Privacy Policy

Who we are

The data controller is n'Zon Coworking Space Tirana, Rruga Him Kolli, Myslym Shyri, Tiranë 1004, Albania.

Contact: info@nzon.al · +355 69 299 9146.

What this policy covers

It applies when you visit nzon.al, create an account, book a desk, office, meeting room or event space, pay online, use door access tied to a booking, message support, or use the iOS or Android app.

It does not cover independent websites or apps that we only link to.

Data we collect

We collect only what we need to run the space and your booking. Typical categories:

• Account: name, email, phone number, password hash, language, and profile details you enter.
• Sign-in with Google or Apple: the identifier and verified email those services send us. We do not receive your Google or Apple password.
• Bookings: space type, dates and times, guest count, notes, status, and related invoices.
• Payments: Stripe processes card and wallet payments. We store payment status, amount, currency, and Stripe references. We do not store full card numbers on our servers.
• Access: codes or credentials created so you can enter the building for a paid or approved booking.
• Support: messages you send in chat or by email, and basic metadata needed to reply.
• App notifications: a Firebase device token if you allow push notifications. You can turn notifications off in the device settings.
• Technical data: IP address, browser or app version, device type, and security or error logs.
• Website analytics (first-party): an anonymous visitor id, pages opened, time on site, country inferred from IP, device type, and links clicked. We do not send this to Google Analytics or ad networks.
• Cookies and similar storage: a session cookie so you stay signed in, a first-party analytics cookie for visitor stats, plus cookies Stripe needs to complete checkout. We do not use advertising pixels or sell data to ad networks.

Why we use your data

We process personal data to:

• Create and secure your account, and keep you signed in.
• Take bookings, send confirmations, and manage changes or cancellations.
• Take payment, issue invoices or refunds, and prevent fraud.
• Issue and revoke building access for your booking.
• Answer support questions and improve the service.
• Understand how the public website is used (pages, countries, and time on site) so we can improve nzon.al. This is first-party analytics, not advertising.
• Send transactional email or push messages about your booking or account. We do not send marketing email unless you ask for it.
• Meet accounting, tax, consumer, and security obligations under Albanian law.

Legal basis

We process data because it is needed to perform the contract when you book or create an account, because we have a legal duty (for example invoices and tax records), and because we have a legitimate interest in securing the building, preventing abuse, and keeping the website and apps working.

Where Albanian Law no. 124/2024 on Personal Data Protection or the EU GDPR applies (for example if you are in the European Union), those rights described below are available to you.

Who we share data with

We do not sell your personal data. We share it only with providers that help us run n'Zon, and only as needed:

• Stripe — card and wallet payments, refunds, and payment fraud checks.
• Google — Sign in with Google, Firebase Cloud Messaging for push notifications, and maps links you choose to open.
• Apple — Sign in with Apple on the website and the iOS app.
• Our hosting, email, and database providers — to store the site, send transactional mail, and keep backups.
• Professional advisers or public authorities when the law requires it, or to protect members, staff, and the building.

How long we keep data

Account profile data stays until you delete the account or ask us to remove it.

Booking, payment, invoice, refund, and access records are kept as long as accounting, tax, dispute, or security rules require. We then delete them or keep only what the law still needs.

Support messages may be kept in anonymized form after an account is deleted, so we can improve replies without keeping your name.

Website analytics (anonymous visitor id, pages, country, device) are kept for up to 24 months, then deleted.

Session cookies expire when you sign out or when the session times out. Push tokens are removed when you delete the account or uninstall the app after the token is invalidated.

Your rights

You can ask us to access, correct, or delete personal data we hold about you, or to restrict or object to certain processing. Email info@nzon.al. We may need to confirm it is you before we act.

You can delete an nZon Space account in the app (Account → Privacy & security → Delete account) or on the account deletion page. Deletion removes the login, profile, Google/Apple links, and push tokens. It does not automatically cancel a paid booking. Payment and access records may remain where the law requires it.

You can complain to the Albanian Information and Data Protection Commissioner (KDIMDP) if you believe we have mishandled your data.

Children

n'Zon accounts and online booking are intended for people 16 or older. We do not knowingly collect personal data from children for an account. If you believe a child has created an account, email us and we will delete it.

Security and international transfers

We use HTTPS, access controls, and hashed passwords. No online service is perfectly secure. Tell us at once at info@nzon.al if you think your account was used without permission.

Some providers (including Stripe, Google, and Apple) may process data outside Albania. They do so under their own contracts and safeguards. We do not transfer your data to advertisers.

Changes

If we change this policy in a material way, we will update this page and the “Last updated” date. Continued use of the website or app after a change means you have read the new version.

Account deletion

You can delete an nZon Space account in the app or at nzon.al/en/account-deletion.