Preamble

In connection with your use of the website procure.ma (hereinafter referred to as "the Site"), Smyle & Care (S&C) SARL , the company responsible for operating this site, may collect personal data about you. This collection is carried out in compliance with applicable regulations and with complete transparency, in order to guarantee the protection of your personal information. This policy aims to inform you in detail about the conditions under which your personal data is collected, processed, secured, and stored, in accordance with legal obligations and best practices in data protection.

1. Purpose of the Charter

This personal data protection policy aims to provide you with complete and clear information on the methods used by Smyle & Care (S&C) SARL to collect, process, and protect your personal data. It also helps you better understand your rights regarding the collection of your personal data in connection with your use of the Site.

By accepting this charter, you consent to the collection, processing and storage of your personal data under the conditions defined herein.

2. Identity of the Data Controller

The company responsible for the collection and processing of your personal data is Smyle & Care (S&C) SARL , a limited liability company registered in the Casablanca Trade Register under ICE: 002 574 756 000 033 , Registration No: 467563 , IF: 45885928. Its registered office is located in Casablanca , Morocco.

This company is responsible for managing the personal data collected in connection with your use of the services offered on the procure.ma website.

3. What Personal Data Do We Collect?

As part of the services offered on the Site, we collect different categories of personal data, as defined below. This data is necessary for managing your account and providing you with a personalized experience on our platform.

3.1. Identification Data:

We collect information that can identify you, such as:

• First and last name ;
• Sex;
• Age ;
• Postal address;
• E-mail address ;
• Country of Residence.
  

3.2. Connection Data:

We collect information related to your connection to the Site, such as:

• Your login details;
• Your passwords (securely). (Passwords are stored in encrypted form, and Procure does not have access to user passwords, in accordance with best data security practices.)
  
  

3.3. Data relating to your Lifestyle and Habits:

In order to offer you personalized solutions regarding dietary supplements, we collect information relating to:

• Your eating habits;
• Your dietary supplement consumption habits;
• Your specific needs and health goals.
  
  

3.4. Data relating to your Orders:

We also collect data about your past orders, such as:

• Your order history;
• The products you have ordered or that we have recommended to you based on the information provided in the online health questionnaire.
  
  

This data is collected only with your explicit consent, which must be given by means of a ticking box when you register or participate in the online questionnaire.

4. Purposes of Data Processing and Legal Basis

The personal data we collect is used for the following purposes:

4.1. Purposes of the Processing:

• Offer a personalized treatment plan : Analyze your answers to the online test in order to determine the health products and food supplements best suited to your needs.
• Order fulfillment : Manage your orders, perform customer management operations such as tracking deliveries, issuing invoices and processing loyalty programs.
• Sending commercial communications : Sending you newsletters, promotional messages or solicitations concerning our products and services, subject to your consent.
• Building a customer and prospect file : Updating and managing our customer and prospect files in order to improve our services and products.
  
  

4.2. Legal Basis for Processing:

• The processing of data relating to order management and contract execution is based on the execution of the contract between you and Procure.
• The processing of data relating to the sending of newsletters and promotional messages is based on your consent, which you can withdraw at any time.
• The processing of data for statistical or prospecting purposes is based on our legitimate interest in improving our services and developing our activities.
  
  

4.3. Data Retention Periods:

• For Customers : Data is retained for the duration of the subscription and for an additional period of 3 years from the date of termination or end of your subscription. In the event of inactivity or prolonged account suspension for 2 years , the account will be automatically deleted.
• For Prospects : Data is kept for a maximum of 3 years from the date of collection or the last active contact.
  
  

Beyond these time limits, your data may be anonymized for statistical purposes or archived for legal purposes.

5. Recipients of the Personal Data Collected

The categories of recipients of the personal data collected are as follows:

• Procure staff : Our internal teams responsible for order management, service delivery, customer support, and sending communications.
• Subcontractors : Our external partners, such as:
  
• Website hosting providers;
• CRM tool providers;
• Online payment services;
• Order pickers;
• Delivery logistics providers;
• Returns or complaints processing services.
  
  
• Public authorities : As part of our legal obligations, we may be required to transmit your data to public authorities, such as tax or judicial bodies, when required by law.
• Legal professionals : In the event of a dispute or legal proceedings, your data may be shared with lawyers, bailiffs, or any other entity involved in resolving these disputes.
  
  

6. Security of Personal Data

We implement appropriate organizational and technical security measures to protect your personal data against loss, theft, falsification, or unauthorized access. This includes the use of encryption technologies during your online transactions and adherence to best practices in information systems security.

We have also put in place protocols to ensure the integrity and confidentiality of your data, as well as to prevent any unauthorized alteration or disclosure.

7. Hosting of Personal Data

Your data is hosted exclusively within Morocco, and we ensure that it is secured in accordance with legal requirements and the strictest security standards. Our hosting services are provided by certified security providers.

8. Your Rights Regarding Your Personal Data

In accordance with applicable regulations, you have the following rights regarding your personal data:

• Right to information : You have the right to be informed clearly and transparently about the collection and use of your data.
• Right of access : You can access all the personal data we hold about you at any time.
• Right of rectification : You can correct any erroneous or incomplete information concerning your personal data.
• Right to erasure : You can request the erasure of your personal data, subject to legal conditions.
• Right to withdraw your consent : If the processing of your data is based on your consent, you can withdraw it at any time, without affecting the lawfulness of the processing carried out before this withdrawal.
• Right to object : You can object to the processing of your personal data for legitimate reasons.
  
  

You can exercise these rights by sending us a request by email to the following address: contact@procure.ma or support@procure.ma . We may ask you for additional information to verify your identity before processing your request.

9. Amendments to the Data Protection Charter

We reserve the right to modify this policy at any time to adapt it to legal changes or the needs of our users. Any modification to this policy will be published on the Site and will take effect immediately upon publication.

By accepting this charter, you consent to the collection, processing, and storage of your personal data under the conditions described above. We are committed to respecting the confidentiality and security of your personal information and guaranteeing you full control over your data.