Privacy policy

Who handles your information

ShopLbas handles information collected through shoplbas.ma for the purposes described here. For questions about your personal data or to exercise your rights, contact contact@shoplbas.ma.

Privacy contact

contact@shoplbas.ma

Information collected

The order form collects your name, phone number, city, full delivery address, product, colour, size, quantity and consent acknowledgement. The private order sheet contains the selected colour’s image URL, colour, size, name, city, address, phone, total price and fulfilment status. Cloudflare also keeps a private request reference, a payload hash, request time, item selection and policy version for reliable processing. IP addresses are used temporarily for abuse controls. Do not submit bank-card data, identity documents or sensitive personal information.

Purpose and form choices

We use order information to receive and confirm cash-on-delivery requests, arrange delivery, provide support and handle applicable obligations. Required delivery fields are necessary for the request. The order checkbox does not subscribe you to marketing. Optional Meta advertising tracking is controlled separately through Privacy choices; browsing and ordering remain available when it is refused. No online card payment is taken.

Recipients and location

ShopLbas and its authorized operators access the private order sheet. Cloudflare Workers processes site/form requests and maintains private retry state. Google Sheets stores orders under a personal Google account. The sheet is not public. Necessary delivery information may be shared with the delivery provider. Optional advertising information is shared with Meta only as described below.

Google and Cloudflare operate international infrastructure; processing may take place outside Morocco. No Morocco-only storage location or single processing country is promised. Applicable Moroccan data-protection and international-transfer requirements continue to apply. Contact contact@shoplbas.ma about these arrangements or your rights.

Official reference: CNDP — Transfert de données à l’étranger ↗

Retention

ShopLbas uses a seven-day retention period for working copies: test requests from creation; unconfirmed requests from last customer activity; cancelled or refused orders from closure of any delivery issue; completed orders from delivery or later complaint resolution; and unrelated support enquiries from closure. ShopLbas-controlled disposable exports and backups follow the same deadline, subject to necessary legal archives and dispute holds.

The seven-day rule does not shorten mandatory legal retention. Commercial correspondence and accounting/supporting records that must be retained are archived separately for the applicable ten-year period. Relevant evidence may also be kept while legally necessary for a dispute or preservation obligation. Only the required records are kept for these purposes, rather than for marketing. Provider-managed history, logs and backups follow the applicable provider arrangements; immediate erasure from every system is not promised.

Retention and deletion are managed by ShopLbas. They are not an instant automatic deletion promise. Provider-managed version history, recovery copies and backups follow the providers’ applicable schedules. Contact contact@shoplbas.ma to request access, correction or deletion where legally available.

Official reference: Loi 9-88 — Article 22 ↗

Your rights and requests

Under the applicable Moroccan data-protection framework, you may request access and correction, object on legitimate grounds and request deletion where legally available. Contact contact@shoplbas.ma with enough information to identify your request, without excessive identity documents. You may also contact the CNDP. Records that must lawfully be kept are subject to the applicable retention rules.

Official reference: CNDP — FAQ ↗

Security and changes

Orders are not listed publicly. Access to Google Sheets is restricted to authorized accounts. The form validates selections and quantities, computes prices server-side, limits request sizes and abusive submissions, and protects retries against duplicate rows. Responses are private and not cached. Keep your order reference private. No security measure guarantees the absence of every incident. Material changes to these processing arrangements will be reflected in this policy.

Optional Meta advertising tracking

After you allow advertising tracking, Meta Pixel 1806660390580270 loads from Meta. It reports page views, the product viewed and a Lead when an order request is successfully saved. The Lead describes a request, not an accepted sale or payment. The integration sends product/variant identifiers, quantity and a reference for duplicate protection; it does not intentionally send the form’s name, phone or street address. Meta also receives technical browser, URL/referrer, cookie and network information such as the IP address through its service.

These signals support advertising measurement and personalisation under Meta’s arrangements and may be processed internationally. No Meta tracking request or fallback image is loaded by this integration before you allow it. Privacy choices in the footer lets you refuse or withdraw; withdrawal stops future events from this integration and attempts to remove first-party _fbp/_fbc cookies. It cannot recall information already received by Meta or delete Meta-domain cookies. Your choice is saved on this device for up to seven days; provider-held data follows provider retention arrangements.

Official reference: Meta — Privacy Policy ↗