Privacy policy

This policy explains what personal data Lushnja.biz collects, why we use it and what your rights are. Data is processed in accordance with Albanian personal data protection law.

1. Data we collect

• Account: name, email, phone (optional), password (stored hashed — we cannot see it) and profile photo if you sign in with Google.
• Businesses: the details you publish (name, address, phone, hours, photos, social links). These are public.
• Reviews: the name you enter, your email (not published) and your comment.
• Contact: name, email, phone and message, plus IP address for spam protection.
• VIP payments: plan, amount and PayPal transaction ID. Card data never touches our server — it is processed by PayPal.
• Statistics: number of views and clicks (phone, WhatsApp, directions, website) per business — without identifying the visitor.

2. Why we use it

• to create and manage your account and business listings;
• to send necessary emails (password reset, business approval, new reviews, VIP expiry);
• to prevent spam and abuse (Cloudflare Turnstile, rate limiting);
• to measure and improve the site (Google Analytics, only if you accept).

3. Cookies

We use strictly necessary cookies for the session, security (CSRF) and your language/theme choice. Analytics cookies (Google Analytics / Meta Pixel) load only after you accept them in the cookie notice. You can change your choice by clearing your browser cookies.

4. Who we share it with

We never sell data. We only share it with providers that keep the site running: hosting, Cloudflare (security), Google (Google sign-in, maps, ratings), PayPal (payments) and our email provider. Business details are public by design.

5. Retention

Account data is kept until you delete your account. Contact messages are kept for up to 24 months. Technical backups are deleted automatically after a few days.

6. Your rights

You may request access, correction, deletion or export of your data and object to processing. Email [email protected] and we will reply within 30 days. You may also complain to the Albanian Commissioner for the Right to Information and Personal Data Protection.

7. Contact

Privacy questions: [email protected].