreement at any time; you can also ask for your data to be deleted.

To exercise these rights, contact us on WhatsApp or by phone at +216 25 875 529. You can also contact the Instance nationale de protection des données à caractère personnel (INPDP), Tunisia's data protection authority.

We may update this policy, for example when online payment arrives. The last-updated date is shown at the top of this page.