LetzHalal

Privacy Policy

LetzHalal is committed to protecting the privacy of its users in accordance with the General Data Protection Regulation (GDPR - EU Regulation 2016/679) and the Luxembourg law of 1 August 2018 on data protection. This policy explains how we collect, use, and protect your personal data.

Data Controller

The data controller for personal data is MCH Dev (RCS Luxembourg: A46781), 46 rue Pierre Krier, 1880 Luxembourg. For any questions regarding your personal data, please contact us at: [email protected]

Data Collected

We only collect data necessary for the operation of the service:

  • Business submissions: name, email address (optional), information about the proposed establishment
  • Geolocation: only with your explicit consent for the "Near Me" feature (not stored on our servers)
  • Uploaded content: photos and Halal certificates for verification
  • Technical data: IP address (anonymized), browser type, pages visited (via Vercel Analytics if accepted)
  • Preferences: selected language (stored locally on your device only)

Legal Basis for Processing

In accordance with Article 6 of the GDPR, we process your data based on:

  • Consent: Consent: for the use of analytics cookies and geolocation
  • Contract: Performance of a contract: for processing your establishment submissions
  • Legitimate interest: Legitimate interest: for site security and abuse prevention

Data Usage

Your data is used exclusively for:

  • Powering and maintaining the community directory
  • Informing you about the status of your submissions (if email provided)
  • Improving our services and user experience
  • Ensuring security and preventing abuse (rate limiting, anti-spam protection)

Data Sharing

Your personal data is never sold. It may be shared with:

  • Vercel Inc. (hosting) - servers in the EU
  • Supabase (database) - servers in the EU
  • Vercel Analytics (if you accept analytics cookies) - anonymized data
  • Resend (email sending) - only if you provide your email
  • Sentry (error monitoring) - anonymized technical data

Data Retention

Your data is retained for the following periods:

  • Submissions: retained as long as the establishment is active in the directory
  • Contact messages: 2 years after the last exchange
  • Technical logs: maximum 90 days
  • Analytics data: 26 months (Vercel Analytics standard)

Cookies and Similar Technologies

We use cookies and local storage (localStorage) for:

  • Essential cookies: security session (CSRF), consent preference
  • Language preference: stored locally on your device
  • Analytics cookies (optional): Vercel Analytics for audience measurement

You can change your cookie preferences at any time via the consent banner or your browser settings.

Your Rights (GDPR)

In accordance with Articles 15 to 22 of the GDPR, you have the following rights:

  • Right of access (Art. 15): obtain a copy of your personal data
  • Right to rectification (Art. 16): correct inaccurate data
  • Right to erasure (Art. 17): request deletion of your data
  • Right to restriction (Art. 18): restrict the processing of your data
  • Right to portability (Art. 20): receive your data in a structured format
  • Right to object (Art. 21): object to the processing of your data

To exercise these rights, contact us at: [email protected]. We will respond within one month.

Complaint to the CNPD

If you believe that the processing of your personal data constitutes a violation of the GDPR, you have the right to lodge a complaint with the Commission Nationale pour la Protection des Données (CNPD):

CNPD - 15, Boulevard du Jazz, L-4370 Belvaux, Luxembourg
www.cnpd.lu

Data Security

We implement appropriate technical and organizational security measures to protect your data, including: encryption of data in transit (HTTPS/TLS), CSRF attack protection, request rate limiting, strict access control to administrative data.

Children's Data

LetzHalal does not intentionally collect personal data from minors under 16 years of age. If you are a parent or guardian and believe your child has provided us with personal data, please contact us.

Changes to This Policy

We may update this privacy policy. In case of substantial changes, we will notify you via a notice on the site. We encourage you to review this page regularly.

Last updated: January 23, 2025