Privacy Policy

We collect information you provide directly, including name, email address, phone number, business details, and payment information when you register for or use our services.

We automatically collect certain technical information including IP addresses, browser type, device identifiers, and usage data when you interact with our platform.

For providers, we collect business information including service menus, pricing, staff details, booking records, and financial data necessary to operate our platform.

We use your information to provide, maintain, and improve our platform services; process transactions and send related information; send administrative messages, updates, and security alerts; respond to comments and questions; and comply with legal obligations.

We analyse usage patterns to improve our platform, develop new features, and ensure platform security. We do not sell your personal data to third parties.

Villantre is a multi-tenant platform. All data is logically isolated at the database level by provider identifier. No provider can access, view, or affect another provider's data. Our architecture enforces this isolation at the application, service, and database layers.

Staff members within a provider can only access data within their assigned scope as determined by their role (Owner, Manager, or Staff Member).

Payment card data is handled exclusively by our payment processor (Tap Gateway). Villantre does not store, process, or transmit cardholder data. All financial transactions are tokenised and PCI-DSS compliant.

We store transaction records including amounts, timestamps, and commission calculations for accounting and audit purposes.

We retain your data for as long as your account is active or as needed to provide services. If you close your account, we retain certain data for legal compliance, dispute resolution, and fraud prevention for up to 7 years.

Booking records and financial data are retained as required by applicable tax and commercial law in Qatar and Algeria.

You have the right to access, correct, or delete your personal data. You may request a copy of your data or its deletion by contacting us at privacy@villantre.com.

For providers in Algeria, additional rights apply under Algerian data protection law. For providers in Qatar, rights are governed by Qatar's data protection framework.

We implement industry-standard security measures including TLS 1.3 encryption in transit, AES-256 encryption at rest, regular security audits, and access controls. All data is backed up daily with point-in-time recovery.

Despite these measures, no system is perfectly secure. We encourage you to use strong passwords and notify us immediately of any suspected unauthorized access.

For privacy-related questions or to exercise your rights, contact our Data Protection Officer at privacy@villantre.com or in writing at our registered offices in Doha, Qatar.