Privacy policy

Last updated: [22.08.2024]


I. General Information


This Privacy Policy describes how Legacy of Morocco SRL, with its registered office in Borșa, Maramureș, Forestierilor 19/A, tax identification code 45772787 (“Company,” “we,” or “our”), collects, uses, and discloses your personal information when you visit, use our services, or make a purchase through https://www.legacyofmorocco.ro (the “Site”) or otherwise communicate with us. For the purposes of this Privacy Policy, “you” and “your” mean you as a user of the Site, whether you are a customer, a visitor to the Site, or another individual whose information we have collected pursuant to this Privacy Policy.


Please read this Privacy Policy carefully to understand how we process your personal data and to understand the rights you have as a data subject.

 

 

II. Changes to this Privacy Policy


We may update this Privacy Policy from time to time, including to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the “Last updated” date, and take any other steps required by applicable law.

 

 

III. How We Collect and Use Your Personal Information


To provide you with services, we collect personal information about you from various sources, as described below. The information we collect and use varies depending on how you interact with us.


In addition to the specific uses set out below, we may use the information we collect about you to communicate with you, comply with any applicable legal obligations, enforce the applicable terms and conditions, and protect or defend our services and rights, as well as the rights of our users or others.

 


IV. What Personal Data We Collect


The categories of personal data we collect about you depend on how you interact with our Site and how you use our services. When we use the term “personal information” or “personal data,” we refer to information that identifies, relates to, describes, or can be associated with you, directly or indirectly.


The following sections describe the categories and specific types of personal information we collect:


a. Information We Collect Directly from You:

The information you provide directly through our Services may include:


(I) Identification data: first name, last name.

(II) Contact data: phone number, email address.

(III) Order information: billing address, shipping address, payment confirmation.

(IV) Account information: customer code, order history, purchased products or items placed in cart, your communication preferences.

(V) Financial information: value of orders placed on the Site, payment history, IBAN account number and the bank where you have the account.

(VI) Customer support information: any information you choose to include in communications with us, such as when sending a message or complaint by email, your interactions with us, or any other requests made to us.


b. Information We Collect Through Cookies

We also automatically collect certain information about your interaction with the Site (“Usage Data”). To do this, we may use cookies, pixels, and similar technologies (“Cookies”). Usage Data may include information about how you access and use our Site and your account, including device information, browser information, your network connection, your IP address, and other information related to your interaction with the Site.


For details about the cookies we use, please see the Cookies section of this policy.


c. Information We Obtain from Third Parties

We may obtain information about you from third parties, including vendors and service providers that may collect information on our behalf, such as:


(I) Companies that host our Site and services, such as Shopify.

(II) Our payment processors, who collect payment information (e.g., bank account, credit or debit card information, billing address) to process your payment, fulfill your orders, and provide you with the products or services you requested, in order to fulfill our contract with you.

(III) When you visit our Site, open or click on emails from us, or interact with our services or ads, we or third parties we work with may automatically collect certain Cookie data.


Any information we obtain from third parties will be processed in accordance with this Privacy Policy. We are not responsible for the data processing practices or policies of any third parties. For more information, see the section below on Third-Party Websites and Links.

 

 

V. How We Use Your Personal Information


If you are a customer, we process your data for the following purposes:

 

  • Purpose: Provision of products and services. We use your personal information in the process of purchasing products and services on our Site and to perform the contract concluded with you, including processing your payments, receiving and shipping your orders, sending you notifications related to your account and shopping status, facilitating returns and exchanges, or other transactions.

    Legal basis: contract performance – Art. 6(b) GDPR.

  • Purpose: Marketing and advertising. We use your personal data for marketing and promotional purposes, such as sending you marketing communications and promotional messages by email and displaying ads for our products or services online.

    Legal basis: your consent – Art. 6(a) GDPR.

  • Purpose: Improving the Site or our services. This may include using your personal information to better customize our services and advertising on our Site and on other websites.

    Legal basis: our legitimate interest in analyzing how we can improve our services and products – Art. 6(f) GDPR.

  • Purpose: Security and fraud prevention. We use your personal information to detect, investigate, or act upon possible fraudulent, illegal, or malicious activity. If you choose to use the Site and register an account, you are responsible for keeping your login details safe. We strongly advise you not to share your username, password, or other access credentials with anyone. If you believe your account has been compromised, please contact us immediately.

    Legal basis: our legitimate interest in defending our rights and interests in case of fraud/disputes with customers, or to provide data to public authorities/courts – Art. 6(f) GDPR.

  • Purpose: Managing customer relationships and communications. We use your personal information to provide customer support and to improve our services and products, and to respond to any complaints or requests.

    Legal basis: our legitimate interest in being responsive to your needs and maintaining our business relationship with you – Art. 6(f) GDPR.

 

 


VI. How We Disclose Your Personal Information


In certain circumstances, we may disclose your personal information to third parties for legitimate purposes. Such circumstances may include:

 

  • With service providers or other third parties acting on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, fulfillment, and shipping).

  • With business and marketing partners, including Shopify, to provide you with services and deliver advertisements. Our business and marketing partners will use your data in accordance with their own privacy policies.

  • When you ask us to direct, disclose, or otherwise consent to sharing certain data with third parties, such as to ship products or when using social media widgets or login integrations.

  • With our affiliates or within our corporate group, in our legitimate interest of running a successful business.

  • In connection with a business transaction, such as a merger or bankruptcy, to comply with any applicable legal obligations (including responding to subpoenas, search warrants, and similar requests), enforcing any applicable terms, and protecting or defending our services, our rights, and the rights of our users or others.

 


We do not use or disclose sensitive personal information to infer characteristics about you.

 

 

VII. User-Generated Content


Our Services may allow you to post product reviews or other user-generated content. If you choose to submit user-generated content in any public area of the Services, this content will be public and accessible to anyone.


We do not control who has access to the information you choose to make available to others, and we cannot ensure those parties will respect your privacy or keep it secure. We are not responsible for the privacy or security of any information you make public or for the accuracy, use, or misuse of any information you disclose or receive from third parties.

 

 

VIII. Third-Party Websites and Links


Our Site may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated with or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide in public or semi-public places, including information shared on third-party social media platforms, may also be visible to other users of the Site and/or those third-party platforms without limitation. Including such links does not imply our endorsement of the content on those platforms or their owners/operators.

 

 

IX. Children’s Data


Our Services are not intended for use by children, and we do not knowingly collect personal information about children. If you are a parent or guardian of a child who has provided us with their personal data, you may contact us using the details below to request its deletion.


As of the date of this Privacy Policy, we have no actual knowledge that we process or disclose (as defined by applicable law) personal information of individuals under 16 years old.

 

 

X. Security and Retention of Your Information


Please note that no security measure is perfect or impenetrable, and we cannot guarantee “perfect security.” Additionally, any information you send us may not be secure during transit. We recommend that you do not use insecure channels to communicate sensitive or confidential information.


The length of time we retain your personal information depends on various factors, such as whether we need the information to maintain your account, provide services or access to the Site, comply with legal obligations, resolve disputes, or enforce other applicable contracts and policies.

 

 

XI. Your Rights and Choices


As a data subject, you have the rights listed below with regard to your personal data. However, these rights are not absolute, may apply only in certain circumstances, and in some cases, we may lawfully deny your request.

 

  • Right of access. You have the right to request access to the personal data we hold about you, including details about how we use and share it.

  • Right to deletion. In certain circumstances, you have the right to request that we delete the personal data we hold about you.

  • Right to rectification. You have the right to ask us to correct inaccurate personal data we hold about you.

  • Right to data portability. You have the right to receive a copy of your personal data and to request that we transfer it to a third party in certain circumstances and with certain exceptions.

  • Restriction of processing. You have the right to ask us to stop or restrict the processing of your personal data.

  • Right to object. You may object to data processing in certain cases, such as when we process your data based on our legitimate interest; note that we may continue processing if we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.

  • Withdrawal of consent. Where we rely on your consent to process your personal data, you have the right to withdraw that consent. For promotional emails, you can unsubscribe at any time by using the unsubscribe link in our emails. If you unsubscribe, we will still send you non-promotional emails, such as those about your account or orders.

 


You may exercise any of these rights where indicated on our Site or by contacting us using the contact information below.


We will not discriminate against you for exercising any of your rights. We may need to collect information from you to verify your identity, such as your email address or account details, before responding to your request. As permitted by law, you may designate an authorized agent to make requests on your behalf. Before accepting such a request from an agent, we will require proof that you authorized the agent and may ask you to verify your identity directly with us. We will respond to your request promptly as required by applicable law.

 

 

XII. Complaints


If you have complaints regarding how we process your personal data, please contact us using the contact details below. If you are not satisfied with our response or believe your rights have been violated, you have the right to lodge a complaint with the data protection authority: the National Supervisory Authority for Personal Data Processing in Romania.

 

 

XIII. International Data Transfers


Please note that we may transfer, store, and process your personal data outside your country, including in the United States.


As a rule, we rely on recognized transfer mechanisms, such as the European Commission’s standard contractual clauses or any equivalent contracts issued by the relevant UK authority, unless the data transfer is to a country that has been determined to provide an adequate level of protection.

 

 

XIV. Contact


If you have questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of your rights, please email us at contact@legacyofmorocco.ro.

 

 

XV. Cookies


Like many websites, we use cookies on our Site. For specific information about the cookies we use related to our Shopify-powered store, see https://www.shopify.com/legal/cookies. We use cookies to power and improve our Site and services (including remembering your actions and preferences), perform analytics, and better understand user interaction with the Site (in our legitimate interest to manage, improve, and optimize the Site and services).


We may also allow third parties and service providers to use cookies on our Site to better tailor services, products, and advertising on our Site and other websites. For example, we use Shopify advertising services, such as Shopify Audiences, to help personalize the ads you see on third-party sites. To restrict Shopify merchants from using your personal information for such advertising services, visit https://privacy.shopify.com/en.


Most browsers automatically accept cookies by default, but you can choose to set your browser to delete or reject cookies through browser settings. Please note that deleting or blocking cookies may negatively affect your user experience and cause some Services, including certain features and functionalities, to function improperly or become unavailable. Additionally, blocking cookies may not completely prevent how we share information with third parties, such as our advertising partners.