This policy explains which personal data Majalstudio LLC, trading as Majal Studio, collects when you visit majalstudio.com, contact us or become a client, why we use it, and the rights you have.
1.Who is responsible for your data
The controller of your personal data is Majalstudio LLC, principal office at N 27 rue Oued Al Makhazine, 15000 Khemisset, Morocco, mailing address at 30 N Gould St, Ste R, Sheridan, WY 82801, United States. Full company details are in the Legal Notice.
For any question about your data or to exercise your rights, write to hello@majalstudio.com.
2.Data we collect
When you visit the website
The website has no contact form, no user account and no analytics or advertising tools. When your browser loads a page, our hosting provider, Netlify, automatically receives technical data needed to deliver it and keep it secure, such as your IP address, the date and time of the request, the page requested, your browser type and the referring page. Some decorative images on the home page are loaded from Figma's servers, which therefore also receive your IP address and similar request data.
When you contact us
If you write to us by email or contact us by phone or WhatsApp, we receive the data you choose to share: usually your name, email address or phone number, the content of your message and any information about your project.
When you become a client
To prepare quotes and carry out projects, we process the identity and contact details of you or your contact persons, your company details where relevant, billing and payment information, the project information and files you provide, the access you grant us to your platforms and our exchanges with you.
Data in your own systems
When our work gives us access to data that you control, such as your own customers' data in your online store, we process it only on your instructions, as described in the Terms of Service.
3.Why we use your data and on what legal basis
| Purpose | Legal basis |
|---|---|
| Delivering the website and protecting it against abuse and attacks | Our legitimate interest in operating a secure website |
| Answering your messages and preparing a quote | Steps taken at your request before entering into a contract, or our legitimate interest in answering inquiries |
| Carrying out the services, communicating about the project and managing payments | Performance of the contract |
| Invoicing, accounting and keeping records required by law | Compliance with our legal obligations |
| Establishing, exercising or defending legal claims | Our legitimate interest in protecting our rights |
We will only send you marketing communications in accordance with applicable law, including by obtaining your consent where it is required.
4.Who receives your data
Your data is accessible to Majal Studio and, to the extent needed, to the following recipients:
- Netlify, Inc., which hosts the website;
- Hostinger, which hosts our professional mailbox;
- WhatsApp (Meta), if you choose to contact us through WhatsApp;
- Figma, which serves some images displayed on the home page;
- the banks and payment providers used to receive payments;
- the platforms and tools used for your project, such as Shopify or WordPress hosting, when the project requires it;
- professional advisers, such as accountants or lawyers, when necessary;
- public authorities, when the law requires it.
We do not make your data available to other third parties for their own marketing purposes.
5.International transfers
We operate from Morocco, our company is registered in the United States, and some of our providers are based in or process data in other countries, including the United States. Your data may therefore be transferred outside the country where you live.
When the applicable law requires safeguards for such transfers, such as an adequacy decision, standard contractual clauses or an authorization from the competent authority, we rely on those safeguards. You can ask us for more information at the address above.
6.How long we keep your data
We keep personal data only as long as necessary for the purpose for which it was collected:
- messages from people who do not become clients: as long as needed to answer the request and any follow-up;
- client data: for the duration of the business relationship, then for as long as required by our legal obligations, in particular accounting and tax obligations, or as needed to establish or defend legal claims during the applicable limitation periods;
- hosting logs: according to Netlify's retention practices.
Specific retention periods: [TO COMPLETE: retention periods for each category, once defined]
7.Your rights
Depending on the law that applies to you, you have the following rights:
- access to your data and a copy of it;
- correction of inaccurate or incomplete data;
- erasure of your data;
- restriction of processing;
- objection to processing based on our legitimate interest, and to direct marketing at any time;
- data portability, for data you provided to us that is processed by automated means on the basis of a contract or consent;
- withdrawal of your consent at any time, where processing is based on consent.
To exercise these rights, write to hello@majalstudio.com. If we have reasonable doubts about your identity, we may ask you for information to confirm it. We answer within the time limits set by the applicable law.
If you are in the European Union or the European Economic Area
The General Data Protection Regulation (GDPR) applies to processing related to services offered to you. You have the right to lodge a complaint with the data protection authority of your country, for example the CNIL in France or the Data Protection Authority in Belgium.
If you are in Morocco
Law No. 09-08 on the protection of individuals with regard to the processing of personal data applies. You have rights of access, rectification and objection, and you may contact the Commission nationale de contrôle de la protection des données à caractère personnel (CNDP).
CNDP declaration: [TO COMPLETE: CNDP declaration or receipt number, if applicable]
8.Security
We take reasonable technical and organizational measures to protect personal data against loss, misuse and unauthorized access, taking into account the nature of the data and the risks involved. The website is served over an encrypted HTTPS connection.
9.Children
Our website and services are not intended for children, and we do not knowingly collect children's personal data.
11.Changes to this policy
We may update this policy, in particular if our tools or practices change. The version published on this page, with its date, is the one in force.