Last updated: 25-08-2026

This Privacy Policy describes how Timalsa (“TIMALSA”, “we”, “us” or “our”) collects, uses and discloses personal data when you visit our website, use our services, make a purchase through timalsa.com or otherwise communicate with us (together, the “Services”).

“You” means the user of the Services, meaning a customer, website visitor, or any other individual whose personal data we process under this Privacy Policy.

Please read this Privacy Policy carefully. Where we rely on your consent for a particular type of processing, we ask for that consent separately and specifically. Simply using the Services does not by itself constitute consent to processing that legally requires it, such as certain marketing activities or non-essential cookies.

If you do not agree with this Privacy Policy, we ask that you do not use the Services.

HOW WE PROCESS YOUR PERSONAL DATA

We collect personal data from you to provide and improve the Services. The information we collect depends on how you interact with us.

In addition to the purposes described below, we may use your personal data to communicate with you, provide and administer the Services, process and fulfil orders, comply with legal obligations, enforce our terms and conditions, prevent fraud and protect the Services, our customers and third parties.

FOR WHAT PURPOSE DO WE PROCESS YOUR PERSONAL DATA?

Delivery of products and services

We process personal data to process payments, fulfil orders, send notifications relating to your account and purchases, arrange shipping and delivery, manage exchanges and returns, provide customer support and enable product reviews.

Customer service

When you contact us, we process the personal data necessary to handle your request, respond to you and manage our relationship with you.

We may keep records of customer-service communications where necessary for customer support, quality control, dispute resolution or legal compliance.

Marketing and advertising

Where permitted by applicable law, we may use your personal data to send information about our products, promotions, offers and Services by email, SMS or other communication channels.

Where consent is required, we will obtain your consent before sending marketing communications or using your personal data for personalised advertising.

You may withdraw your consent or unsubscribe from marketing communications at any time.

Surveys and customer insights

Where you choose to participate in a survey or customer research activity, we may process your responses to understand customer needs, preferences and behaviour and to improve our products and shopping experience.

Where required by applicable law, we will obtain your consent before linking survey responses with your customer account or purchase history.

Where possible, survey results are analysed on an aggregated or anonymised basis.

Improving our Services

We may process browsing and usage information for analytical and statistical purposes to understand how customers use our website and improve our Services, products and shopping experience.

Where cookies or similar technologies require consent under applicable law, we will request that consent before using them for those purposes.

Security and fraud prevention

We may process relevant personal data to detect, investigate and prevent fraudulent, illegal or harmful activity.

We may block or cancel a transaction, restrict an account or take other appropriate measures where fraud, abuse or other unlawful activity is reasonably suspected.

WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA?

We process personal data only where we have a valid legal basis under applicable data-protection law.

Performance of a contract

For activities such as processing and fulfilling orders, arranging delivery, processing returns and exchanges, providing customer support relating to purchases and administering customer accounts, processing may be necessary to perform our agreement with you or to take steps at your request before entering into an agreement.

Legal obligations

Where we are required to collect, retain or disclose personal data to comply with applicable laws or regulatory requirements, we process your personal data for that purpose.

This may include tax, accounting, consumer-protection, payment, fraud-prevention and other legal obligations.

Consent

For marketing communications, personalised advertising, certain cookies, surveys and other activities where consent is legally required, we rely on your consent.

You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Legitimate interests

Where permitted by applicable law, we may process personal data based on our legitimate interests, including responding to customer requests, improving our Services, protecting our business, preventing fraud, securing our website and managing our customer relationships.

Where we rely on legitimate interests, we consider whether our interests are balanced against your rights and freedoms.

WHAT PERSONAL DATA DO WE PROCESS?

Information you provide directly to us may include:

• Basic information, such as your name, delivery address, billing address, email address, telephone number, language preference and country;

• Financial and transaction information, such as payment information and details of your purchases, orders, exchanges and returns;

• Account information, including your username, password and other account credentials;

• Information about your interactions with our Services, such as products you view, add to your cart, purchase or add to a wishlist;

• Customer-service information, including information you provide when contacting us;

• Reviews, comments, photographs or other content that you voluntarily submit to us; and

• Information you provide when participating in surveys, competitions or promotional activities.

We may also process technical and usage information relating to your use of our Services, including information about your device, browser, IP address, network connection, approximate location and interactions with our website and communications, where permitted by applicable law.

Some features require specific information about you.

You may choose not to provide certain information, but this may mean that you cannot use certain features or Services, including placing an order or receiving certain communications.

WHAT INFORMATION DO WE PROCESS THROUGH THIRD PARTIES?

We may receive personal data from third parties that support us in providing and operating the Services.

These third parties may include:

• Payment service providers and financial institutions;

• Shipping, logistics and delivery providers;

• Website hosting and technical service providers;

• Customer-service providers;

• Data analytics and cloud-storage providers;

• Advertising and marketing platforms;

• Social-media platforms;

• Fraud-prevention and security providers; and

• Other service providers necessary to operate our business.

We may also receive information from business and marketing partners where permitted by applicable law.

This information may be collected through pixels, web beacons, SDKs, cookies and similar technologies when you visit our website, interact with our communications or interact with our advertisements.

We may disclose or receive personal data in connection with a corporate transaction, such as a merger, acquisition, restructuring or sale of assets, where permitted or required by applicable law.

WHO DO WE SHARE YOUR PERSONAL DATA WITH?

Depending on how you use the Services, we may share your personal data with the following categories of recipients:

• Service providers acting on our behalf, including providers of website hosting, IT, payment processing, fulfilment, logistics, customer service, analytics and cloud-storage services;

• Shipping and delivery companies where necessary to deliver your orders;

• Payment providers and financial institutions where necessary to process payments and refunds;

• Business and marketing partners where sharing is necessary and permitted by applicable law;

• Advertising and analytics providers where permitted by applicable law;

• Professional advisers, such as legal, accounting, financial or insurance advisers;

• Competent authorities or other third parties where disclosure is required by law or necessary to establish, exercise or defend legal claims; and

• Third parties involved in a corporate transaction, such as a merger, acquisition, restructuring or sale of assets.

We only share personal data where there is a valid legal basis for doing so.

Where a third party processes personal data on our behalf, we take reasonable steps to ensure that appropriate contractual and security safeguards are in place where required by applicable law.

We are not responsible for the privacy practices of third parties acting independently from Timalsa. Please review the privacy policies of third-party services before using them.

STORING AND SECURING YOUR PERSONAL DATA

How long we keep your personal data depends on the purpose for which it was collected and the legal obligations that apply to us.

For orders and purchases, we retain relevant information for as long as necessary to process your transaction, provide customer service, handle returns or disputes and comply with applicable tax, accounting and legal obligations.

For customer service, we generally retain relevant information for as long as reasonably necessary to respond to your request, manage our relationship with you and comply with applicable legal obligations.

For marketing and advertising, we retain personal data for as long as we have a valid legal basis to use it.

If you withdraw your consent or unsubscribe from marketing communications, we will stop using your data for direct marketing. We may retain limited information, such as your contact details and marketing preferences, where necessary to ensure that we respect your opt-out request.

For analytics and service improvement, we may anonymise or aggregate information where possible. Where data remains identifiable, we retain it only for as long as reasonably necessary for the relevant purpose.

For security and fraud prevention, we may retain relevant information for as long as reasonably necessary to detect, investigate and prevent fraudulent or unlawful activity, taking into account applicable legal obligations and limitation periods.

TECHNICAL AND ORGANISATIONAL MEASURES

We take reasonable technical and organisational measures to protect your personal data against loss, theft, unauthorised access, unwanted disclosure and unlawful processing.

Depending on the nature of the information and the Services, security measures may include secure website technology, encryption where appropriate, access controls, authentication procedures, software updates, security monitoring and restricted access to personal data.

We also take reasonable steps to ensure that employees, contractors and service providers who have access to personal data are subject to appropriate confidentiality and security requirements.

No method of transmitting or storing information electronically is completely secure.

Although we take reasonable measures to protect your personal data, we cannot guarantee the absolute security of information transmitted over the internet.

COOKIES AND SIMILAR TECHNOLOGIES

We use cookies and similar technologies on our website.

These technologies may be used for purposes such as:

• Operating and securing the website;

• Remembering your preferences;

• Maintaining shopping carts and sessions;

• Understanding how visitors use our website;

• Measuring website performance;

• Improving our Services;

• Personalising content; and

• Advertising and marketing, where permitted by applicable law.

For more information about the cookies and similar technologies we use, the purposes for which they are used and how you can manage your preferences, please see our Cookie Policy.

Where legally required, we will request your consent before using non-essential cookies or similar technologies.

USER-GENERATED CONTENT

Our Services may allow you to post product reviews, photographs, comments and other content.

Anything you voluntarily post in a public area of our website may become visible to other users or members of the public.

You should therefore avoid publishing personal information that you do not want to make publicly available.

We cannot guarantee that information voluntarily disclosed in public areas will remain private.

We are not responsible for the privacy, accuracy or use of information that you voluntarily disclose publicly or that you receive from third parties.

THIRD-PARTY WEBSITES AND LINKS

Our website may contain links to third-party websites, platforms, applications or services.

We encourage you to review the privacy and security policies of those third parties before providing them with personal information.

Timalsa is not responsible for the privacy practices, security, accuracy or reliability of third-party websites or services that we do not control.

A link to a third-party website does not necessarily mean that we endorse that website, service or its content.

Information shared on public or semi-public platforms, including social-media platforms, may be visible to other users of those platforms and may be processed according to their own terms and privacy policies.

SURVEYS AND CUSTOMER INSIGHTS

Where you choose to participate in a survey, we may process your responses to understand customer needs, preferences and satisfaction and to improve our products and shopping experience.

Where we intend to connect your survey responses with information relating to your customer account or purchase history, we will obtain specific consent where required by applicable law.

You may withdraw your consent at any time by contacting us using the contact details provided below.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Where possible, survey responses are analysed in aggregate or anonymised form.

We do not intentionally share individual survey responses with third parties for their own marketing purposes unless you have specifically agreed to such sharing or it is otherwise permitted by applicable law.

EXERCISING YOUR RIGHTS

Depending on your location and applicable data-protection law, you may have rights regarding your personal data.

These may include the right to:

• Request access to personal data we hold about you;

• Request correction of inaccurate or incomplete information;

• Request deletion of your personal data where legally applicable;

• Request restriction of certain processing;

• Object to certain processing;

• Withdraw consent where processing is based on consent;

• Request portability of certain personal data; and

• Lodge a complaint with the competent data-protection authority.

You may also have an absolute or otherwise applicable right to object to direct marketing.

You can unsubscribe from marketing emails at any time using the unsubscribe link included in those communications.

We may continue to send important non-promotional communications, such as information concerning your orders, account, transactions or contractual relationship with us.

To exercise your privacy rights or raise a privacy-related concern, please contact us at:

[PRIVACY EMAIL ADDRESS]

We may ask you to verify your identity before processing certain requests in order to protect your personal data.

Where permitted by applicable law, we will respond to valid requests within the applicable legal timeframe.

TRANSFER OF PERSONAL DATA

Your personal data may be processed by us or by our service providers in countries other than the country in which you live.

Where applicable law imposes requirements on international transfers of personal data, we will take appropriate measures and safeguards to ensure that your personal data receives an appropriate level of protection.

Such safeguards may include contractual protections, adequacy decisions or other legally recognised transfer mechanisms, depending on the applicable legal framework.

You may contact us using the information below if you require further information about international transfers of your personal data.

CHILDREN'S PRIVACY

Our Services are not intended to be used by children who are not legally permitted to use online shopping services under applicable law.

We do not knowingly collect personal data from children in circumstances where such collection is prohibited by applicable law.

If you believe that a child has provided us with personal data inappropriately, please contact us so that we can take appropriate action.

CONTACT US

Timalsa is responsible for processing your personal data in connection with the Services, subject to applicable data-protection law.

For questions about this Privacy Policy, to exercise your privacy rights or to raise a privacy-related concern, please contact us at:

Timalsa

Website: timalsa.com

Legal entity: TIMALSA

Phone number:0624203357

Email: Support@timalsa.com

Physical address: marrakech, 40000 , Morocco

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our Services, business practices, technology or applicable law.

When we make changes, we will publish the updated version on our website and revise the “Last updated” date accordingly.

Where required by applicable law, we may also notify you of material changes through an appropriate communication channel.

We encourage you to review this Privacy Policy periodically so that you remain informed about how we process your personal data.

Last updated: 25-08-2026