Last updated: 5 October 2026
1. Who is responsible for your data
Gola Services SUARL (tax ID 1479457S), R-11, 61 Rue Ibn Mandhour, Cité Ennozha, 2080 Ariana, Tunisia, is the controller of the personal data collected through this shop (Select). Contact for anything about your data: contact@gola.tn or +216 71 709 333. We process personal data in accordance with Tunisian law, in particular organic law no. 2004-63 of 27 July 2004 on the protection of personal data, and with any law that replaces it.
2. What we collect, why, and for how long
- Your account: name, email address, password (stored only in hashed form), language. Why: to let you sign in and follow your orders. Basis: the contract with you. Kept: until you close your account.
- Your orders and deliveries: name, email, phone number, delivery and billing addresses, the tax ID (MF) of a business, what you ordered, amounts, the payment method, your invoices and delivery notes. Why: to process, deliver and invoice your order, and to give you support and warranty service. Basis: the contract with you, and our legal obligations. Kept: invoices and accounting records for the period the law requires (currently ten years); other order data as long as needed for warranty and support.
- Your messages to us (contact form, email, phone). Why: to answer you. Kept: as long as needed to deal with your request and any follow-up.
- Your reviews: the rating and text you publish about a product. Why: to show reviews to other customers. Kept: until you ask us to remove them.
- Technical data: IP address, browser, the pages requested, security events. Why: security, fraud prevention and keeping the shop working. Basis: our legitimate interest. Kept: only as long as needed for those purposes.
- Advertising measurement data (see section 6). Why: to measure how well our Facebook and Instagram advertising works. Basis: our legitimate interest, which you can object to at any time.
We do not sell your data, we do not take decisions about you by purely automated means, and the shop is not aimed at children.
3. Who receives it
- Delivery: your name, address and phone number go to the courier who delivers your order (mostly LeoExpress) or, for express delivery, to the taxi driver.
- Banks: when you pay by transfer or deposit, the banks handling the payment see its details.
- Cloudflare (Turnstile): the anti-bot check on the sign-in, registration, password-reset and review forms is run by Cloudflare, which receives your IP address and browser signals.
- Google (Maps): the map in the page footer is loaded from Google, which receives your IP address when it loads.
- Meta (Facebook and Instagram advertising): see section 6.
- Service providers that host the shop and send our emails. They process data only for us and on our instructions.
- Authorities, where the law requires us to disclose data.
Cloudflare, Google and Meta are based outside Tunisia, so the data they receive is processed abroad. We send them only what is needed for the service described.
4. Your rights
You may ask us for access to the personal data we hold about you, to have it corrected, to have it deleted where the law allows, and you may object, on legitimate grounds, to its use. Write to contact@gola.tn from the email address of your account; we may ask you to prove your identity, and we answer without undue delay. Deleting data that we must keep by law (such as invoices) is not possible until the legal period ends. You may also complain to the national authority for the protection of personal data (INPDP).
5. Security
We protect your data with encrypted connections, hashed passwords, anti-bot protection on sensitive forms and access limited to the people who need it. No system is perfectly secure: choose a strong password and keep it private. If a breach affecting your data occurs, we will tell you and the authorities as the law requires.
6. Cookies, Meta Pixel and local storage
- Essential cookies keep you signed in and remember your cart. The shop cannot work without them.
- Cloudflare Turnstile may use technical cookies or storage of its own to run its check.
- Meta Pixel and Conversions API: to measure our advertising, we send Meta events such as a page or product view, add to cart, start of checkout and purchase. They carry your IP address, browser details, Meta's identifiers (the _fbp and _fbc cookies, kept up to 90 days) and, once you check out, your email address in hashed form. You can stop this with your browser's tracking protection or an ad blocker, or by writing to us; the shop keeps working.
- On your device only: your light or dark theme and the products you recently viewed are stored in your browser and never sent to us.
7. Changes
We may update this policy, for example when the law changes. The date at the top shows the latest version.