Privacy Policy

Jemmal.ma (“Jemmal”, “we”, “us”) is a B2B wholesale marketplace operated by [legal entity name], with registered office at [registered address, Morocco], registered under [RC / ICE number]. We are the data controller for the personal data described in this policy. The processing of personal data has been declared to the National Commission for the Control of the Protection of Personal Data (CNDP) under reference [CNDP declaration / authorisation no.].

For any privacy question or to exercise your rights, contact us at [privacy@jemmal.ma].

• Account data: name, email, phone number, password (stored hashed), language preference.
• Seller / business data: shop name, business identifiers, address, and payout / wallet details.
• Order & transaction data: products, prices, delivery addresses, order and payment history (including cash-on-delivery).
• Communications: chat messages exchanged between buyers and sellers, and support requests.
• Images you upload: product photos, profile pictures, and search-by-image photos.
• Technical data: IP address, device and browser information, and cookies used for your session and platform security.
• Usage & analytics: pages viewed, products opened, searches, and actions like add-to-cart, using a random anonymous identifier stored on your device. We derive an approximate location (country/city) from your IP, which is stored only as a one-way hash — we never keep your raw IP address in our analytics. This helps us understand how the store is used and improve it.

We process your data on the basis of your consent and the performance of our contract with you, in order to: create and manage your account; operate the marketplace (listings, orders, delivery, payments / cash-on-delivery, seller wallet); enable buyer–seller chat; prevent fraud and keep the platform secure; provide customer support; and comply with our legal obligations.

Marketing messages, if any, are sent only with your separate consent, and you can withdraw that consent at any time.

• The other party to a transaction — e.g. a buyer’s delivery details are shared with the relevant seller (and vice-versa) strictly to fulfil the order.
• Delivery / carrier partners, to ship orders.
• Payment and infrastructure providers acting on our behalf as processors.
• Analytics providers (e.g. Google Analytics) that help us measure aggregate usage of the store.
• Public authorities, where we are legally required to do so.

We do not sell your personal data.

Your data is hosted on servers serving Morocco. Where a provider processes data outside Morocco, we do so only with the safeguards and prior CNDP authorisation required by Law 09-08.

We keep your account data for as long as your account is active and, afterwards, for the period required to meet our legal, accounting and dispute-resolution obligations, after which it is deleted or anonymised.

We apply technical and organisational measures — including encryption in transit, hashed passwords and access controls — to protect your personal data against loss, misuse and unauthorised access.

Under Law 09-08 you have the right to information, access, rectification, and objection (including objection to marketing), and to have inaccurate or unlawfully processed data corrected or deleted. To exercise these rights, contact us at [privacy@jemmal.ma]. You also have the right to lodge a complaint with the CNDP (www.cndp.ma).

Jemmal.ma is intended for business users and is not directed at children under 16. We do not knowingly collect personal data from children.

We use strictly necessary cookies for login sessions and security. If we add analytics or marketing cookies, we will request your consent and describe them here.

We may update this policy. The “last updated” date above will change, and we will notify you of any material changes.