Privacy Policy

Last updated: June 2026

At Smartora, we take your privacy seriously. This policy explains what personal data we collect, why we collect it, how we use it, and what rights you have. We are committed to full compliance with the General Data Protection Regulation (GDPR).

1. Who We Are

SMARTORA
Website: smartora-17.myshopify.com
Contact: ecommerce20262030@gmail.com
Based in: Morocco

Smartora is the data controller responsible for your personal information collected through this website.

2. What Data We Collect

When you browse or make a purchase on our store, we may collect the following personal data:

Identity data: first name, last name
Contact data: email address, phone number
Delivery data: shipping address, billing address
Payment data: payment method details (processed securely by PayPal — Smartora does not store card information)
Technical data: IP address, browser type, pages visited, cookies
Transaction data: order history, products purchased

3. Why We Collect Your Data

We collect and process your personal data for the following purposes:

Order processing: to confirm, fulfill, and deliver your orders
Customer support: to respond to your questions and resolve issues
Legal compliance: to meet our legal and tax obligations
Marketing (with consent): to send you promotional emails and product updates — only if you have opted in
Site improvement: to analyze traffic and improve our store experience

We rely on the following legal bases under GDPR:

Contract performance — to process and deliver your orders
Legal obligation — to comply with applicable laws
Legitimate interest — to improve our services and prevent fraud
Consent — for marketing communications (you can withdraw at any time)

4. How We Share Your Data

We do not sell, rent, or trade your personal data to third parties. We may share your data only with:

Shopify Inc. — our e-commerce platform provider (data processed under Shopify’s privacy policy)
PayPal — our payment processor (data processed under PayPal’s privacy policy)
Shipping carriers — to deliver your orders (name and address only)
Legal authorities — if required by law

All third-party providers are contractually required to protect your data and use it only for the specified purpose.

5. Cookies

Our website uses cookies to improve your browsing experience, analyze traffic, and deliver relevant advertising. You can manage your cookie preferences at any time. For full details, please read our Cookie Policy.

6. Data Retention

We retain your personal data only for as long as necessary:

Order data: 5 years (legal and tax requirements)
Marketing data: until you unsubscribe or withdraw consent
Technical/analytics data: up to 26 months

7. Your Rights Under GDPR

As a data subject, you have the following rights:

🔍 Right of access — request a copy of the data we hold about you
✏️ Right of rectification — correct inaccurate or incomplete data
🗑️ Right of erasure — request deletion of your personal data (“right to be forgotten”)
⏸️ Right to restriction — limit how we process your data
📦 Right to data portability — receive your data in a structured, machine-readable format
🚫 Right to object — object to processing based on legitimate interest or for direct marketing
🗓️ Right to withdraw consent — withdraw marketing consent at any time without affecting prior processing

To exercise any of these rights, contact us at: ecommerce20262030@gmail.com
We will respond within 30 days.

8. Data Security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or disclosure. Our store is hosted on Shopify, which maintains industry-standard security including SSL encryption and PCI-DSS compliance for payment processing.

9. International Transfers

Your data may be processed outside Morocco by our service providers (Shopify in Canada, PayPal in the USA). These transfers are covered by appropriate safeguards including Standard Contractual Clauses (SCCs) as required under GDPR.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.

11. Contact Us

For any questions, requests, or concerns regarding your personal data:

SMARTORA
Email: ecommerce20262030@gmail.com
Website: smartora-17.myshopify.com

If you believe your data rights have not been respected, you have the right to lodge a complaint with your local data protection authority.