Personal data protection

Who processes your data

The data controller is [TO BE COMPLETED: company name], whose registered
office is at [TO BE COMPLETED: address].

[TO BE COMPLETED: CNDP declaration or authorisation number. Processing
personal data is governed by law 09-08 and requires a prior formality with the
national data protection commission.]

What we collect

- Customer account: first name, surname, e-mail address, phone number,
password (stored hashed, never in clear).
- Orders: delivery addresses, items ordered, amounts, payment method,
message exchanges.
- Payment proofs: the documents you send us for a bank transfer or a
Wafacash payment.
- Browsing: a session cookie, required for the basket and sign-in to work.

Why

- To process and deliver your orders, and keep you informed about them.
- To answer your questions.
- To meet our accounting and tax obligations.
- To send you our offers, only if you have agreed to it. That agreement
can be withdrawn at any time from your account.

For how long

Account data is kept for as long as the account exists. Accounting documents
are kept for the period required by law.

[TO BE COMPLETED: the exact periods chosen by the company.]

Who has access

Your data is neither sold nor rented. It is accessible to authorised shop
staff and passed to the carrier for delivery only.

Your rights

You have a right of access, rectification and objection regarding your data.
You may exercise it by writing to us from the contact page, or directly from
your account for your personal details.

Security

Passwords are never stored in clear. Payment proofs are kept outside the
public area of the website and are accessible only to you and to authorised
staff.