Privacy Policy

1. Who we are

Star Fish Hajjoub Address: Av. Ahfir, El Jadida, Morocco Email: info@starfishhajjoub.ma Phone: +212 673-798901 Website: https://starfishhajjoub.com

2. Data we collect

Depending on the service you use, we may collect: • Identity & contact details (name, phone, email) • Reservation details (date, time, guests, table, special requests, pre-orders) • Delivery details (address, GPS pin, order items, payment method) • Dine-in / loyalty details (guest profile, OTP verification, points) • Technical data (IP address, device/browser type, basic logs) • Communications you send us (WhatsApp, email, forms)

3. Why we use your data

We process data to: • Confirm reservations and delivery/dine-in orders • Contact you about order status, arrival, or issues • Operate loyalty / verification (OTP) • Improve service quality and security • Comply with legal and accounting obligations • Send operational messages related to your request (not unrelated marketing unless you opt in)

4. Legal bases

We rely on contract performance (fulfilling your booking/order), legitimate interests (security, service improvement), consent where required (optional marketing / cookies beyond essentials), and legal obligations.

5. Sharing

We do not sell your personal data. We may share limited data with payment/SMS/email providers, delivery staff assigned to your order, and authorities when legally required. Processors act under instructions and confidentiality.

6. Retention

We keep reservation/order records for as long as needed for service, dispute handling, and legal retention (typically up to the applicable accounting period), then delete or anonymize them where possible.

7. Your rights

Subject to Moroccan and applicable law, you may request access, correction, deletion, restriction, or objection regarding your personal data, and withdraw consent where processing is consent-based. Contact info@starfishhajjoub.ma to exercise these rights.

8. Security

We apply reasonable technical and organizational measures (access controls, encrypted transport where supported, staff access limits). No method of transmission is 100% secure.

9. Children

Our services are intended for adults placing orders/reservations. If you believe a minor provided data, contact us to remove it.

10. Changes

We may update this policy. The “Last updated” date will change when we do. Continued use of the site after updates constitutes acknowledgment of the revised policy.