privacy policy

PRIVACY POLICY — BOTANILIA

Last updated: 17/09/2026

At BOTANILIA, we place great importance on protecting your privacy and the security of your personal data.

This Privacy Policy explains what personal data may be collected when you use our website, why we use it, with whom it may be shared, and what your rights are.

BOTANILIA is committed to processing personal data in accordance with Law No. 09-08 on the protection of individuals with regard to the processing of personal data, as well as the applicable provisions in Morocco.

1. Data Controller

The data controller responsible for the personal data collected through the BOTANILIA website is:

BOTANILIA

Responsible person: Hassane Abbad / Botanilia

Address: Dcheira El Jadida Inzegane

City: Agadir, Morocco

Email: info@botanilia.com

Website: www.botanilia.com

For any questions regarding the protection of your personal data or to exercise your rights, you may contact us using the contact details provided above.

2. Personal Data We May Collect

When you use our website and services, BOTANILIA may collect certain personal data, including:

  • First and last name;

  • Shipping and billing address;

  • Email address;

  • Telephone number;

  • Information relating to your orders;

  • Products ordered and purchase history;

  • Information provided to our customer service team;

  • Data required for delivery;

  • IP address and certain technical information relating to your browsing;

  • Communication preferences;

  • Data required for the security and proper functioning of the website.

We strive to limit the collection of personal data to what is necessary for the purposes for which it is used, in accordance with the principle of proportionality recognized by the CNDP.

3. Why Do We Use Your Data?

The personal data collected may be used for the following purposes:

Order Processing

  • To record and process your orders;

  • To confirm your order;

  • To prepare and ship your products;

  • To arrange delivery;

  • To contact you regarding your order.

Customer Service

  • To respond to your requests;

  • To handle complaints;

  • To provide after-sales service;

  • To provide you with information necessary regarding our products and services.

Website Operation

  • To ensure the operation and security of the website;

  • To improve the user experience;

  • To detect and prevent fraudulent or abusive use;

  • To analyze website usage where applicable.

Legal Obligations

Certain data may also be retained or disclosed when necessary to comply with legal, accounting, tax, or regulatory obligations.

4. Legal Basis for Processing

Depending on the circumstances, the processing of your personal data may be based on:

  • Your consent;

  • The necessity to perform your order or a contract to which you are a party;

  • Compliance with a legal obligation;

  • BOTANILIA's legitimate interests, where permitted by applicable regulations.

The CNDP specifies that consent is not required in certain situations, particularly when processing is necessary for the performance of a contract or compliance with a legal obligation.

5. Payments

When you make a purchase through BOTANILIA, the information required for payment may be processed by our payment service provider.

BOTANILIA does not retain your complete payment card details when these details are processed directly by an external payment service provider.

The exact payment procedures depend on the payment methods offered on our website.

To be completed according to your setup:

[Name of the payment service provider used by Botanilia]

6. Delivery and Service Providers

In order to provide you with our products and services, certain data may be shared with service providers strictly necessary for the fulfillment of your order, including:

  • Payment service providers;

  • Delivery companies and carriers;

  • Website hosting providers;

  • Technical and IT service providers;

  • Service providers involved in website maintenance or security;

  • Customer service providers, where necessary.

These service providers only have access to the data necessary to perform their respective services.

When BOTANILIA uses subcontractors or data processors, they must provide appropriate safeguards regarding the security and confidentiality of personal data.

7. International Data Transfers

Some technical service providers or services used by BOTANILIA may be located outside Morocco or may use IT infrastructure located abroad.

When personal data is hosted or transferred abroad, BOTANILIA will ensure that the necessary formalities are completed and that the measures required by applicable Moroccan regulations are implemented.

The CNDP specifies that the transfer of personal data abroad may be subject to a specific procedure.

8. Data Retention

BOTANILIA retains personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

As a general principle:

  • Order-related data: for the period necessary to manage the order and comply with applicable administrative, accounting, or legal obligations;

  • Customer service data: for the period necessary to process the request and, where justified, for the period necessary to maintain the customer relationship;

  • Marketing data: until consent is withdrawn or in accordance with applicable retention periods;

  • Technical data and cookies: according to their purpose and applicable retention period.

BOTANILIA's policy is not to retain personal data for longer than necessary.

9. Newsletter and Marketing Communications

If you choose to subscribe to the BOTANILIA newsletter, your email address may be used to send you, in particular:

  • BOTANILIA news and updates;

  • Promotional offers;

  • Product launches;

  • Tips and content related to the world of natural beauty;

  • Brand news.

Where consent is required, it will be obtained in a clear manner.

You may unsubscribe from our marketing communications at any time by using the unsubscribe link provided in our emails or by contacting us directly.

The CNDP reminds businesses that direct marketing is regulated and that recipients must be able to object free of charge to receiving commercial communications.

10. Cookies

The BOTANILIA website may use cookies or similar technologies in order to:

  • Ensure the proper functioning of the website;

  • Remember certain preferences;

  • Measure website traffic and improve the website;

  • Ensure security;

  • Where applicable, provide certain personalized features or communications.

When cookies involving personal data require consent, consent will be requested in accordance with the applicable rules.

You may also manage your cookie preferences through the settings provided for this purpose on our website.

The CNDP indicates that a website using cookies involving personal data must inform users about their purposes and obtain consent whenever required.

11. Data Security

BOTANILIA implements reasonable and appropriate technical and organizational measures to protect personal data against, in particular:

  • Unauthorized access;

  • Loss;

  • Destruction;

  • Alteration;

  • Unauthorized disclosure;

  • Fraudulent use.

Access to personal data is limited to individuals and service providers who need such access to perform their duties.

The CNDP notably recommends implementing physical and logical security measures and restricting access to authorized individuals.

12. Your Rights

In accordance with applicable Moroccan regulations, you have, subject to the conditions provided by law, a right of access and rectification regarding your personal data, as well as a right to object on legitimate grounds.

You may also exercise the rights applicable to your situation regarding the use of your data for marketing purposes.

To exercise your rights, you may contact us at:

Email: info@botanilia.com

Your request must enable BOTANILIA to reasonably identify the data concerned and the request being made.

The CNDP confirms, in particular, the rights of access, rectification, and objection provided for under Law No. 09-08.

13. Children's Data

The BOTANILIA website is not intended to intentionally collect personal data relating to minors where such data is not necessary to provide our services.

If you believe that a minor has provided us with personal data inappropriately, you may contact us so that we can review the situation.

14. Links to External Websites

Our website may contain links to external websites or services.

BOTANILIA is not responsible for the privacy practices applied by these external websites or services. We encourage you to review their own privacy policies before providing them with any personal data.

15. Changes to This Privacy Policy

BOTANILIA may modify this Privacy Policy to reflect changes to its services, practices, or applicable regulations.

The most recent version will always be published on this page together with its update date.

Last updated: [DATE]

16. Contact

For any questions regarding the protection of your personal data or the exercise of your rights, you may contact BOTANILIA:

BOTANILIA

Email: info@botanilia.com

Address: Dcheira El Jadida Inzegane

City: Agadir, Morocco