Privacy Policy
Data controller
The controller for the data described on this page is SARL DALIL (provisional name, registration in progress), whose postal address is Local n°31, Cité 142 Logements, Draria 16000, Alger. For any question or request about your data, write to contact@dalil.travel.
Data we collect
Dalil only collects the data necessary to operate the platform: email, agency name, wilaya, and professional contact information at registration.
When a visitor sends a contact request to an agency, we record the details entered (name, phone number, optional email, message) as well as a technical fingerprint of their IP address, kept for 24 hours solely to fight automated submissions.
Sahara quote requests
Our English-language Sahara pages carry a quote request form. It collects your full name, your email address, an optional WhatsApp number, the destination you are interested in, your travel window, your group size, your budget range, and an optional message. We do not ask for your passport number, nationality, or date of birth at this stage.
The request is stored by Dalil and sent by email to our team, which passes it on to at most three partner agencies; they then contact you directly. Dalil acts as an introducer: we are never the tour operator, we do not book, and we take no responsibility for the trip itself. The legal basis for this processing is Article 6(1)(b) of the GDPR: it is necessary to take steps at your request before entering into a contract.
Use of data
- Displaying the agency listing in the directory
- Communication related to the agency account
- Improving the platform (anonymized analytics)
Storage and security
Data is stored on Supabase (secure infrastructure, encrypted in transit and at rest). We never sell your data to third parties.
Hosting is in the European Union: the Supabase database is hosted in Ireland (AWS eu-west-1), PostHog on its European infrastructure (eu.i.posthog.com), and Sentry on its European region. Notification emails are delivered through Resend.
Analytics and technical monitoring
We use PostHog to measure how the site is used. PostHog runs in cookieless mode, so no analytics cookie is set. PostHog does keep its state in your browser's local storage (localStorage). The only cookie we set is a technical one (dz_country) holding the two-letter country code of your connection for 24 hours; it carries no identifier and cannot be used to recognize you.
In production we also use Sentry to detect technical errors on the site. Sentry receives error reports and a 10% sample of performance traces. Session replay is disabled.
Messaging platforms and automated assistant
When you write to Dalil on Messenger or Instagram, we process the content of your message and the technical identifier Meta assigns to that conversation. Meta also keeps this conversation under its own rules, independent of Dalil.
Your message is sent to the Anthropic API to produce an automated reply; as a subprocessor, Anthropic applies its own 30-day retention to this content. You are talking to an automated assistant, not a team member: you can ask at any time to be put in touch with our team.
At Dalil, message content is deleted after 30 days, and the conversation's technical identifier is replaced with an irreversible hash at the same point. If the conversation was escalated to the team, it is kept with its reason and then deleted after 12 months.
How long we keep data
The technical fingerprint of the IP address attached to a contact message is kept for 24 hours. The technical dz_country cookie expires after 24 hours.
Retention period for quote requests and contact messages: 12 months.
Your rights
You have the right to access, correct, or delete your data. Contact us at contact@dalil.travel for any request.
You also have the right to data portability: on request, we send you the data you provided in a structured, machine-readable format. If you believe your rights are not being respected, you can lodge a complaint with a competent data protection supervisory authority.