Privacy policy

This policy explains what personal data MySplit.ma ("MySplit", "we"), publisher of the website https://mysplit.ma, collects, why, and how it is protected. It applies to the Site, the customer account and exchanges with our team on WhatsApp and by email, in accordance with law no. 09-08 on the protection of individuals with regard to the processing of personal data.

1. Data controller

The data controller is MySplit.ma. For any question about your data: contact@mysplit.ma.

2. Data collected

We only collect the data needed for our services:

• Identity and contact: name, phone number (WhatsApp), email address if you provide it.
• Orders and subscriptions: offers bought, amounts, dates, order history, assigned profiles, exchanges with support.
• Payment: payment method chosen and the screenshot or transfer receipt you send us. We do not collect any bank card data.
• Customer account: password (stored only in encrypted, irreversible form), loyalty points, MySplit balance, referrals.
• Technical data: IP address, browser and device type, pages viewed, advertising click identifiers (for example those sent by Meta or TikTok when you arrive from an ad).

3. Purposes and legal bases

Your data is used to:

• process your orders, check your payments, deliver your access and provide support (performance of the contract);
• manage your customer account, loyalty points, balance and referrals (performance of the contract);
• remind you when your subscriptions end and offer to renew them (legitimate interest; you can object at any time);
• verify your phone number at sign-up and secure your account (legitimate interest and security);
• measure how well our ads work and improve the Site (legitimate interest);
• meet our legal obligations, in particular accounting and tax obligations.

4. Recipients

Your data is only accessible to the authorised MySplit team and to the service providers who help us provide the service, limited to what they need:

• Hostinger (hosting of the Site, the database and emails);
• WhatsApp (Meta Platforms), for the conversations you start with us;
• Meta and TikTok, for ad measurement, only if you have accepted advertising cookies: when an order is paid, we send them the purchase event with your phone number and email in hashed form (irreversibly transformed), along with the technical click identifiers;
• Google Tag Manager, the tool that manages the Site's measurement tags, loaded only after your consent;
• an SMS provider, for the verification code sent to your number at sign-up.

We never sell your data. Some providers are located outside Morocco; these transfers are limited to the purposes above.

5. Cookies and audience measurement

On your first visit, a banner lets you accept, refuse or customise cookies, just as easily one way as the other. There are three categories:

• Necessary: cart, sign-in to your account and security, as well as where your visit comes from (for example "TikTok ad" or "Google search"), without any identifier or personal data, kept for 90 days at most so we know which channels bring us customers. Always on.
• Audience measurement: understanding how the Site is used (Google Tag Manager / Google Analytics). Set only with your consent.
• Advertising: measuring how well our ads work and showing relevant offers (Meta, TikTok). Set only with your consent.

Until you make a choice, only necessary cookies are used. Your choice is kept for 6 months and you can change it at any time with the "Manage cookies" link at the bottom of every page. If you refuse advertising cookies, no data related to your orders is sent to Meta or TikTok.

6. Retention periods

• Order and billing data: 10 years, to meet our accounting and tax obligations.
• Customer account: for as long as the account is used, then 3 years after the last activity.
• Exchanges with support: 3 years after the request is closed.
• Verification codes and sign-in links: from a few minutes to a few days, depending on their validity.
• Technical and measurement data: 13 months at most.

7. Security

We protect your data with appropriate measures: encrypted connection (HTTPS), passwords stored in encrypted, irreversible form, encrypted login details for shared accounts, and access to the administration restricted to the authorised team and limited according to each person's role.

8. Your rights

In accordance with law no. 09-08, you have a right of access, rectification and objection, on legitimate grounds, to the processing of your data, as well as the right to object at any time to the use of your data for marketing purposes. To exercise these rights, write to us at contact@mysplit.ma or on WhatsApp at +212 6 10 73 64 87, stating your phone number. We reply as quickly as possible. You can also contact the National Commission for the Control of Personal Data Protection (CNDP, www.cndp.ma).

9. Minors

The Site is intended for adults. Minors must obtain the consent of their parents or guardians before placing any order.

10. Changes to this policy

We may update this policy, in particular for a new service or a change in the law. The date of the last update appears at the top of this page.