Privacy Policy

1. Who processes your data

The data controller is CasaViva, Tangier, Morocco (contact: contact@casaviva.ma, +212 661 783 964).

Your data is processed in accordance with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data. This processing has been declared to the CNDP.

2. Data we collect

We only collect what your order requires:

  • Identity and contact: first name, last name, phone number, email (optional)
  • Delivery: address and city (home delivery only), or the pickup store you chose
  • Order: products, amounts, payment method, optional note, tracking history
  • Customer account (optional): password (stored encrypted, never readable), preferred language

We collect no bank details: payment is made in cash. We use no audience-measurement or advertising tools.

3. Why we use it

  • To prepare, deliver or hand over your order in store
  • To keep you informed of your order's progress and let you track it
  • To manage your customer account if you create one
  • To answer your questions and handle a return or complaint
  • To meet our legal, accounting and tax obligations

This processing is based on fulfilling your order and on our legal obligations. We will not send you marketing offers without your prior consent.

4. Who can access it

  • Authorised CasaViva staff (each according to their role)
  • The delivery person, only for the information needed to deliver
  • Our technical providers, in particular the website host
  • Authorities, only when required by law

Your data is never sold or rented.

5. Hosting and transfer outside Morocco

The website and its database are hosted by Railway in a data centre located in the Netherlands (European Union), a country recognised as offering an adequate level of protection. This transfer is made within the framework of Law 09-08 and declared to the CNDP. All exchanges are encrypted (HTTPS).

6. How long we keep it

  • Orders: as long as needed to process them, then for the period required by our accounting and tax obligations
  • Customer account: until you delete it. You can delete it at any time from "My account"; your past orders are then kept without being linked to your account
  • Contact requests: as long as needed to answer you

7. Storage on your device

The website uses no advertising cookies or trackers. It only stores on your device (browser local storage) what it needs to work: your cart, your language, your light/dark theme and, if you are signed in, your session. You can clear them in your browser settings.

8. Security

Encrypted connection (HTTPS), encrypted passwords, staff access through personal accounts and roles, history of every change to an order (who, when).

9. Your rights

Under Law 09-08, you have the right to access, rectify, object (on legitimate grounds, and without reason for marketing) and delete your data.

To exercise them, write to contact@casaviva.ma or visit one of our stores, stating the phone number used for your orders. We will reply as soon as possible.

10. Complaint to the CNDP

If you believe your rights are not respected, you can contact the Moroccan National Commission for the Control of Personal Data Protection (CNDP):

  • Website: www.cndp.ma
  • Address: Angle Boulevard Annakhil et Avenue Mehdi Ben Barka, Hay Riad, Rabat

11. Changes

This policy may change (for example if we add app notifications or emails). The date of the last update is shown at the bottom of this page.

Last updated : May 2026