Privacy policy

1. Who we are

MagriWorld operates this marketplace. Data-protection questions: [email protected]. Company details are in the legal notice.

2. What we collect

• Account: your name, job title and email, and when you accepted the terms. Your password is stored only as a salted hash (PBKDF2); nobody, including us, can read it.
• Company profile — public: name, account and business type, city, country, description, website, logo, products you buy or supply, countries you sell into, declared certifications and capacity.
• Company profile — private: phone, contact email, full address and company registration number. We use them to verify your business; phone, email and address are shared with a counterparty only after an accepted offer.
• Marketplace activity: requests you post, offers you send or receive, season programmes, reservations and field updates (including photos), and their status; reports you file.
• Technical: one cookie (mw_session) that keeps you signed in, and standard request logs (IP address, browser) kept by our host for security.

3. How we use it

• to run the marketplace — show requests and profiles, route offers, and exchange contact details after an accepted offer;
• to send transactional email (sign-in codes, new offers, decisions, and requests matching the products you supply);
• to keep the service secure and prevent abuse.

We do not sell personal data and we do not use it for advertising.

4. What other users can see

Company profiles are public, including to visitors who are not signed in. Buy requests (and the name of the company that posted them) are visible only to signed-in members. Phone, contact email and address are not public: they are shared with one counterparty only after an offer between you is accepted.

5. Processors

Cloudflare hosts the marketplace, its database and logo storage, and provides bot protection (Turnstile) and privacy-friendly visit statistics (Cloudflare Web Analytics, which uses no cookies and no personal profile). Resend sends our emails. They process data on our instructions only.

6. Retention

We keep account and marketplace data while your account is active. Email confirmation and password-reset codes are deleted after a day and sessions after 30 days. Ask us to delete your account and we remove your profile and personal data, keeping only what the law requires.

7. Your rights

You can access, correct or delete your data and object to processing — most of it directly in your company settings, or by email to [email protected]. You can turn off match-alert emails in your dashboard and still receive essential account emails.

8. Changes

We post changes here and update the date above.

Starting point, not legal advice — review with counsel, especially for EU buyers (GDPR) and Moroccan law 09-08.