Privacy Policy

Last updated: 3/13/2026

Langue : FR|EN

1. Introduction

At Jotop, we take the protection of your personal data seriously. This privacy policy explains how we collect, use, share, and protect your information when you use our secondhand buying and selling application in Morocco.

This policy complies with Moroccan Law 09-08 on the protection of individuals with regard to the processing of personal data and has been declared to the National Commission for the Control of Personal Data Protection (CNDP).

2. Data Controller

The controller of your personal data is:

Jotop SARL
Email: contact@jotop.ma

We have appointed a Data Protection Officer (DPO) whom you may contact for any questions regarding the use of your personal data at: contact@jotop.ma.

3. Data We Collect

We collect the following categories of data:

  • Identification data: name, email address, phone number, postal address
  • Account data: username, password (stored securely), account preferences
  • Transaction data: purchase and sale history, payment methods (we do not store full card details)
  • Communication data: messages exchanged with other users or our support team
  • Usage data: how you use our app, pages visited, features used
  • Technical data: IP address, device type, OS version, device identifiers
  • Location data: approximate location from IP or, with your consent, precise location via GPS

4. Purposes of Processing

We process your personal data for:

  • Creating and managing your user account
  • Facilitating transactions between buyers and sellers
  • Personalising your experience and product recommendations
  • Communicating with you about transactions, your account, or our services
  • Improving our app and developing new features
  • Preventing and detecting fraud and abuse
  • Complying with legal and regulatory obligations
  • With your consent, sending marketing communications

5. Legal Basis

Under Law 09-08, we process your data on the following legal bases:

  • Contract performance: when necessary to perform our Terms of Use
  • Consent: when you have given explicit consent (e.g. for marketing)
  • Legitimate interests: when necessary for Jotop’s legitimate interests (e.g. improving service, preventing fraud)
  • Legal obligation: when required by law

6. Data Recipients

Your data may be shared with:

  • Other users: some information (e.g. username, profile photo, approximate location) is visible to other users
  • Service providers: third parties that help us operate and improve our services (hosting, payment, analytics)
  • Public authorities: when required by law

All service providers are bound by strict confidentiality and security obligations and may use your data only for the purposes we specify.

7. International Transfers

Some of your data may be transferred outside Morocco (e.g. for hosting). In accordance with Law 09-08, we ensure that such transfers are subject to appropriate safeguards (adequacy decisions, standard contractual clauses, or binding corporate rules). You may request a copy of these safeguards by contacting our DPO.

8. Retention

We retain your data only as long as necessary for the purposes described, and to meet legal, accounting, or reporting requirements. Account data is kept while your account is active; transaction data may be retained for up to 10 years for legal and tax purposes; support communications for 2 years after the last contact.

9. Your Rights

Under Law 09-08, you have the right to:

  • Access: obtain confirmation that your data is processed and receive a copy
  • Rectification: request correction of inaccurate or incomplete data
  • Erasure: request deletion in certain circumstances
  • Object: object to processing on grounds relating to your situation
  • Restriction: request limitation of processing in certain cases
  • Portability: receive your data in a structured format and transfer it to another controller
  • Withdraw consent: where processing is based on consent, you may withdraw it at any time

To exercise these rights, contact our DPO at contact@jotop.ma or by post. You also have the right to lodge a complaint with the CNDP if you believe the processing of your data violates Law 09-08.

10. Data Security

We implement appropriate technical and organisational measures to protect your data against loss, unauthorised access, disclosure, alteration, and destruction, in line with Law 09-08. These include encryption of sensitive data, strict access controls, regular security audits, and incident response procedures.

11. Cookies and Similar Technologies

Our app may use cookies and similar technologies to improve your experience, analyse usage, and personalise content. You can manage your preferences in your device or browser settings.

12. Changes to This Policy

We may update this privacy policy from time to time. We will inform you of significant changes via a notice in the app or by email. We encourage you to review this policy periodically.

13. Contact

For questions about this privacy policy or the processing of your personal data, contact our Data Protection Officer: contact@jotop.ma

14. CNDP Declaration

In accordance with Law 09-08, the processing of personal data carried out by Jotop has been declared to the National Commission for the Control of Personal Data Protection (CNDP).