Draft: pending legal review. This document is a non-binding draft and does not constitute legal advice.
Privacy Policy
Last updated : 2026-07-16
How Bladna Immo collects, uses and protects your personal data, under Morocco’s Law 09-08 and, for EU visitors, the GDPR.
1. Controller
The data controller is ⟨LEGAL_ENTITY⟩, ⟨ADDRESS⟩. Processing registered/authorised with the CNDP under no. ⟨CNDP_NO⟩. Contact: ⟨CONTACT_EMAIL⟩ ⟨/ DPO if applicable⟩.
2. Data we collect
Account: email, hashed password, optional name, phone and WhatsApp, language. Listings: content, location (approximate listings never expose exact coordinates), photos. Payments: handled by Stripe; we do not store card numbers. Usage: anonymous, cookieless audience statistics via Umami.
3. Purposes & legal bases
Providing the service (contract); security and fraud prevention (legitimate interest); saved-search alerts and notifications you request (consent); billing paid offers (contract/legal obligation); audience measurement (legitimate interest, cookieless).
4. Sharing under mandates
If you enable the “mandates” option on a listing, the listing and your phone number are shared with subscribed agencies so they can offer their services. This is based on your explicit consent; you can withdraw it at any time, which stops sharing going forward. Your consent timestamp is kept as proof.
5. Recipients & processors
Payments: Stripe. Hosting: ⟨HOST⟩. Transactional email: ⟨EMAIL_PROVIDER⟩. These processors use your data only to provide their service. Some may be located outside Morocco (e.g. in the EU/US); appropriate safeguards cover such transfers.
6. Retention
Data is kept while your account is active, then deleted or anonymised within a reasonable period after closure, subject to legal retention duties (billing, accounting). ⟨SPECIFIC_PERIODS_TO_CONFIRM⟩
7. Your rights
You have rights of access, rectification, objection, erasure and portability. You can export your data or delete your account directly from your dashboard, or email ⟨CONTACT_EMAIL⟩. You may also lodge a complaint with the CNDP.
8. Security
Hashed passwords, encrypted connections (HTTPS), restricted access and secrets stored in an encrypted vault. As no system is fully secure, please use a strong password.