Privacy Policy
1. Introduction
Welcome to Mediator Store (متجر الوسيط). We respect your privacy and are committed to protecting your personal data. This policy explains how we collect, use, and protect your data, in compliance with:
- The General Data Protection Regulation (GDPR) — because our operations transit through the European Union (hosting in France).
- Moroccan Law 09-08 on the protection of personal data — because our customers are in Morocco.
By using our website https://store.lotfi.ma, you agree to the practices described in this policy.
2. Who We Are
Mediator Store (متجر الوسيط) — Online store selling various products to customers in Morocco, with cash on delivery.
Legal Information:
- 📋 Legal Status: Auto-entrepreneur (Self-employed)
- 🆔 Unique Business ID: 00403017600042
- 💼 Tax ID (IF): 73333808
- 🆔 National ID (CNIE): 12404638
- 📅 Registration Date: August 28, 2026
| Item | Information |
|---|---|
| Owner | Lotfi (لطفي) |
| support@lotfi.ma | |
| Phone / Telegram | +212 693 016 974 |
| Website | https://store.lotfi.ma |
| Hosting | Scaleway (Paris, France) |
3. What Data Do We Collect?
3.1 Personal Data You Provide Voluntarily
When placing an order, we collect:
- Full name (first and last name)
- Phone number (to contact you about your order)
- Delivery address (street, city, postal code)
3.2 Data Collected Automatically
- IP address
- Browser type and version
- Operating system
- Pages visited
- Time and date of your visit
3.3 What We Do NOT Collect
- ❌ No electronic payment data (no credit card, no PayPal). Payment is cash on delivery only.
- ❌ No customer email address (only for admin).
- ❌ No tracking or advertising cookies.
4. How Do We Use Your Data?
We use your data only for:
| Purpose | Data Used |
|---|---|
| Order processing and delivery | Name, phone, address |
| Order communication | Phone, name |
| Admin notification via Telegram | Name, phone, address, order details |
| Site improvement and security | IP address, browser data |
| Legal compliance | Order invoices |
We never sell your data to third parties.
5. Third Parties
5.1 Telegram Bot API (notifications)
- Purpose: Notify admin of new orders
- Data shared: Name, phone, address, order details
- Policy: telegram.org/privacy
5.2 Scaleway (hosting)
- Purpose: Hosting the website and database
- Data: All data on Scaleway servers in Paris
5.3 Delivery carrier
- Purpose: Deliver the order to your address
- Data: Name, phone, address
6. Cookies
We do NOT use tracking or advertising cookies. Only essential cookies:
| Type | Purpose | Duration |
|---|---|---|
| Session cookie | Save shopping cart | Expires when browser closes |
| Session cookie | Admin login | Expires on logout |
7. Data Retention
| Data Type | Retention Period |
|---|---|
| Order data | 3 years (tax and accounting) |
| Admin login data | Until account deletion |
| Server logs (IP) | 12 months |
| Uncompleted cart | 7 days |
8. International Data Transfer
Your data is stored on Scaleway servers in Paris (France). This international transfer is governed by GDPR and Moroccan Law 09-08. We ensure it is protected by data processing agreements with Scaleway.
9. Your Rights
| Right | Explanation |
|---|---|
| Right of access | Know what we have about you |
| Right of rectification | Correct your data |
| Right to erasure | Delete your data |
| Right to object | Object to data processing |
| Right to data portability | Receive a readable copy |
| Right to withdraw consent | Withdraw your consent |
To file a complaint:
- CNIL (France): www.cnil.fr
- CNDP (Morocco): www.cndp.ma
10. Data Security
- ✅ HTTPS / SSL: encrypted communications
- ✅ Encrypted passwords (bcrypt)
- ✅ Secure sessions (httpOnly)
- ✅ Cloudflare WAF + anti-DDoS
- ✅ Daily backups
- ✅ Regular security updates
In case of a breach, we will notify you within 72 hours.
11. Children's Privacy
Our site is not directed to children under 16. If you are a parent and learn that your child has provided data, contact us immediately.
12. Links to Other Sites
Our site may contain external links (such as Telegram). We are not responsible for their privacy policies.
13. Changes to This Policy
We may update this policy. We will notify you via a prominent notice and update the date at the top.
14. Contact Us
| Method | Information |
|---|---|
| support@lotfi.ma | |
| Phone / Telegram | +212 693 016 974 |
We will respond within a maximum of 30 days.
Thank you for your trust in Mediator Store 🛒