Privacy Policy

Who is responsible

Bloom Coffee SARL, of Nº 492, Magasin Nº 1, Zone d'Activité Al Massar, Marrakech 40000, decides how and why personal data is processed here. Processing is governed by Moroccan Law 09-08 on the protection of individuals with regard to the processing of personal data, overseen by the CNDP.

What we collect

About your business:

• business name, ICE and trading address;
• your agreed price list, payment terms and credit limit;
• order history, invoices and payment status.

About the people who use the account:

• name, email address and telephone number;
• the delivery address held on the account;
• sign-in details — passwords stored hashed, never readable.

If you sign in with Google, Google confirms identity and shares a name and email address. We never receive the Google password.

We also keep internal notes about the account — delivery preferences, what was agreed on a call. Keep in mind that a note about a person is personal data, and you can ask to see it.

Why we use it

• to operate your account and show you your prices;
• to take, roast, pack, deliver and invoice your orders;
• to give a carrier what it needs to deliver to you;
• to manage credit and collect payment;
• to meet our accounting and tax obligations;
• to contact you about your account and orders;
• to send you trade offers — new coffees, bundles and discounts — which you can stop at any time without affecting the emails above.

We do not sell data, and we do not share it for anyone else's marketing.

Who else sees it

• the delivery company carrying your consignment;
• our accounting system, which records sales and invoices as the law requires;
• our hosting and email providers, processing on our instructions;
• a public authority, where legally required.

Support access

Our team may open your account to help with a problem, seeing what you see. Access is time-limited, every instance is recorded — who, when — and it cannot be used to change credentials.

Cookies and analytics

We use browser storage for things the portal cannot work without: keeping you signed in and remembering the basket you are building.

We also use Microsoft Clarity to understand how the portal is used. It records how pages are scrolled, where they are clicked and which parts are never reached, and it sets its own cookies to recognise a returning session. We use it to find what is confusing or broken, never to identify you personally, and we do not sell or share what it collects. Microsoft processes this data as described in the Microsoft Privacy Statement.

Where it is kept, and for how long

Our systems are hosted in Europe, so data may be processed outside Morocco. Orders and invoices are kept for as long as accounting and tax law requires. Account records are kept while the partnership lasts and for a period afterwards, since a commercial relationship can be revisited.

Keeping it safe

The portal is served over HTTPS. Passwords are hashed. Access to partner data is limited to the people who need it. We will tell you and the CNDP of a breach affecting your data as required.

Your rights

The individuals behind the account may ask us to give them a copy of their data, correct it, delete it where we are not required to keep it, or stop using it for marketing. Email contact@bloomcoffee.ma. You may also complain to the CNDP.

Note that deleting a person's details does not delete the business records — invoices must be kept whatever happens to an individual account.

Changes

A changed policy appears here with a new date. If a change is significant we will tell you rather than let it pass quietly.