Privacy Policy - charafdesigns.com

Last Updated: May 2025

Your privacy matters to us. This Privacy Policy explains how Charaf Designs collects, uses, and protects your personal information when you visit our website at charafdesigns.com or make a purchase from us. Please read it carefully.

Who We Are

Charaf Designs is a handmade Moroccan artisan brand based in Marrakech, Morocco. We design and sell handcrafted tiles, rugs, lamps, and furniture both through our website and our Etsy store.

The data controller responsible for your personal data is:

Data Controller

Business

Charaf Designs SARL AU

Address

Marrakech 40160, Morocco

[email protected]

Phone

+212 694 848 682

Data We Collect

We collect personal data only when it is necessary to provide our services. The types of data we may collect include:

Identity data — your first and last name
Contact data — email address, phone number, billing and shipping address
Transaction data — details of products you have purchased from us and payment information (processed securely through third-party providers — we never store your card details)
Technical data — IP address, browser type and version, time zone, browser plug-in types, operating system, and other technology on the devices you use to access our website
Usage data — information about how you use our website, products, and services
Communication data — messages you send us via email, contact forms, or social media
Marketing data — your preferences for receiving marketing from us

We do not collect any special categories of personal data (such as data about your race, religion, health, or political opinions).

How We Use Your Data

We use your personal data for the following purposes:

To process and fulfil your orders, including shipping and delivery
To manage your relationship with us and respond to enquiries
To send you order confirmations, shipping updates, and receipts
To send marketing communications if you have opted in (you can opt out at any time)
To improve our website, products, and customer experience
To detect and prevent fraud or other illegal activities
To comply with legal obligations

We will never sell your personal data to third parties or use it for purposes beyond what is listed above without your explicit consent.

Legal Basis for Processing

We process your personal data under the following legal bases:

Contract — processing is necessary to fulfil orders you have placed with us
Legitimate interests — to run and improve our business, prevent fraud, and maintain security
Consent — where you have explicitly opted in, such as for marketing emails (you may withdraw consent at any time)
Legal obligation — where we are required to process data to comply with applicable laws

Sharing Your Data

We may share your personal data with the following trusted third parties, solely to the extent necessary to provide our services:

Shipping and logistics providers — to deliver your orders (e.g. DHL, local couriers)
Payment processors — to securely process your payments (e.g. Stripe, PayPal, Etsy Payments)
Email marketing platforms — to send newsletters or order updates if you have opted in
Website hosting and analytics providers — such as WooCommerce, WordPress, and Google Analytics
Etsy — if you purchase through our Etsy store, Etsy’s own privacy policy applies to that transaction

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes.

Cookies

Our website uses cookies — small text files placed on your device — to improve your browsing experience and help us understand how visitors use our site.

We use the following types of cookies:

Essential cookies — required for the website to function (e.g. shopping cart, login sessions)
Analytics cookies — to understand how visitors interact with our site (e.g. Google Analytics)
Marketing cookies — to show you relevant content and ads (only if you have given consent)

You can control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. By continuing to use our website, you consent to our use of essential cookies.

Data Retention

We retain your personal data only for as long as is necessary for the purposes set out in this policy, or as required by law.

Order data — retained for up to 7 years for accounting and legal purposes
Marketing data — retained until you unsubscribe or withdraw consent
Enquiry data — retained for up to 2 years after our last interaction

Once data is no longer required, we will securely delete or anonymise it.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Right to access — request a copy of the personal data we hold about you
Right to rectification — request correction of inaccurate or incomplete data
Right to erasure — request deletion of your personal data (“right to be forgotten”)
Right to restriction — request that we restrict the processing of your data
Right to data portability — receive your data in a structured, machine-readable format
Right to object — object to processing based on legitimate interests or for direct marketing
Right to withdraw consent — withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before processing your request.

International Data Transfers

Charaf Designs is based in Morocco. If you are located in the European Union or United Kingdom, please be aware that your data may be transferred to and processed in Morocco or other countries outside the EEA.

Where we transfer data outside your country, we ensure appropriate safeguards are in place — such as standard contractual clauses or by working with providers that are certified under recognised frameworks — to protect your personal information.

Children’s Privacy

Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us immediately at [email protected] and we will promptly delete it.

Security

We take the security of your personal data seriously. We use appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction, or alteration. These include:

SSL encryption on all pages of our website
Secure payment processing via certified third-party providers
Restricted access to personal data within our business
Regular reviews of our data collection and storage practices

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will update the “Last Updated” date at the top of this page.

We encourage you to review this page periodically. Continued use of our website after any changes constitutes your acceptance of the updated policy. For significant changes, we will notify you by email if you are a registered customer.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please don’t hesitate to reach out:

Get in Touch