Privacy policy

Who operates Nemo

Nemo at nemofish.al is operated by THE NEMO FISH SHPK, NIPT M42221037B, represented by administrator Rezart Gjyshi. Our registered address is Rruga Kadri Roshi, property 368/15-N29, cadastral zone 3866, Yzberisht, Administrative Unit 7, Tirana, Albania. Contact us about privacy at info@nemofish.al.

Information used by the service

We process the information you provide to create an account, place an order and contact us. This includes your name, phone number, language preference, delivery addresses and map coordinates, entrance and delivery instructions, cart contents, order history, payment status and support correspondence. Please avoid adding unnecessary sensitive information to delivery instructions or order notes.

When you sign in with an available Google or Apple option, the provider authenticates you and shares the identity information covered by its consent screen. Nemo requests basic identity scopes, which can include your name and email address. Nemo stores the provider's account identifier and your name to link your sign-in to your Nemo account. Nemo does not receive your Google or Apple password or request access to your mailbox, contacts or calendar. The sign-in provider also processes information under its own privacy policy.

Our hosting and network services process technical information such as IP addresses, request times and browser information to deliver the website and diagnose problems.

If online card payment is available, payment and billing information is processed through our payment provider, POK, and its payment authentication services. Nemo retains payment references, transaction status and limited saved-card information such as the last four digits. Full card numbers and security codes are not stored in Nemo's database. Payment providers may process billing and device information for payment authorization and fraud prevention.

Why information is used

We use information to authenticate you, maintain your account and cart, check delivery coverage, prepare and fulfil orders, arrange delivery or pickup, handle payments and refunds, respond to requests and protect the service against misuse. We also retain records needed for accounting, legal obligations and resolving disputes. Account and order processing supports the service contract; accounting records support legal obligations; service security supports our legitimate interests. Optional processing that requires consent depends on your choice. Where a feature requires permission or consent, you can choose whether to provide it; declining information needed for an order can prevent us from fulfilling that order.

Who receives information

Authorized restaurant staff and delivery personnel receive the information needed to handle your order. Our service providers process information needed for hosting, authentication, payments, mapping and email. The current infrastructure uses AWS for website hosting, Hostinger for the application and database, and Zoho for email. Google and Apple are involved when you choose their available sign-in options. We use Photon/Komoot for address searches and reverse lookup, which receives your search text or map coordinates. OpenFreeMap serves map tiles and receives technical network information when your browser loads maps. We may disclose information when required by law or to resolve a dispute.

Our service providers may process information outside Albania. You can contact us for information about the providers and safeguards relevant to your data.

Cookies and browser storage

Nemo uses a sign-in cookie, security mechanisms and a language preference cookie. It also uses browser storage for cart contents, menu caching, checkout recovery and navigation. The language cookie lasts up to one year. The sign-in cookie can remain in your browser for up to 400 days, while the server session normally expires after 30 days without authenticated activity. Logging out ends the active session. You can clear cookies and browser storage in your browser settings; doing so can sign you out or remove a locally saved cart.

Retention and your choices

We retain account and order information while needed to provide the service, meet accounting and other legal obligations, prevent misuse and resolve disputes. Different records can need different retention periods. Clearing browser storage or signing out does not delete server-side account or order records.

Depending on the applicable conditions, you may request access, correction, deletion, restriction or portability of your personal information, object to processing, or withdraw consent for processing based on consent. Contact info@nemofish.al to exercise these rights or raise a privacy concern. We may need to verify your identity before acting. Some records may need to be retained for legal obligations or an unresolved transaction or dispute. You may also raise a complaint with Albania's Information and Data Protection Commissioner. You can manage access granted to Nemo through your Google or Apple account settings; revoking provider access does not by itself delete Nemo's records.

Changes

We will update this page when our practices change and show the effective date. Material changes affecting your use of the service will be communicated where appropriate.