Skip to content
WasslDesign

Privacy Policy

Last updated October 22, 2026

Draft for review. Confirm these statements match how you actually run the store, and check your obligations under Moroccan Law 09-08 (CNDP) and, for customers in the EU/UK, the GDPR. Replace every [OWNER: ...] item.

Data controller: [OWNER: legal business name, address in Morocco, contact email]. [OWNER: CNDP declaration/authorisation number, if applicable.]

What we collect

  • Orders: email address, optional name, order contents, amounts, PayPal transaction identifiers and the IP address used at checkout. PayPal processes your payment details; we do not receive card numbers.
  • Accounts: name, email address and a securely hashed password.
  • Downloads: date, time, IP address and browser type of each download, to protect purchases from abuse.
  • Newsletter (optional): your email address and the date you gave and confirmed consent.
  • Contact form: your name, email and message.

Why we use it

  • To deliver your purchase, send receipts and download links, and provide support (performance of a contract).
  • To prevent fraud and unauthorised downloads (legitimate interest).
  • To send the newsletter, only if you opted in (consent — you can withdraw it at any time).
  • To meet accounting and tax obligations (legal obligation).

Cookies

We use essential cookies only: a session cookie and a security (CSRF) cookie, required for the cart, checkout and sign-in. [OWNER: if you enable Google Analytics in Settings, describe it here and add a consent mechanism for EU/UK visitors.]

Sharing

  • PayPal — payment processing.
  • Hostinger — website and database hosting.
  • [OWNER: email provider, e.g. Hostinger Email or Google Workspace/Gmail] — sending transactional email.

We do not sell your personal data.

International transfers

Some providers may process data outside Morocco or your country. [OWNER: describe safeguards.]

Retention

Order records are kept for [OWNER: e.g. 10 years] for accounting purposes. Download logs are kept for [OWNER: e.g. 24 months]. Newsletter data is kept until you unsubscribe.

Your rights

You can ask to access, correct or delete your data, or object to its use, by writing to [OWNER: contact email]. You may also complain to the CNDP (Morocco) or your local data protection authority.

Security

Passwords are hashed, the site uses HTTPS, purchased files are stored privately and served only to authorised customers.