0

Privacy Policy & Personal Data Protection – SHOPIN

Preamble

This Privacy Policy aims to inform users of the SHOPIN platform about how their personal data is collected, processed, used, and protected.

Protecting your personal data is a priority for SHOPIN, which commits to complying with Moroccan law, in particular:
— Law No. 09-08 on the protection of individuals with regard to the processing of personal data
— The guidelines of the CNDP (National Commission for the Control of Personal Data Protection)

Data Controller: SHOPIN — Sole trader — 21 Rue Bab al Irfane, Résidence Soukaina, Casablanca — Email: contact@shopin.ma — Tel: 0607535457 — Tax ID: 66972656.

1. Definitions

Personal data: any information relating to an identified or identifiable natural person.
Processing: any operation applied to personal data (collection, recording, storage, modification, extraction, use, communication, erasure, destruction).
User: any person using the Platform.
Data Controller: the operator of the Platform.
Processor: any person processing data on behalf of the data controller.

2. Data Collected

2.1 Directly Collected Data

For all users: full name, email address, phone number, full postal address, password (encrypted), account creation date, login history.

For sellers (additional data): bank details (RIB), information on items listed for sale (photos, descriptions, prices), sales history.

For buyers (additional data): order history, delivery addresses, purchase preferences.

2.2 Automatically Collected Data

While browsing the Platform, certain data is collected automatically: IP address, browser type and version, operating system, pages visited and duration, date and time of connection, approximate location data, and cookies and trackers (see Article 6).

3. Purposes of Processing

Your personal data is collected and processed for the following purposes:

3.1 Primary Purposes

Account management: creation, authentication, profile management.
Transaction execution: order processing, payment management, delivery coordination.
Matchmaking: providing a space for sellers to list items and buyers to purchase them. Transactions are conducted under a pseudonym to preserve the confidentiality of identities.
Financial management: payment collection, transfer of funds to sellers, commission deduction.
Customer service: responding to inquiries, complaints, and disputes.

3.2 Secondary Purposes

Platform improvement: statistical analysis of user behavior, user experience optimization.
Legal obligations: compliance with tax, accounting, and regulatory requirements.

4. Data Recipients

4.1 Authorized Personnel

Your data is accessible internally only to authorized personnel within the scope of their duties: customer service, technical department, and accounting and finance department.

4.2 Partners and Service Providers

Your data may be shared with the following third parties, strictly limited to what is necessary for the performance of their services:
— Carriers: name, surname, delivery address, phone number.
— Web host: Nindohost (Morocco).
— Analytics and statistics tools.
— Public authorities: upon legal request (judicial, tax, customs authorities, etc.).

4.3 No Sale of Data

SHOPIN never sells, rents, or trades your personal data to third parties for marketing purposes.

5. Data Security

5.1 Technical and Organizational Measures

SHOPIN implements all appropriate measures to protect your data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access. These measures include: password encryption (hashing), secure transmissions (HTTPS/SSL), limited data access (authentication, permissions), regular backups, firewalls and antivirus software, and regular security testing.

5.2 Encryption of Sensitive Data

Bank details (RIB) and passwords are encrypted and are never stored in plain text.

5.3 User Obligations

Users are responsible for the confidentiality of their password. They must: choose a strong password, not share it with third parties, change it regularly, and immediately report any unauthorized use of their account.

6. Cookies & Trackers

6.1 What is a Cookie?

A cookie is a small text file placed on your device (computer, smartphone, tablet) when you visit a website. It stores information related to your browsing session.

6.2 Types of Cookies Used

Strictly necessary cookies (no consent required): session and authentication cookies, security cookies, shopping cart cookies.

Functional and performance cookies (consent required): user preference cookies, audience analytics cookies (Google Analytics, etc.).

Advertising and targeting cookies (consent required): social media cookies, personalized advertising cookies.

6.3 Managing Cookies

On your first visit, a banner informs you of cookies and requests your consent for non-essential cookies. You can at any time: update your preferences via Platform settings, configure your browser to reject cookies, or delete already-stored cookies.

Note: Refusing certain cookies may limit access to some Platform features.

7. Your Rights

In accordance with Law 09-08, you have the following rights over your personal data:

7.1 Right of Access

You have the right to obtain: confirmation that your data is being processed, access to your personal data, and a copy of your data.

7.2 Right of Rectification

You may request the correction of inaccurate or incomplete data.

7.3 Right of Erasure

You may request the deletion of your data in the following cases: the data is no longer necessary for the stated purposes, you withdraw your consent, you object to the processing, or the data has been unlawfully processed.

Exception: The Platform may refuse deletion if it is required to retain certain data to comply with legal obligations (accounting, tax records, etc.).

7.4 Right to Object

You may object to the processing of your data based on your particular situation, as well as at any time to processing for commercial prospecting or profiling purposes.

7.5 Right to Restriction of Processing

You may request restriction of processing in certain cases: while the accuracy of data is being verified, if processing is unlawful but you do not wish for erasure, or if you need the data to establish, exercise, or defend legal rights.

7.6 Exercising Your Rights

To exercise your rights, send an email to contact@shopin.ma.

Response time: SHOPIN commits to responding within a maximum of 30 days from receipt of your request.

8. Changes to the Privacy Policy

This Privacy Policy may be modified at any time to reflect regulatory changes, new Platform features, or improvements to our practices.

Any substantial change will be notified by email and/or Platform notification at least 15 days before taking effect.

The current version is always accessible on the Platform with the date of last update.

Continued use of the Platform after notification constitutes acceptance of the updated Privacy Policy.

9. CNDP Declaration

In accordance with Law 09-08, the personal data processing carried out by SHOPIN has been declared to the CNDP under n° D-743/2026.

Last updated: 16/06/2026

Newsletter

Receive our latest offers and news