Privacy policy

Morocco Chic Design — 97, Angle Rue Ifni & Rue Rabiaa El Adaoui, La Gironde — Casablanca, Maroc. Contact: morocco.chic.design@gmail.com. Any request regarding your data may be sent to this address.

We only collect the data necessary for the service requested. Depending on how you use the site, this may include: identity and contact details (first and last name, email, phone, city, company for professionals); the content of your quote requests and messages; order history and delivery address; customer account credentials (email and encrypted password); customer reviews you publish; browsing data (pages viewed, device, referral source) only if you have accepted audience measurement.

We do not collect any sensitive data within the meaning of Article 9 of the GDPR, and your banking details never pass through our servers: they are entered directly with our payment provider.

Processing your quote requests and orders, and providing after-sales service — performance of the contract or pre-contractual measures. Managing your customer account and favourites — performance of the contract. Sending you the newsletter — your consent, revocable at any time. Measuring site audience and improving our services — your consent. Complying with our accounting and tax obligations — legal obligation. Preventing fraud and securing the site — legitimate interest.

Quote requests: 3 years from the last contact. Orders and accounting records: 10 years (legal obligation). Customer account: until deleted by you, then 3 years of inactivity. Newsletter: until unsubscription. Customer reviews: as long as they are published. Audience measurement cookies: 13 months maximum, consent kept for 12 months.

Your data is neither sold nor rented. It is accessible to our internal team and to our technical processors, each limited to what is strictly necessary: site host, Stripe for secure payment, Resend for transactional emails, Brevo for the newsletter (where applicable), Google Analytics for audience measurement (only with your consent).

Some of these providers are established outside Morocco and the European Union. Transfers are governed by the European Commission's standard contractual clauses or an equivalent mechanism.

The site is served exclusively over HTTPS with HSTS. Passwords are hashed (scrypt) and never stored in plain text. Access to the admin area is authenticated, APIs are protected by rate limiting and public forms by an anti-bot mechanism. Backups are encrypted and access to data is restricted to authorised personnel.

You have the right to access, rectify, erase, restrict and object to the processing of your data, as well as the right to data portability, to withdraw your consent at any time, and to set guidelines for what happens to your data after your death. To exercise these rights, write to us at morocco.chic.design@gmail.com; we reply within 30 days.

If you believe your rights are not being respected, you may contact the CNDP (Morocco's national data protection authority) or, if you reside in the European Union, your country's supervisory authority.

Details of the cookies used and how to manage your preferences can be found on the cookie management.

This policy may change over time. Any substantial change will be flagged on the site and, if necessary, your consent will be requested again. The date of the last update appears at the top of this page.