Privacy Policy

Who is responsible

Bloom Coffee SARL, of Nº 492, Magasin Nº 1, Zone d'Activité Al Massar, Marrakech 40000, decides how and why your personal data is processed. Processing is governed by Moroccan Law 09-08 on the protection of individuals with regard to the processing of personal data, overseen by the CNDP.

What we collect

When you order, we collect what is needed to fulfil it:

• your name;
• your email address and telephone number;
• your delivery address, including the city, which sets the delivery charge;
• what you ordered, and the grind or options you chose;
• how you chose to pay, and whether it was paid. We do not store card numbers.

If you create an account we also keep your order history and any address you save. If you sign in with Google, Google confirms your identity and shares your name and email address; we never receive your Google password.

We keep a basket for you before you sign in, tied to an identifier stored in your browser rather than to you. If you then sign in, that basket moves onto your account so you do not lose it.

Our servers log ordinary technical information — IP address, browser, pages requested — used to keep the site running and secure.

Why we use it

• to receive, pack, deliver and invoice your order;
• to contact you about that order, including when it ships;
• to give a carrier the name, address and phone number needed to deliver it;
• to meet our accounting and tax obligations;
• to answer you when you get in touch;
• to send you offers — new coffees, bundles and discounts. There is a box at checkout and when you create an account, ticked by default; clear it and we will not write to you. You can also stop at any time afterwards by replying to a message or emailing contact@bloomcoffee.ma. Stopping them does not affect emails about your order, which we send because you bought something and not to sell you anything.

We do not sell your data, and we do not share it for anyone else's marketing.

Who else sees it

Only those who need it to do something for you:

• the delivery company carrying your parcel — name, address, phone, and the amount to collect if you are paying on delivery;
• our accounting system, which records the sale as the law requires;
• our hosting and email providers, who process data on our instructions;
• a public authority, where we are legally required to provide it.

Where it is kept, and for how long

Our systems are hosted in Europe, which means your data may be processed outside Morocco. We keep it only as long as there is a reason to:

• order and invoice records for as long as accounting and tax law requires;
• your account for as long as you keep it;
• any marketing consent you give us, until you withdraw it;
• technical logs for a short period.

If you ask us to close your account, email contact@bloomcoffee.ma and we will delete it: the account itself, your saved addresses, your basket and your sign-in go, and you will not be able to sign in again.

What cannot go with it is the record of anything you bought. An order and the invoice behind it are accounting documents, and Moroccan tax law requires us to keep them — so they stay, carrying the name, email address and delivery address that were on them at the time, because an invoice without those is not a valid invoice. They are no longer attached to an account, and nobody can sign in to reach them.

Keeping it safe

The site is served over HTTPS. Passwords are stored hashed, never in a readable form — we cannot see yours. Access to customer data is limited to the people who need it. If we ever suffer a breach affecting your data, we will tell you and the CNDP as required.

Where our staff open a customer's account to help with a support request, that access is time-limited, recorded, and cannot be used to change your password or email address.

Cookies and similar storage

We use browser storage for things the site cannot work without: keeping you signed in, remembering your basket, and remembering a delivery address you have used so you do not retype it.

We also use Microsoft Clarity to understand how the site is used. It records how pages are scrolled, where they are clicked and which parts are never reached, and it sets its own cookies to recognise a returning session. We use it to find what is confusing or broken, never to identify you personally, and we do not sell or share what it collects. Microsoft processes this data as described in the Microsoft Privacy Statement.

Your rights

Under Law 09-08 you may ask us to:

• tell you what data we hold about you, and give you a copy;
• correct it if it is wrong;
• delete it, where we are not required to keep it;
• stop using it for marketing — at any time, with no reason needed.

Email contact@bloomcoffee.ma and we will respond. You may also complain to the CNDP.

Children

This shop is not aimed at children, and we do not knowingly collect data about them. If you believe a child has given us their details, tell us and we will remove them.

Changes

If we change this policy, the new version appears here with a new date. If a change is significant, we will say so rather than let it pass quietly.