Privacy Policy

This policy explains what data we collect, why we collect it, how long we keep it, and how you can exercise your rights. It has been drawn up in accordance with Law No. 09-08 on the protection of individuals with regard to the processing of personal data.

Last updated: 2 August 2026

1. Who processes your data

The data controller is CROSS BORDERS TRADING COMPANY (a limited liability company with a share capital of 200,000 MAD), whose registered office is situated at 159 Boulevard La Résistance, 1st floor, No. D3, Casablanca, registered in the Casablanca Commercial Register under no. 253183, operating the website under the trading name Spartan Nutrition.

For any enquiries regarding your data: legal@spartannutrition.ma.

2. Data collected

We only collect what we need. Depending on your use of the website:

• Order: surname, first name, delivery address, town, telephone number, email address, contents of the basket, total amount, payment and delivery methods, and any order notes.
• Customer account: login details, order history, saved addresses.
• Forms: the information you enter in the contact form or reseller application form.
• Browsing: IP address, browser type, pages viewed, timestamps — technical data generated automatically.

We do not collect any sensitive data as defined by Law 09-08: neither health data, nor information regarding your origin or beliefs. Please do not provide us with such information in the free-text fields.

3. Purposes and legal bases

4. Retention periods

We do not retain your data indefinitely:

• Orders and invoices: 10 years, the retention period for accounting records as required by Moroccan law.
• Customer account: for as long as the account is active, then for 3 years after the last contact.
• Messages received via forms: 3 years after the last exchange.
• Marketing consent: 3 years from your last contact.
• Technical logs: 12 months.

Once these periods have elapsed, the data is deleted or irreversibly anonymised.

5. Recipients

Your data is neither sold, nor rented, nor exchanged. It is accessible to:

• to members of our team who need it to process your order;
• to our carrier, for the information strictly necessary for delivery: name, address, telephone number, amount to be collected;
• to our online payment provider, for card transactions;
• to our web host and technical service provider, for maintenance purposes;
• to administrative or judicial authorities, upon legal request.

Each of these service providers only has access to the data necessary for their specific role and is bound by a duty of confidentiality.

6. Transfers outside Morocco

Some technical service providers may host data outside Moroccan territory. These transfers are governed by appropriate contractual safeguards and carried out in accordance with the requirements of the CNDP.

7. Cookies

A cookie is a small file stored on your device when you visit a website. We use two categories:

• Strictly necessary cookies: these enable the website to function — such as remembering your shopping basket, login session and security. They cannot be disabled.
• Audience measurement cookies: these tell us which pages are being viewed, in aggregate form. They are only placed with your consent.

You can configure your browser at any time to refuse cookies or to be notified when they are placed. Refusing non-essential cookies does not prevent you from placing an order; however, refusing essential cookies will render your shopping basket unusable.

8. Security

The website uses HTTPS, with encrypted data transmission. Access to order data is restricted to authorised accounts and protected by a password. Our servers are backed up regularly.

As no system is infallible, we undertake, in the event of a data breach likely to pose a risk to your rights, to inform you and the CNDP as soon as possible.

9. Your rights

You have the following rights in relation to your data:

• Access: to obtain confirmation that data concerning you is being processed, and to receive a copy of it.
• Rectification: to have inaccurate or incomplete information corrected.
• Objection: to object, on legitimate grounds, to the processing of your data — in particular for marketing purposes — without having to provide a reason.
• Deletion: to request the erasure of data where there is no longer a legitimate reason for its retention.

To exercise these rights, please write to legal@spartannutrition.ma, specifying your request. You may be asked to provide proof of identity to prevent a third party from accessing your data. We will respond within 30 days.

You may also refer the matter to the National Commission for the Supervision of Personal Data Protection (CNDP) if you believe your rights have not been respected.

10. Minors

The website is not intended for persons under the age of 18 and we do not knowingly collect their data. If you become aware that a minor has provided us with information, please notify us: it will be deleted.

11. Changes

This policy may change, particularly in the event of changes to our systems or the relevant regulations. The date of the last update is shown at the top of the page. In the event of any substantial changes, we will inform you by appropriate means.