Draft — pending legal review. This document is not yet legally binding.

Privacy Policy

Data controller

The controller responsible for personal data processed through lyp.al is the operator named in the Imprint. Once lyp.al SHPK (Kosovo) is incorporated, the company will become the controller and this policy will be updated accordingly.

What data we process

  • Account data you provide when you register: email address, display name, and a hashed password.
  • Content you submit: business listings, reviews, ratings, and any images you upload.
  • Technical data needed to operate the service securely: IP address, browser information, and server logs.

We do not sell your personal data.

Why we process it

To provide the directory, authenticate your account, display the content you submit, keep the service secure, and comply with legal obligations.

Processors we rely on

We share the minimum data necessary with service providers who process it on our behalf, including:

  • Amazon Web Services (SES) — transactional email delivery.
  • [HOSTING PROVIDER] — application and database hosting.

A complete, current list of processors is available on request via the contact channel.

How long we keep it

We keep account data for as long as your account exists. After you delete your account, data is removed or anonymised within [RETENTION PERIOD], except where a longer period is required by law. Server logs are kept for [LOG RETENTION].

Your rights

Depending on your jurisdiction, you have the right to access, correct, export, or delete your personal data, and to object to certain processing. You can export your data or delete your account directly, or contact us using the details in the Imprint.

Cookies

The cookies and similar technologies we use are described in the Cookie Policy.