Privacy policy.

Data controller

The data controller is AGADIR WAVES, a Moroccan SARL with share capital of DH 100,000, Trade Register 28629 (Inezgane court), tax ID 53800855 and ICE 003299261000097, registered office: N° 89 rue Nador, ZI Tassila, Dcheira El Jihadia, Inezgane, Maroc. Contact for personal data requests: the Surfgear team, contact@surfgear.ma — +212 752-510380. This policy covers the online shop surfgear.ma.

Information and purposes

Depending on the service: identity and contact details for an account; selected items, address and delivery information for orders; payment references and transaction status when a provider is activated; correspondence for customer service; technical session information for the basket, sign-in and security.

Required fields are marked in forms. Without necessary information, the requested service cannot be provided. Optional information is not a condition of purchase. Marketing consent must not be required to order.

Grounds and recipients

Information is used to respond to your request, prepare and perform the contractual relationship, meet legal and accounting obligations and protect the service. An optional use requiring consent is subject to a separate choice.

Access is restricted to authorised AGADIR WAVES staff and necessary providers: Genious Communications for hosting; Aramex for delivery contact details; Payzone for payment once connected; accounting providers or advisers for the relevant obligations. Only the data necessary for their task is shared. Personal data is not sold.

Retention

• Customer accounts: during the active relationship. Internal policy: closure, deletion or anonymisation after three years without a sign-in or order, except records retained separately for a legal duty or dispute.
• Invoices and accounting records: ten years under article 211 of the Moroccan General Tax Code. Only order data necessary for that duty is archived; the period does not automatically apply to the entire account.
• Routine messages and complaints: two years after the request is closed, under the internal policy. Records needed for a warranty, dispute or legal obligation are separated until the applicable period ends.
• Audience measurement: a maximum of six months before deletion or anonymisation under CNDP deliberation 508-AU-2014; collection is currently disabled.

The three-year and two-year periods are internal choices, not universal statutory periods. The team reviews closure requests and retention deadlines; automatic deletion is not claimed.

Cookies and measurement

Necessary session elements support the basket, sign-in and security. A choice concerning optional trackers may be retained for six months.

Google Analytics 4 and Microsoft Clarity are prepared, but collection and recording remain disabled. Activation will require the applicable formalities, updated information and prior consent where required. Refusing optional trackers does not block purchases. Clarity session recording is not currently enabled.

Hosting, security and transfers

Genious Communications hosts the website under its Moroccan hosting offer. Administrative access is restricted and browsing uses HTTPS. No measure can guarantee zero risk.

Hosting in Morocco alone does not establish that all international transfers are absent: external services and their flows must be reviewed separately. Preparing Analytics and Clarity does not activate their transfers. Required CNDP formalities must be completed before any relevant activation.

Your rights

Under Moroccan law 09-08, you have rights of access, rectification and objection on legitimate grounds, subject to the law. You may withdraw optional consent for future use and request account closure, subject to applicable retention obligations.

Send your request to contact@surfgear.ma — +212 752-510380, or by post to AGADIR WAVES’ registered office, indicating the relevant service. Proportionate verification may be requested if identity is in doubt; do not spontaneously send a complete identity-document copy. You may also contact the CNDP.

CNDP formalities

CNDP formalities for Surfgear are in progress. No receipt or authorisation number has yet been confirmed for publication. This statement does not mean authorisation has been obtained; the reference and relevant information will be updated once confirmed.