Privacy Policy

1. What we collect

• Renters: name, email address, and optionally a phone number; your bookings and the messages you send agencies.
• Agencies: legal name, NIPT (tax ID), city, pickup address, email, your vehicle listings and photos, and your booking activity.
• Automatically: basic technical data needed to run the service securely (e.g. session and log data, approximate location from your IP via our hosting provider).

2. Why we use it

To create and secure your account, show listings, process booking requests, connect renters and agencies so a rental can happen, send transactional emails (sign-in links, booking updates, messages), provide support, and keep the platform safe.

3. Legal basis

We process data to perform our agreement with you (operating the service), for our legitimate interest in running and securing a marketplace, and where required, with your consent. This applies to EU/EEA visitors under the GDPR.

4. Who we share it with

• The other party to a booking. To fulfil a booking, a renter's name and the agency's details are shared between them. The agency's exact pickup address is revealed to the renter only after a booking is confirmed.
• Service providers that process data on our behalf: Resend (transactional email), Cloudflare (DNS, email routing, network), DigitalOcean (hosting), and Cloudflare R2 (photo/file storage). These act as processors under our instructions.
• We do not sell your personal data.

5. Retention

We keep your data while your account is active and as long as needed to provide the service, resolve disputes, and meet legal or record-keeping obligations. You can ask us to delete it (see below).

6. Your rights

You may request access to, correction of, or deletion of your personal data, object to certain processing, or request a copy of it. Email support@albashift.al and we'll respond within a reasonable time.

7. Cookies & sessions

We use essential cookies to keep you signed in, and preference cookies to remember your language and currency. All are first-party; we do not use advertising or tracking cookies.

8. Security

We take reasonable technical measures to protect your data (encrypted connections, encrypted secrets, access controls). No online service can guarantee absolute security.

9. Children

AlbaShift is not intended for anyone under 18.

10. Changes

We may update this policy; we'll revise the "last updated" date and, for material changes, notify you. Continued use after an update means you accept it.