Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

• Platform: inStoore
• Email: contact@instoore.ma
• WhatsApp: +212 600 000 000

Each independent store on inStoore is also a data controller for the personal data it receives to fulfill your order.

2. Data We Collect

We collect the following personal data when you use the platform:

3. Legal Basis for Processing

We process your personal data on the following legal bases under Law No. 09-08:

• Contract fulfillment: Processing is necessary to perform the contract for the sale of products (process and deliver your order).
• Consent: Where you voluntarily provide your email for order updates or submit a product review, you consent to the processing of that data.
• Legal obligation: We may retain certain data to comply with Moroccan legal and regulatory obligations (tax, commercial records).
• Legitimate interest: We may process data for platform security, fraud prevention, and dispute resolution.

4. How We Use Your Data

Your personal data is used exclusively for the following purposes:

• Processing and confirming your orders
• Communicating with you regarding your order (confirmation, delivery updates, issues)
• Coordinating delivery with our carriers
• Sharing your data with the relevant store so they can prepare and ship your order
• Handling returns, refunds, and customer service inquiries
• Improving our platform and services
• Complying with legal obligations

5. Data Sharing & Recipients

We share your personal data only as necessary to fulfill your order:

• Stores: The independent store selling the product receives your name, phone number, and delivery address to prepare and ship your order.
• Delivery carriers: Your name, phone number, and address are shared with the carrier responsible for delivering your order.
• Service providers: We may use third-party services for email delivery and platform hosting. These providers are contractually bound to protect your data.

We do not sell, rent, or trade your personal data to third parties for marketing purposes. We do not share your data with any party not directly involved in processing or delivering your order, except as required by law.

6. Data Retention

We retain your personal data for the following periods:

• Order data: Retained for the duration required for order fulfillment plus 5 years to comply with Moroccan commercial and tax record-keeping obligations.
• Contact form inquiries: Retained for 1 year after the inquiry is resolved.
• Product reviews: Retained as long as the review remains published on the platform.
• Store owner data: Retained for the duration of the store's activity on the platform plus 5 years.

After the retention period, your personal data is securely deleted or anonymized.

7. Payment Data

inStoore uses Cash on Delivery (COD) as its sole payment method. We do not collect, process, or store any payment card data, bank account numbers, or electronic payment information. Payment is collected in cash by the delivery carrier at the time of delivery.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including:

• SSL/TLS encryption for all data transmitted between your browser and our platform
• Secure storage of data on protected servers
• Restricted access to personal data to authorized personnel only
• Regular security assessments

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

9. Your Rights Under Law No. 09-08

Under Moroccan Law No. 09-08 on the Protection of Personal Data, you have the following rights:

• Right of access: You may request a copy of all personal data we hold about you.
• Right to rectification: You may request correction of any inaccurate or incomplete data.
• Right to deletion (right to be forgotten): You may request deletion of your personal data, subject to legal retention obligations.
• Right to object: You may object to the processing of your data for legitimate reasons.
• Right to restriction: You may request restriction of processing under certain circumstances.
• Right to data portability: You may request a copy of your data in a structured, commonly used format.

To exercise any of these rights, contact us at contact@instoore.ma. We will respond to your request within 30 days as provided by law.

If you are not satisfied with our response, you have the right to lodge a complaint with the Commission Nationale de Contrôle de la Protection des Données à Caractère Personnel (CNDP), the Moroccan data protection authority.

10. Cookies

inStoore uses essential cookies and similar technologies to ensure the proper functioning of the platform, including session management and cart functionality. We do not use tracking cookies for advertising or analytics purposes without your consent.

You may configure your browser to refuse cookies, but this may affect the functionality of the platform (e.g., the shopping cart may not work correctly).

11. Third-Party Links

The platform may contain links to third-party websites (WhatsApp, social media). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal data.

12. Updates to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

13. Contact

For any questions, concerns, or requests regarding your personal data or this privacy policy, please contact us:

• Email: contact@instoore.ma
• WhatsApp: +212 600 000 000
• Data Protection Authority (CNDP): www.cndp.ma