Privacy Policy

1. About Us

Zakazhi is a salon and service booking platform operated by ESA Technologies, 21-VI May Street No. 7, Shtip, North Macedonia ("we", "us", "our"). This Privacy Policy explains what personal data we collect when you use the Zakazhi iOS application ("App"), how it is used and protected, and what rights you have.

Contact: zakazhi.support@gmail.com • +389 74 602 401 • https://zakazhi.io/

2. Data We Collect

Account data

Name or username, email address, phone number, and encrypted password upon registration.

Booking data

Appointment details, selected services, and the business you book with.

Device & usage data

IP address, device type, operating system, and in-app interactions, collected automatically for security and performance.

Location (optional)

GPS data, requested only with your explicit permission, used solely to display nearby businesses. Never used for advertising.

Profile photo (optional)

Only if you choose to upload one. Denying this permission does not affect core app functionality.

Payment data

Zakazhi does not collect, process, or store payment card details. All payments are handled by certified payment service providers (PSP) compliant with PCI-DSS. We receive only a transaction confirmation — never card numbers, CVV codes, or banking credentials.

3. Why We Collect Your Data

We process your data only for the following purposes and on the following legal bases:

We do not use your data to build advertising profiles or for marketing purposes. We do not sell personal data to third parties.

4. Data Retention

We retain personal data only for as long as necessary:

When you delete your account, we erase your personal data within 30 days. Data required by law may be retained for the applicable statutory period.

5. How We Protect Your Data

• Passwords are one-way hashed using industry-standard algorithms and are never stored in plain text.
• All data in transit between your device and our servers is encrypted using TLS 1.2 or higher.
• Access to personal data is restricted to authorised personnel on a need-to-know basis.
• Payment card data is handled exclusively by PCI-DSS certified payment service providers. Zakazhi never receives or stores card details.

In the event of a personal data breach that poses a risk to your rights or freedoms, we will notify you and the relevant supervisory authority within the timeframes required by applicable law.

6. Cookies and Local Storage

The App uses cookies and local device storage solely to:

• Maintain your login session between app launches.
• Remember your language and display preferences.
• Collect anonymised, aggregated analytics to improve app performance.

We do not use cookies for cross-site tracking or targeted advertising. You can clear app data via your device settings, though this will log you out.

7. Who We Share Data With

We share your data only where strictly necessary:

• Hosting & infrastructure: Cloud hosting and infrastructure providers acting on our behalf under appropriate data protection agreements.
• Payment service providers: PCI-DSS certified PSPs that process payments on behalf of listed businesses. Only the minimum data required to complete a transaction is shared.
• Analytics: Anonymised, non-identifiable aggregate data only — never linked to individual users.
• Legal authorities: When required by law, court order, or to protect user safety.
• Business transfer: In the event of a merger or acquisition, your data may transfer to the new entity, which will be bound by this Privacy Policy.

We never sell personal data to third parties.

8. International Data Transfers

Zakazhi operates from North Macedonia. Where personal data is transferred outside the European Economic Area, we apply appropriate safeguards including Standard Contractual Clauses approved by the European Commission.

9. Your Rights

Under GDPR and applicable North Macedonian data protection law, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Ask us to correct inaccurate or incomplete data.
• Erasure: Request deletion of your data, subject to legal retention obligations.
• Restriction: Ask us to limit processing in certain circumstances.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Where processing is consent-based, withdraw at any time without affecting prior processing.

To exercise any right, contact us at zakazhi.support@gmail.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Personal Data Protection Agency of North Macedonia or your local supervisory authority.

10. Children's Privacy

Zakazhi is not intended for persons under 13 years of age. We do not knowingly collect personal data from anyone under 13. If you believe a child under 13 has provided us with personal data, contact us at zakazhi.support@gmail.com and we will delete it without delay.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in the law or our services. When we make material changes, we will notify you via the App or by email at least 14 days before the changes take effect. The "Last updated" date at the top of this document reflects the current version.

12. Contact Us

For any questions, requests, or concerns regarding this Privacy Policy:

• Company: ESA Technologies
• Address: 21-VI May Street No. 7, Shtip, North Macedonia
• Email: zakazhi.support@gmail.com
• Phone: +389 74 602 401
• Website: https://zakazhi.io/