Privacy policy
Last updated: October 14, 2026
This policy explains what personal data MoumniWorld collects, why, who can see it and what rights you have, in accordance with Moroccan Law no. 09-08 on the protection of individuals with regard to the processing of personal data.
1. Who is responsible
The data controller is Mohamed Moumni (Galerie Moumni), ZAE Qu Hassani, Youssoufia, Morocco . Contact: [email protected], +212 5 24 64 98 62.
The processing of data on this website has been declared to the National Commission for the Control of Personal Data Protection (CNDP), receipt no. [TO COMPLETE].
2. What we collect and why
- Contact form: your name, email address, the type of inquiry and your message. We use them only to answer you.
- Account: your name, email address and password (stored encrypted, never in clear text). If you sign in with Google or GitHub, we receive your name, email address and profile picture from that service instead of a password. We use them to let you sign in and, once the shop opens, to follow your orders. We also keep the date on which you accepted this policy.
- Technical data: the pages visited, the type of device and browser and an approximate location (country or city), collected in aggregated form to keep the site secure and measure its performance. Your IP address is processed temporarily to prevent abuse such as spam.
We do not sell your data and we do not use it for advertising.
3. Why we may use your data
We process your data with your consent (for example when you send a message or create an account), to meet legal obligations, or for our legitimate interest in keeping the site secure.
4. Who receives your data
Only the people and providers who need it:
- Mohamed Moumni and the gallery team, to answer you.
- Google or GitHub, only if you choose to sign in with them. They learn that you signed in to this website and handle your data under their own privacy policies.
- Vercel (Vercel Inc.): hosting of the website, visit statistics and performance measurement.
- MongoDB Atlas: the database where accounts are stored, hosted in MongoDB Atlas (Ireland, European Union).
- Telegram: delivers the messages sent through the contact form to the artist's messaging account.
- The authorities, only where the law requires it.
5. Transfers outside Morocco
Some of these providers operate outside Morocco, notably in the European Union and the United States. We transfer only the data needed for the service, and only as permitted by Law 09-08 and the rules of the CNDP. When you send a contact message or create an account, you agree to this transfer.
6. How long we keep your data
- Contact messages: up to 2 years after your last exchange with us.
- Accounts: as long as your account exists. You can ask us to delete it at any time.
- Technical data: in aggregated form, for a limited period.
7. Cookies and similar technologies
MoumniWorld uses only the storage needed for the site to work:
- Language: a cookie remembers the language you chose.
- Sign-in: cookies keep you signed in, only if you have an account.
- Cart: items you add to the cart are saved only in your browser's local storage, so you do not lose them when you reload the page.
- Statistics: Vercel Analytics and Speed Insights measure visits and speed in aggregated form and are designed to work without cookies that follow you across websites.
We do not use advertising or social-media tracking cookies. You can delete cookies and local storage at any time in your browser settings.
8. Market and cart (placeholders)
The Market and cart pages are placeholders and are not functional yet: no order or payment can be made, and we collect no order or payment data. We will update this policy before the shop opens.
9. Your rights
Under Law 09-08 you have the right to:
- know what data we hold about you (access);
- have inaccurate or incomplete data corrected;
- have your data deleted where the law allows it;
- object, for legitimate reasons, to the processing of your data, and refuse to receive commercial messages.
To exercise these rights, write to [email protected] with your name and your request. We answer as quickly as possible. You can also file a complaint with the CNDP (www.cndp.ma).
10. Security
Our connection is encrypted (HTTPS), passwords are stored encrypted, and access to the database and the administration area is restricted. No system is perfectly secure, but we take reasonable measures to protect your data.
11. People in photographs
Some photographs show identifiable people. If you appear in a photograph on this website and want it removed or changed, write to [email protected] and we will act promptly.
12. Children
This website is intended for adults. If you are under 18, please ask a parent or guardian before creating an account or sending us your data.
13. Changes to this policy
We may update this policy. The date of the last update is shown at the top of this page.
14. Contact
For any question about your data: [email protected], +212 5 24 64 98 62, ZAE Qu Hassani, Youssoufia, Morocco .