GDPR COMPLIANCE (EU & UK CUSTOMERS) 🇪🇺
Last updated: 18-10-2026
This page adds information for customers in the European Union and the United Kingdom, where the General Data Protection Regulation (EU GDPR and UK GDPR) applies. Our full Privacy Policy applies to customers in every country.
1. DATA CONTROLLER
Cooperative TORATH BOUJAD (تعاونية تراث بوجعد), managed by Saadi Badreddine
550 Lot El Kaoutar, 25060 Bejaad, Morocco · Registration No.: ____________
📧 info@marrakeshshop.com
2. LEGAL BASIS (ART. 6 GDPR)
- Orders, delivery, customer service, returns and refunds: performance of the contract.
- Customs, accounting and tax: legal obligation.
- Newsletter, promotions and non-essential cookies: your consent.
- Security and fraud prevention: legitimate interest.
3. RECIPIENTS
Carriers and customs authorities, payment service providers, our website host (Shopify) and public authorities when required by law. The full list is in our Privacy Policy.
4. TRANSFERS OUTSIDE THE EU/UK
Your rug is prepared and shipped from Morocco, so your order data is processed there. This is necessary to perform your contract (art. 49(1)(b) GDPR). Other transfers rely on appropriate safeguards such as Standard Contractual Clauses.
5. RETENTION
Order and invoice data as long as accounting and tax law requires; customer account until deletion; marketing until you withdraw consent; cookies up to 13 months.
6. YOUR GDPR RIGHTS
Access · Rectification · Erasure · Restriction · Objection · Portability · Withdrawal of consent at any time. Email info@marrakeshshop.com; we reply within one month. You may also complain to your data protection authority (for example the AEPD in Spain, the CNIL in France, or the ICO in the UK).