Privacy Policy
Last updated:
REBRICK, headquartered in Casablanca, Maroc, takes the protection of your personal data seriously. This policy explains what data we collect, why we collect it, how we use it and your rights, in compliance with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data and its implementing regulations.
1. Data controller
The data controller for the website rebrick.ma is REBRICK, Casablanca, Maroc. You can contact us at rebrick.contact@gmail.com or +212 688-165243.
2. Data we collect
We collect the data you provide voluntarily through:
• the contact form (name, email, phone, message),
• the order form (name, phone, optional email, items ordered, optional notes),
• the newsletter, if you subscribe.
We also collect technical data automatically: IP address, browser, pages visited, referrer, time spent. These are aggregated for analytics purposes.
3. Purposes of processing
Your data is processed only for the following purposes:
• Responding to your contact or quote requests,
• Processing and following up on your orders,
• Sending order confirmations and operational emails,
• Sending commercial communications only with your prior consent,
• Producing anonymous statistics to improve the site,
• Complying with our legal and regulatory obligations.
4. Legal basis
Processing is based on (i) the performance of pre-contractual or contractual measures (order processing), (ii) our legitimate interest (site security and analytics), (iii) your consent (newsletter, non-essential cookies), and (iv) compliance with legal obligations (accounting, tax).
5. Recipients and transfers
Your data is accessible only to authorized REBRICK staff and to our trusted processors (hosting, email delivery via Resend, WhatsApp Business for messaging). When data is transferred outside Morocco, we ensure an adequate level of protection through appropriate safeguards, in accordance with Articles 43 and 44 of Law 09-08.
6. Retention periods
• Contact data: 3 years after the last interaction.
• Order data: 10 years (accounting obligation).
• Cookies and analytics: 13 months maximum.
After these periods, data is deleted or anonymized.
7. Your rights
Under Law 09-08, you have the right to access, rectify, update, delete and object to the processing of your personal data. You can exercise these rights by writing to rebrick.contact@gmail.com, including a proof of identity. We will respond within 30 days. You also have the right to lodge a complaint with the CNDP (Commission Nationale de contrôle de la Protection des Données à caractère Personnel), accessible at www.cndp.ma.
8. Security
We implement appropriate technical and organizational measures to protect your data: encryption in transit (HTTPS), access controls, regular backups, secure password storage. No system is 100% secure, but we strive to minimize risks.
9. Updates
This policy may be updated to reflect legal or technical changes. The current version is identified by its last-updated date at the top of the page.
10. Contact
For any question regarding this policy or your data, please contact us at rebrick.contact@gmail.com.