Privacy Policy

Last updated: 09/11/2026

1. Who is responsible for your data

Épices 35, Sidi Ishak, N°3 Derb Anboub, Marrakesh 40000, Morocco (epice35morocco@gmail.com, +212 662 133 596) is responsible for the personal data described here. This policy follows Moroccan Law 09-08 on the protection of personal data and, for visitors from Europe, applies the principles of the GDPR.

2. What we collect

  • When you contact or order via WhatsApp, phone or email: your name, phone number, email, delivery address, the products you want and the messages you send us.
  • Automatically when you visit the site: technical data such as IP address, browser, device, pages visited and approximate location, through cookies and similar tools (see our Cookie Policy).
  • Reviews: a review widget displays Google reviews that customers published on Google. We do not collect these ourselves.

We do not collect payment card or bank details through this website, because there is no online payment.

3. Why we use it

  • To answer your questions and handle your orders, deliveries and after-sales requests.
  • To keep the website secure and understand how it is used, so we can improve it.
  • To meet legal and accounting obligations.

4. Legal basis

Your consent (for non-essential cookies and when you message us), the performance of an order or request you made, our legitimate interest in running and securing the shop, and legal obligations.

5. Who receives your data

Only the people and providers who need it: our website hosting and maintenance providers, WhatsApp (Meta) when you message us, shipping carriers and customs when we send you a parcel, and analytics or review providers if you accept the matching cookies. We do not sell your data.

Some providers are located outside Morocco, so your data can be transferred abroad. We only use providers that offer appropriate protection.

6. How long we keep it

Order and delivery data: as long as needed for the order and the legal retention period for accounting records [e.g. 10 years]. Messages that did not lead to an order: [e.g. up to 12 months]. Cookie data: according to the Cookie Policy.

7. Your rights

You can ask us at any time to access, correct or delete your data, to object to its use, or to withdraw consent. Write to epice35morocco@gmail.com and we will answer within [30 days]. In Morocco you may also complain to the data protection authority, the CNDP (www.cndp.ma). If you are in the EU/EEA, you may complain to your local data protection authority.

8. Security

We use reasonable technical and organisational measures to protect your data. No internet transmission is completely secure, so we cannot guarantee absolute security.

9. Children

This website is not directed at children under 16, and we do not knowingly collect their data.

10. Changes

We may update this policy and will show the new date at the top.