Privacy Policy

1. Introduction

Welcome to InStoore. We respect your privacy and are committed to protecting your personal data in accordance with Moroccan Law No. 09-08 on the Protection of Individuals with Regard to the Processing of Personal Data and its implementation Decree n° 2-09-165 of May 21, 2009.

This privacy policy will inform you about how we collect and process your personal data when you use our website, and tell you about your privacy rights under Moroccan law.

InStoore is registered with the National Commission for the Control of Personal Data Protection (CNDP) in Morocco, in compliance with Law 09-08.

2. Data Controller

InStoore (referred to as "we", "us", or "our" in this privacy policy) is the data controller and responsible for your personal data.

Our full contact details are:

Company Name: InStoore
Address: 123 Business Street, City Center, Casablanca, Morocco
Email: privacy@instoore.com
Phone: +212 522 123 456

3. Data We Collect

In accordance with Law 09-08, we collect only the data necessary for our legitimate purposes. We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

Identity Data: First name, last name, username or similar identifier.
Contact Data: Delivery address, email address and telephone numbers.
Location Data: Your preferred city, and for delivery purposes, your specific address coordinates when you place orders.
Profile Data: Your username and password, preferences, and browsing behavior on our platform.
Usage Data: Information about how you use our website, which stores and products you view.
Technical Data: Internet protocol (IP) address, your login data, browser type and version, time zone setting and location.

3.1 Sensitive Personal Data

We do not collect any sensitive personal data (as defined by Law 09-08) such as information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health data, or data concerning a person's sex life or sexual orientation.

4. How We Collect Your Data

We use different methods to collect data from and about you including through:

Direct interactions: You may give us your Identity and Contact Data by filling in forms or by corresponding with us.
Automated technologies: As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions and patterns.
Location-based services: When you use our platform to locate nearby stores or for delivery purposes, we collect location data.

5. Legal Basis for Processing

In accordance with Law 09-08, we will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

With your consent: When you have given us explicit consent to process your personal data for a specific purpose
For contract performance: When we need to process your data to perform the contract we have entered into with you
For legitimate interests: When processing is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests
For legal compliance: When we need to comply with a legal obligation

6. How We Use Your Data

We will only use your personal data for the purposes for which we collected it. These purposes include:

To register you as a new user or store owner
To provide you with access to store information and product listings
To maintain a record of stores and products you have viewed
To enable communication between you and store owners
To improve our website and user experience
To provide personalized content and recommendations
To ensure the security of our platform
To comply with legal obligations

7. Data Retention

In accordance with Law 09-08, we will only retain your personal data for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the data, and the applicable legal requirements.

Specifically, we maintain the following retention periods:

Account information: For the duration of your account plus 1 year after account deletion
Location preferences: 90 days
Browsing history: 30 days
Technical logs: 12 months

8. Data Security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorized way, altered or disclosed. These measures include:

Encryption of sensitive data
Secure user authentication mechanisms
Regular security testing and monitoring
Staff training on data protection
Access controls and audit logs

We limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have procedures in place to deal with any suspected personal data breach and will notify you and the CNDP of a breach where we are legally required to do so.

9. Your Rights Under Law 09-08

Under Moroccan data protection law, you have the following rights in relation to your personal data:

Right to information: You have the right to be informed about the collection and use of your personal data.
Right of access: You have the right to request access to your personal data that we hold.
Right to rectification: You have the right to request correction of any inaccurate personal data.
Right to erasure: You have the right to request erasure of your personal data in certain circumstances.
Right to restrict processing: You have the right to request restriction of processing of your personal data.
Right to object: You have the right to object to processing of your personal data in certain circumstances.
Right to withdraw consent: You have the right to withdraw consent at any time where we are relying on consent to process your personal data.

To exercise any of these rights, please contact us at privacy@instoore.com. We will respond to your request within 30 days.

10. International Data Transfers

We primarily store and process your data in Morocco. However, some of our service providers may be based outside Morocco. When we transfer your personal data outside Morocco, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data
We use specific contracts approved by the CNDP which give personal data the same protection it has in Morocco
We obtain your explicit consent for the specific transfer

Any international data transfers will be conducted in strict compliance with Law 09-08 and with approval from the CNDP where required.

11. Cookies

We use cookies and similar tracking technologies to enhance your experience on our website. Our cookies fall into the following categories:

11.1 Essential Cookies

These cookies are necessary for our website to function properly and cannot be switched off. They include:

session_id: Maintains your logged-in session
terms_accepted: Records that you have accepted our terms and conditions

11.2 Functionality Cookies

These cookies enable personalized features and remember your preferences:

preferred_city: Remembers your selected city for 90 days
preferred_category: Stores your product category preferences for 90 days
store_email: Remembers your store email when "Remember me" is selected
recently_viewed: Tracks products you've viewed to improve your shopping experience

For more detailed information about the cookies we use, please see our Cookie Policy.

12. Store Owner and Member Data

If you register as a store owner or member on our platform, we collect and process additional information:

Store Owners: Store name, business registration details, address, contact information, product listings, and store analytics
Members: Shopping preferences, viewed products, and browsing history

This processing is necessary to provide our marketplace services and is conducted in compliance with Law 09-08. Store owners are independently responsible for their compliance with data protection requirements regarding any customer data they collect.

13. Marketing Communications

We may use your data to send you information about stores, products, or services that may be of interest to you. You will receive marketing communications from us only if:

You have given your explicit consent to receive such communications
You have previously purchased products or services from us and have not opted out

You can opt out of marketing communications at any time by:

Clicking the "unsubscribe" link in any marketing email we send
Adjusting your communication preferences in your account settings
Contacting us directly at privacy@instoore.com

14. Third-Party Links

Our website may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. We encourage you to read the privacy policy of every website you visit.

15. Children's Privacy

Our Service is not intended for children under the age of 18. We do not knowingly collect personal data from children under 18. If you are a parent or guardian and you believe that your child has provided us with personal data, please contact us at privacy@instoore.com so that we can take necessary actions.

16. Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

We will obtain your consent to any material changes if required by applicable data protection laws. We encourage you to review this Privacy Policy periodically for any changes.

17. Dispute Resolution

If you have a complaint about our handling of your personal data, please contact us first at privacy@instoore.com. We will investigate and attempt to resolve any issues.

You have the right to make a complaint at any time to the National Commission for the Control of Personal Data Protection (CNDP), Morocco's supervisory authority for data protection issues (www.cndp.ma).