Privacy Policy

The data controller responsible for the processing of your personal information collected on this website (stromax.store) is Stromax, an e-commerce platform operating in the Kingdom of Morocco under the joint leadership of Saad Gharrab and Abdessamad El Jabiry.

We process personal data in strict compliance with the provisions of Moroccan Dahir No. 1-09-15 of Safar 22, 1430 (February 18, 2009) enacting Law No. 09-08 relating to the protection of individuals with regard to the processing of personal data, and according to the recommendations of the National Commission for the Control of the Protection of Personal Data (CNDP).

We only collect personal information that is strictly necessary to provide our e-commerce services, process your purchase orders, and successfully deliver your parcels:

*Note: Stromax does not collect, process, or store credit card or bank account credentials on our servers. All transactions are settled via Cash on Delivery (COD).

We collect personal information directly from you when you:

• Fill out and submit our online order checkout form;
• Register an account or update your profile on the website;
• Contact our customer support team by phone, email, or contact form;
• Interact with our website using essential technical session cookies.

Your data is processed strictly for legitimate operational purposes:

• Order Verification & Fulfillment: To verify your order details, confirm your delivery address, and assemble the ordered merchandise.
• Delivery Logistics: To generate shipping manifests and enable our delivery couriers to contact you via telephone to schedule delivery.
• Customer Support: To respond to your inquiries, answer product questions, and assist with any reported order issues.
• Account Management: To enable you to log in securely, review order history, and manage saved preferences.
• Platform Security: To detect and prevent fraudulent orders, abusive behavior, and unauthorized access.

To complete physical delivery of your purchases, Stromax shares necessary contact details (your name, telephone number, city, delivery address, and order parcel reference) with our authorized domestic delivery partners and couriers operating across Morocco.

Our courier partners are strictly bound to use this information solely for the purpose of executing the delivery and collecting Cash on Delivery payments. We do not authorize third-party partners to retain, share, or repurpose your information for any other activity.

Stromax implements robust technical and organizational security measures to protect your personal information against unauthorized access, loss, destruction, alteration, or disclosure:

• Encrypted Passwords: Passwords are protected using modern bcrypt hashing with cryptographic salts; plain-text passwords are never stored.
• Secure Sessions: User authentication tokens are stored in secure, HttpOnly cookies inaccessible to client-side scripts, protecting against cross-site scripting (XSS).
• Access Control: Administrative access to order records and user data is restricted strictly to authorized administrators via verified credentials and role-based access control (RBAC).
• Database Protection: Data is hosted in secured server environments with regular automated backups.

Our platform uses essential technical cookies and browser storage (such as localStorage) to enable shopping cart memory, keep your login active, and record your cookie banner choice.

Stromax does not deploy cross-site advertising trackers or third-party behavioral profiling cookies. For detailed information on our cookie implementation and how to configure your browser settings, please consult our dedicated Cookie Policy.

In accordance with Moroccan Law No. 09-08 relating to the protection of individuals with regard to the processing of personal data, you are entitled to exercise the following statutory rights:

To exercise any of these statutory rights, you may submit a written request accompanied by proof of identity to our dedicated privacy contact at stromax@stromax.store.

Personal data collected for customer order processing is retained for the duration necessary to fulfill the order, address potential delivery or warranty inquiries, and comply with Moroccan commercial, accounting, and tax retention obligations.

Registered user account records remain active until the customer chooses to delete their account or after prolonged inactivity, following which records are either securely purged or anonymized.

If you have any questions, inquiries, or requests regarding this Privacy Policy or our data protection practices, please contact us: