Data protection

Privacy policy (GDPR & Swiss FADP)

hezoujib, established in Genève, Suisse, processes your data to connect clients and carriers between Europe and the Maghreb. This page explains which data we collect, why, how long we keep it and how to exercise your rights.

Data controller
hezoujib, Route de Mon-Idée 53, 1226 Thonex, Genève, Suisse — contact@hezoujib.com. We apply the GDPR (EU 2016/679) for people residing in the European Union and the revised Swiss Federal Act on Data Protection (FADP) for Switzerland.
01 Data we collect

We only collect what the service needs. No data is sold to third parties.

Data Why Retention
Identity Create the account and show your name on your public profile Account + 3 years
Contact details Sign-in, alerts, dispute resolution Account + 3 years
Address Organise pickups and home deliveries Account + 1 year
Recipients Family and friends address book, reusable for every shipment Until deletion
Parcels & photos Proof of contents, tracking and disputes 2 years after delivery
Carrier documents Check identity, licence and goods insurance 12 months, then reviewed
Technical data Account security and fraud prevention 12 months
02 Legal bases

Each processing rests on a precise basis:

Performance of the contract: account, publishing trips and adverts, booking, parcel tracking.
Legal obligation: keeping supporting documents and answering the competent customs authorities.
Legitimate interest: platform security, prevention of fraud and multiple accounts.
Consent: email alerts and non-essential cookies — withdrawable at any time.
03 Who sees your data

The carrier who accepts your parcel sees only what is needed to deliver: your name, the description and weight of the parcel, then the name, phone number and address of the recipient you chose. Your sender address is passed on only if you ask for a home pickup.

Other members see your public name, your city, your reviews and your thanks — never your address or your phone number.
Our processors (hosting in Switzerland and the EU, emails, notifications) are bound by a processing agreement.
No transfer outside Switzerland and the EU without appropriate safeguards (standard contractual clauses).
04 Your rights

You may request access, rectification, erasure, restriction or portability of your data, and object to processing based on our legitimate interest. Most of these actions are available in « My account »: data export, account deletion, notification settings.

Response time: 30 days at most.
Account deletion: effective after 30 days, trips under way having to be completed first; published reviews stay visible in anonymised form.
Complaint: Federal Data Protection and Information Commissioner (Switzerland), or the authority of your country in the EU.
05 Security and retention

Passwords are hashed and salted, never stored in clear text. Exchanges are encrypted in transit (TLS 1.3) and carrier documents are encrypted at rest, accessible only to the verification team. Two-factor authentication is available in the settings.

Logging of access to sensitive documents.
Notification to the people concerned and to the authority in case of a risky breach, within 72 hours.
Automatic deletion or anonymisation once the stated retention periods end.
06 Cookies

A session cookie is essential to sign in. Audience measurement carries no advertising identifier and no retargeting cookie is set. Consent to non-essential cookies can be withdrawn at any time.

A question about your data?
hezoujib · Route de Mon-Idée 53, 1226 Thonex, Genève, Switzerland · contact@hezoujib.com
Contact us