Marrakech Maadine ('we', 'our', 'the Platform') operates the online artisan marketplace accessible at this website. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our platform, in accordance with applicable Moroccan law (Law 09-08 on Personal Data Protection) and the General Data Protection Regulation (GDPR) where applicable.
1. Data Controller
The data controller responsible for your personal data is Marrakech Maadine, a marketplace platform registered in Morocco. For any privacy-related enquiries, please contact us at privacy@maadine.ma.
2. Data We Collect
We collect the following categories of personal data:
Content data: product listings, photos, descriptions, and reviews submitted by sellers and buyers.
3. How We Use Your Data
We use your personal data for the following purposes:
To create and manage your account.
To process orders, payments, and deliveries.
To enable communication between buyers and sellers.
To provide customer and seller support.
To verify seller identity and store eligibility.
To send transactional emails (order confirmations, shipping updates, replies to support tickets).
To detect and prevent fraud, abuse, and policy violations.
To improve the platform through aggregated, anonymised analytics.
To comply with our legal obligations under Moroccan and applicable international law.
4. Legal Basis for Processing
We process your data on the following legal bases:
Contract performance: processing necessary to fulfil your order or operate your seller account.
Legitimate interest: fraud prevention, platform security, and service improvement.
Legal obligation: compliance with Moroccan financial regulations, tax law, and court orders.
Consent: marketing communications (you may withdraw consent at any time).
5. Data Sharing
We do not sell your personal data. We may share it with:
Payment processors: to securely handle transactions.
Logistics partners: delivery name and address shared with shipping providers when necessary.
Hosting and infrastructure providers: operating our servers and databases under strict data processing agreements.
Legal authorities: when required by Moroccan law, court order, or regulatory request.
All third parties are contractually bound to process your data only for the stated purpose and under appropriate security measures.
6. Data Retention
We retain your personal data for as long as your account is active or as necessary to provide our services. After account deletion:
Order and transaction records are retained for 10 years as required by Moroccan tax and commercial law.
Support tickets are retained for 3 years.
Chat messages are deleted within 90 days of account closure.
Technical logs are retained for 12 months.
7. Your Rights
Under Law 09-08 and GDPR (where applicable), you have the right to:
Access: request a copy of the personal data we hold about you.
Rectification: correct inaccurate or incomplete data.
Erasure: request deletion of your data, subject to legal retention obligations.
Portability: receive your data in a structured, machine-readable format.
Restriction: request we limit how we process your data in certain circumstances.
Objection: object to processing based on legitimate interests.
Withdraw consent: for any processing based on consent, at any time.
To exercise any right, contact us at privacy@maadine.ma. We will respond within 30 days.
8. Cookies
We use the following cookies:
Strictly necessary: session authentication cookies (HTTP-only, secure). Cannot be disabled.
Functional: language and currency preferences.
Analytics: anonymised usage statistics to improve the platform (opt-out available in your account settings).
You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging in.
9. Security
We implement industry-standard security measures including HTTPS/TLS encryption for all data in transit, bcrypt password hashing, HTTP-only authentication cookies, access controls limiting staff access to personal data, and regular security audits. Despite these measures, no system is completely secure. We encourage you to use a strong, unique password and to contact us immediately at security@maadine.ma if you suspect unauthorised access.
10. International Transfers
Our infrastructure is hosted in the European Union. If your data is transferred outside Morocco or the EEA, we ensure appropriate safeguards are in place (Standard Contractual Clauses or equivalent mechanisms) in compliance with Moroccan CNDP guidelines.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users by email and post a notice on the platform at least 14 days before changes take effect. Continued use of the platform after that date constitutes acceptance of the updated policy.
12. Contact & Complaints
For any privacy questions, contact us at privacy@maadine.ma.
If you believe we have not handled your data appropriately, you have the right to lodge a complaint with the Moroccan Commission Nationale de Contrôle de la Protection des Données à Caractère Personnel (CNDP) at www.cndp.ma.
This document is legally binding and forms part of the Marrakech Maadine Terms of Service.
