This policy explains what personal data the company Branding Todify collects on the Todify platform (todify.ma), why, who it is shared with and what your rights are. It covers registered sellers, visitors of the site and the customers of sellers whose orders we deliver. We handle this data in line with Moroccan law No. 09-08 on the protection of individuals with regard to the processing of personal data.
1. Who is responsible for your data
Branding Todify, Rue Soumaya, Imm. 82, 2nd floor, No. 4, Quartier Palmier, Casablanca. For any question about your data: [email protected].
2. The data we collect
If you are a seller
- Account: first name, last name, email, phone, address, country, language and password. The password is stored in an encrypted form that nobody can read, not even our team.
- Sign in with Google: if you use it, Google sends us your name, your email and your profile picture.
- Payments and withdrawals: your balance history, your top-ups, your transfer receipts, and the bank details needed for withdrawals (account holder, bank, account number). We never receive your bank card number: card payments are fully handled by Payzone.
- Your activity: your products, your designs and files, your orders, your connected stores, your tickets and your exchanges with our team (calls, WhatsApp, emails).
- Login data: IP address, browser, system, and the date and time of each login.
If you are a seller's customer
When a seller sends us your order, directly or from their store, we receive your name, your phone, your address, your city, the products ordered and the amount to pay on delivery. We also keep the result of the confirmation call and the delivery tracking.
If you visit the site
The pages you view and technical data (IP address, device type, browser), through the cookies described in section 7.
3. Why we use this data
- to create and manage your account, and prevent fraud;
- to confirm, make and deliver orders, and handle returns and claims;
- to manage your balance, your top-ups and your withdrawals, and keep our accounts;
- to contact you: support, news about your orders, help messages on WhatsApp when you are starting out;
- to send you our news and offers by email. Each email has a link to unsubscribe. We can see whether an email was opened or a link was clicked;
- to protect the platform and your accounts, and fix technical errors;
- to measure visits to the site and improve it;
- to meet our legal, tax and accounting obligations.
4. Who we share your data with
We never sell your data. We only share it with the partners who need it to do their job, and only what they need:
- Our partner workshops: the details needed to make and ship the order.
- The delivery companies, Sendit and Ozon Express: the customer's name, phone, address and city, the amount to collect and the name of the seller's brand.
- Payzone: the details needed for card payments.
- Meta (WhatsApp): sellers' phone numbers and the messages we send them on WhatsApp.
- Connected stores (Shopify, WooCommerce, YouCan, Dropify, Jumia): we receive orders from the seller's store and, depending on the store, we send the order status back to it.
- Our technical providers: Amazon Web Services (hosting, file storage, sending emails), Cloudflare (site security and speed), Google (visit statistics and sign in with Google) and Sentry (technical error reports).
- The authorities: when the law requires it, for example after a court decision.
5. Your customers' data (for sellers)
- You share your customers' data with us to confirm and deliver their orders. We only use it for that.
- We do not use your customers' data for our own advertising.
- You must tell your customers that their data is shared with your production and delivery provider.
6. How long we keep your data
- Your account data is kept as long as your account is open.
- When you close your account, we delete or anonymize the data we no longer need.
- Data linked to payments, withdrawals and orders is kept for 10 years, as the law requires for accounting records.
- Login data is kept as long as needed to keep your account secure.
7. Cookies
A cookie is a small file saved by your browser. We use:
- Necessary cookies: to keep you signed in, protect forms, remember your language and block bots. Without them, the site does not work.
- Statistics cookies: Google Analytics, on the public pages of the site and the blog, to count visits and pages viewed. They are not used in your seller account.
You can block or delete cookies in your browser settings. You can also opt out of Google Analytics with the opt-out add-on offered by Google.
8. Security
- All Todify pages are encrypted (HTTPS).
- Passwords are stored encrypted, and we keep no bank card data.
- Only the members of our team who need it for their work can access your data.
- No system is 100% secure. If an incident affects your data, we tell you and take the necessary steps.
9. Your rights
Under law No. 09-08, you can:
- ask what data we hold about you and get a copy;
- have wrong or incomplete data corrected or deleted;
- object to the use of your data for a legitimate reason, and at any time for advertising.
You can change most of your information in your seller account. For the rest, write to [email protected]. If you have an account, write from that account's email, so we know the request really comes from you. We answer within 10 days. If you are not satisfied with our answer, you can contact the CNDP (the Moroccan data protection authority): www.cndp.ma.
10. Minors
Todify is only for people aged 18 and over. We do not knowingly collect data from minors. If a minor has sent us their data, write to us and we will delete it.
11. Changes
We can change this policy. The new version is published on this page with its date. For an important change, we tell you by email or in your seller account.
12. Contact us
- Email: [email protected]
- Phone and WhatsApp: +212 6 69 74 04 38 (Asmaa, account manager)
- Address: Branding Todify, Rue Soumaya, Imm. 82, 2nd floor, No. 4, Quartier Palmier, Casablanca