Privacy policy

This policy explains which personal data JYBLY ("JYBLY") processes when you use https://jybly.ma, why, who it is shared with and what your rights are, in accordance with Moroccan law 09-08 on the protection of individuals with regard to the processing of personal data.

1. Data controller

• Company: JYBLY
• Contact: contact@jybly.ma

2. Data processed

• Account: first and last name, e-mail, phone, password (hashed), communication languages, creation date, e-mail and phone confirmations.
• Orders: products, links, prices, delivery addresses (and GPS position if you choose to share it), order history and status.
• Payments: payment method, amounts, transaction references; proof of payment (photo or PDF) for cash and transfer payments. Card numbers are entered with the payment provider and never stored by JYBLY.
• Communications: messages sent through the contact form or the support widget, notifications sent.
• Technical data: IP address, browser type, security logs, cookies (see the cookie policy).
• Fraud prevention: device identifier (cookie), technical browser signature computed from device characteristics (screen, language, time zone, graphics card…), IP addresses and links between accounts.
• Measurement and advertising: only with your consent, browsing and conversion data sent to advertising platforms.

3. Purposes and legal bases

• Performing your orders (purchase, shipping, customs, delivery, customer service) — performance of the contract.
• Keeping you informed by WhatsApp, SMS and e-mail — performance of the contract.
• Checking payments, preventing fraud and bots, enforcing account blocks and detecting a new account opened by a blocked person (see the terms of use) — legitimate interest.
• Meeting our accounting, tax and customs obligations — legal obligation.
• Sending the newsletter — your consent, which you can withdraw at any time.
• Measuring audience and advertising campaigns — your consent.

4. Recipients

Data is accessible to authorised JYBLY staff (role-based access, two-factor authentication for administration) and to the following providers, strictly as needed:

• hosting and database (Vercel, Supabase);
• payment (CMI, Stripe);
• WhatsApp and SMS messaging (Infobip) and e-mail (Resend or SMTP server);
• newsletter (Acumbamail);
• anti-bot protection (Cloudflare Turnstile);
• customer support (Gleap), if you use the support widget;
• carriers and freight forwarders, for delivery and customs;
• measurement and advertising platforms (Meta, TikTok, Google, Snapchat, Pinterest, Microsoft), only with your consent;
• administrative and judicial authorities, upon lawful request.

Stores only receive the information needed for the purchase, never your personal contact details unless they require them.

5. Transfers outside Morocco

Some providers are located outside Morocco (European Union, United States). These transfers are governed in accordance with law 09-08 and CNDP requirements and are limited to the data needed for the service.

6. Retention

• Account: while active, then 3 years after the last activity.
• Orders, invoices and proof of payment: 10 years (accounting obligations).
• Contact and support messages: 3 years.
• Security logs: 12 months.
• Fraud prevention data: 3 years after the last activity; for a blocked account, as long as the block remains.
• Newsletter: until you unsubscribe.
• Cookies: see the cookie policy.

7. Security

Hashed passwords, encrypted connections (HTTPS), proof of payment stored in a private, non-indexed space accessible only to the customer concerned and authorised staff, two-factor authentication for administration, log of sensitive actions.

8. Your rights

You have the right to access, correct and object to the processing of your data (including for marketing), and to ask for your account to be deleted, subject to our legal retention obligations. Write to us from the Contact page or to contact@jybly.ma, stating your account e-mail. You may also contact the Moroccan data protection authority (CNDP, www.cndp.ma).

9. Minors

The service is reserved for adults. We do not knowingly collect data about minors.

10. Changes

This policy may change; the date of the last update appears at the bottom of the page.