Privacy policy
Last updated: October 22, 2026
Maison Éclaire sells handmade candles, flower boxes and candle-making supplies on maisoneclaire.co. This policy explains what personal data we collect, why, who we share it with and how to exercise your rights, in line with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data.
1.Who is responsible for your data
Maison Éclaire, Casablanca, Morocco. For any question about your data: contact@maisoneclaire.co or +212 658-655288.
2.The data we collect
- When you place an order: your full name, phone number, delivery address and city, email (optional), order notes, the items ordered and the amounts.
- When you create an account: your email, password (never stored in plain text; it is encrypted by our authentication provider), name, and any delivery details you choose to save.
- If you sign in with Google, Facebook, Apple or LinkedIn: your name, email address and your account ID with that service. We never receive your password for those services.
- If you accept analytics cookies: pages viewed, clicks, page loading times, technical errors encountered, device and browser type, language, and approximate country or city derived from your IP address.
- When you contact us (phone, email, Instagram): the content of our conversation.
We also measure traffic anonymously, without cookies: with Vercel Analytics, and with PostHog until you accept cookies. PostHog then receives the same information (pages, clicks, loading times, errors), linked to an anonymous ID that changes every day and cannot recognise you.
3.Why we use it
- To process, prepare and deliver your orders, and to call you to confirm them. This is necessary to fulfil your order.
- To run your account, show your order history and tracking, and pre-fill your next orders, at your request.
- To reply when you contact us.
- To understand how the site is used and improve it, only if you agree.
- To measure how well our Instagram and Facebook ads work when you order, in our legitimate interest (see below).
- To keep our accounts and meet our legal obligations.
- To protect the site against fraud and abuse, in our legitimate interest.
We do not send advertising by email or SMS, and we never sell your data.
4.Who we share it with
Your data is only accessible to the Maison Éclaire team and to the providers that help us run the shop, solely for the service they provide to us:
- Our delivery company: name, phone, address, city and amount to collect, to deliver your parcel.
- Supabase: database and customer accounts, servers located in Switzerland.
- Vercel: website hosting and anonymous traffic measurement.
- Resend: sending emails about your orders and your account.
- PostHog: analytics, without cookies, or with cookies if you agree, servers located in the United States.
- Meta (Instagram, Facebook): measuring our ads, as explained below.
- Google, Meta (Facebook), Apple or LinkedIn, only if you choose to sign in with them.
When you place an order, we send Meta (Facebook / Instagram), through its Conversions API, limited information about your order (amount, products) together with your phone number and city in encrypted (hashed) form, to measure how well our ads work. This data is not used to contact you. For any question or deletion request: contact@maisoneclaire.co.
Your name and your email, if you gave one, are sent the same way, hashed, along with your IP address, your browser and, if you arrived from an ad, the ID of that click. This happens for every order. The Meta Pixel, which also measures pages viewed, is only loaded if you accept cookies (cookie policy).
5.Transfers outside Morocco
Some of these providers host data outside Morocco (Switzerland, the European Union, the United States). We chose them because they apply recognised security and confidentiality safeguards, and they may only use your data to provide their service to us.
6.How long we keep it
- Orders: 10 years, as required by our accounting obligations.
- Customer account: for as long as your account exists. It is deleted on request.
- Analytics: 12 months at most.
- Conversations with us: as long as needed to handle your request, then 3 years at most.
7.Your rights
Under Law 09-08 you may at any time access your data, have it corrected or completed, object to its processing on legitimate grounds, and ask for it to be deleted.
You can update your details yourself from your account. For anything else, email us at contact@maisoneclaire.co: we reply within 30 days.
If you believe your rights are not being respected, you can contact Morocco's data protection authority, the CNDP: www.cndp.ma.
8.Deleting your account and data
To delete your account, including one created with Google, Facebook, Apple or LinkedIn:
- Email contact@maisoneclaire.co from your account's address with the subject "Account deletion".
- We delete your account, profile and saved details within 30 days and confirm it by email.
- Orders already placed are kept for our accounts (see above), but are no longer linked to any account.
You can also remove Maison Éclaire's access from the security settings of your Google, Facebook, Apple or LinkedIn account.
9.Security
- Every page of the site is served over an encrypted connection (HTTPS).
- Passwords are encrypted and can never be read, even by our team.
- Each customer can only see their own orders.
- Only the team that handles orders has access to the data.
11.Minors
The shop is intended for adults. If you are under 18, please ask a parent to order for you.
12.Changes
We may update this policy. The date of the last update is shown at the top of the page, and any significant change will be announced on the site.
