Privacy Policy
Last updated: 31 October 2026
What we collect, why, who can see it, how long we keep it, and how to use your rights.
Who is responsible
DDPSourcing is a service of Beast Capital Group, Casablanca, which is responsible for your personal data. Contact: contact@ddpsourcing.com.
What we collect
Your account
Email address, password (stored encrypted: we cannot read it; if our team creates your account for you, you choose your password yourself through a secure link we email you), full name, WhatsApp number, city, selling status, and, if you give them, your business name and store link.
Your requests and orders
Product link, product name or description, order type, quantity, specifications, product pictures, delivery city, notes, and your consents (WhatsApp contact and this policy) with their date. For orders: the quote, your acceptance of it (date, amount and Terms version), status updates, payment tracking (amounts, dates, transfer references and transfer proofs you send) and delivery information.
Conversations
The messages and files you exchange with our team in your account.
Reviews
If you leave a review: headline, text, photo or video, and the name, city and store you choose to show. A review is published only after our team approves it, and only with your consent.
Technical data
Login sessions and security logs kept by our service providers. Your browser keeps your login session and, until your first login, the pictures you added to a request, so they are not lost. We do not use advertising or analytics cookies.
Why we use it
- To review your request, find a supplier and send you a quote.
- To manage your order: inspection, shipping, customs clearance, delivery, payments and invoices.
- To contact you about your request and order, in your account, by email and on WhatsApp.
- To publish your review on our website, if you ask us to.
- To keep the service secure and to meet our legal and accounting obligations.
We do not sell your data and we do not use it for unrelated advertising.
Who can see it
- Our team, only for the requests they handle, according to their role.
- Our partners (suppliers, inspection, shipping, customs and delivery companies), only the minimum they need to deliver your order.
- Our service providers, who process data for us:
- Supabase: database, file storage and login, on servers in the European Union (Ireland);
- Resend: sending emails (account confirmation, password reset, notifications);
- Vercel: hosting of the website;
- Google Fonts: the website font (your browser connects to Google to load it).
Some of these providers may process data outside Morocco. We choose providers with strong security measures.
How long we keep it
- Account, requests and conversations: as long as your account is open.
- Orders, payments and invoices: for the period required by Moroccan accounting and tax rules, even after your account is closed.
- Published reviews: until you ask us to remove them.
Your rights
Under Moroccan Law 09-08 on the protection of personal data, you can ask to access, correct or delete your personal data, and object to its use for legitimate reasons.
To delete your account or use any of these rights, email contact@ddpsourcing.com from the email address of your account. We reply as soon as possible. Order and payment records we must keep by law are kept for the required period.
You can also contact the CNDP (Commission Nationale de contrôle de la protection des Données à caractère Personnel), the Moroccan data protection authority.
Security
Connections to our website are encrypted. Each client can only see their own requests, pictures and conversations, and our team members only see what their role requires.
Changes
We may update this policy. The date at the top of this page shows the latest version.