This English version is provided for convenience. The French version is the legally binding one.
Law 09-08
Privacy policy
Data controller
To7fa SARL (à compléter), Casablanca, Maroc. Contact: bonjour@to7fa.ma.
Data collected and purposes
Orders: name, phone, email (optional), delivery city and address, order contents — to prepare, deliver, invoice and follow up orders, and to contact you about them.
Made-to-measure requests: the same details, the project description and the file you send — to prepare a quote and make the piece.
Card payment: card details are entered directly with our payment provider (Stripe) and never pass through our servers.
Recipients
Your data is never sold or rented. It is shared only with the providers we need: the carrier (Ozon Express) for delivery, the payment provider (Stripe) for card payments, our email provider for order updates, and our host. [State the countries of these providers: a transfer outside Morocco may require CNDP authorisation.]
Retention
Invoices and accounting records are kept for the legal period [10 years — to confirm with your accountant]. Other order data is kept for [period to define]; files from made-to-measure requests that don't lead to an order are deleted after [period to define].
Cookies and local storage
The site uses no advertising and no audience measurement. Your cart is saved in your browser (local storage). One technical cookie remembers your language choice, and another is used only for the admin area. During a card payment, Stripe may set cookies needed for fraud prevention.
Your rights
Under law 09-08, you have the right to access, correct and object to the processing of your data. Write to us at bonjour@to7fa.ma. [CNDP declaration number: to be completed.]