Privacy policy
Last updated: September 28, 2026
This privacy policy explains how Carmel Cosmetics Labs collects, uses and protects the personal data of people who visit the website carmelcosmeticslabs.com, contact us or become customers. It applies to all language versions of the site.
1. Data controller
The data controller is Carmel Cosmetics Labs, a limited liability company (Société à Responsabilité Limitée) under Moroccan law with a share capital of MAD 1,000,000, registered in the Agadir Trade Register under number 25081, with its registered office at B1006 Zone Industrielle Aït Melloul, 86150, Morocco (hereinafter “Carmel”, “we”).
Contact for any question about your data: [email protected] · Phone: +212 808 504 500.
2. Legal framework
We process your data in accordance with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data, under the supervision of the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP).
Where our services are aimed at people located in the European Union (in particular in France), we also apply Regulation (EU) 2016/679 (GDPR).
3. Data we collect
| Source | Data concerned |
|---|---|
| Quote, contact and “Talk to an expert” forms | Last name, first name, email, phone, company, country, product categories you are interested in, description of your project |
| “Become a distributor” form | Identity, contact details, company, distribution area, business information provided |
| Newsletter sign-up | Name, email address |
| Online appointment booking | Name, email, phone, chosen time slot, information entered when booking |
| Business relationship (quotes, orders, contract manufacturing) | Contact details of your representatives, billing and delivery data, history of communications and orders, brand materials provided (logos, texts, specifications) |
| Job applications (Careers page) | CV/résumé, cover letter, contact details and any information you choose to send us |
| Browsing the site | IP address, device and browser type, pages viewed, source of the visit, cookie identifiers (see article 8) |
Mandatory fields are indicated in the forms. Without this information, we cannot process your request. We do not collect sensitive data (health, opinions, etc.) and ask you not to include any in free-text fields.
4. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Responding to your quote, contact or appointment requests | Pre-contractual measures taken at your request |
| Performing our contracts: formulation, manufacturing, packaging, delivery, invoicing, after-sales service | Performance of the contract |
| Complying with our legal obligations (accounting, tax, regulatory traceability of cosmetic products) | Legal obligation |
| Sending you our newsletter and offers | Your consent, which you may withdraw at any time |
| B2B marketing to professionals, about offers related to their business | Legitimate interest (you may object at any time) |
| Measuring site traffic and improving our content | Your consent where required by law, otherwise our legitimate interest |
| Measuring the effectiveness of our advertising campaigns and showing you relevant ads | Your consent where required by law |
| Protecting the site against spam, fraud and attacks | Legitimate interest |
| Reviewing job applications | Pre-contractual measures taken at your request |
5. Recipients of your data
Your data is intended for Carmel's authorized teams (sales, R&D, production, quality, administration) and, where necessary, our subsidiaries and establishments. It may be shared with service providers acting on our behalf and according to our instructions:
- hosting, security and delivery of the site (including Cloudflare);
- anti-spam protection for forms (Google reCAPTCHA, Cloudflare Turnstile);
- appointment booking (Calendly);
- audience measurement and advertising (Google Tag Manager, Google Analytics, Google Ads);
- customer relationship management, email and newsletter tools;
- carriers and freight forwarders, for the delivery of your orders;
- our advisers (lawyers, chartered accountants, auditors) and, upon request, the competent administrative or judicial authorities.
We never sell or rent your personal data.
6. Transfers outside Morocco and the European Union
Some of our service providers (in particular Google, Cloudflare and Calendly) may process data outside Morocco and the European Union, especially in the United States. These transfers are governed in accordance with Law 09-08 and, for people located in the European Union, by the safeguards provided for by the GDPR: an adequacy decision (including the EU–US Data Privacy Framework) or the European Commission's standard contractual clauses.
7. Retention periods
| Data | Retention period |
|---|---|
| Quote and contact requests not followed up | 3 years from your last contact |
| Customer data and order files | For the entire business relationship, then 10 years for accounting records and traceability documents required by law |
| Newsletter | Until you unsubscribe |
| Online appointments | 3 years from the appointment, unless there is a business relationship |
| Unsuccessful job applications | 2 years, unless you request deletion |
| Cookies and trackers | 13 months maximum; audience measurement data kept for 14 months maximum |
At the end of these periods, the data is deleted or anonymized.
8. Cookies and trackers
A cookie is a small file placed on your device when you visit a website. We use:
- necessary cookies for the operation and security of the site (Cloudflare security, form anti-spam, language choice, cart);
- audience measurement cookies (Google Analytics, via Google Tag Manager), to understand site traffic and improve our content;
- advertising cookies (Google Ads), to measure conversions from our campaigns and show you relevant ads;
- third-party cookies set by content embedded in certain pages: YouTube videos, Google Maps, Spotify player, Trustpilot reviews, Calendly booking module.
You can accept or refuse non-necessary cookies at any time through your browser settings (Chrome, Firefox, Safari and Edge all offer this option). You can also opt out of Google Analytics audience measurement with the Google Analytics opt-out browser add-on, and manage Google ad personalization from Google ad settings. Refusing these cookies does not prevent you from using the site.
9. Your rights
Under Law 09-08, you have the right of access, rectification and objection, including to direct marketing. If you are located in the European Union, you also have, under the conditions laid down by the GDPR, the right to erasure, to restriction of processing, to portability of your data and the right to withdraw your consent at any time.
To exercise your rights, write to us at [email protected] or by post to: Carmel Cosmetics Labs, B1006 Zone Industrielle Aït Melloul, 86150, Morocco. We may ask you to prove your identity. We respond within one month.
Every newsletter contains an unsubscribe link. If you believe your rights have not been respected, you may lodge a complaint with the CNDP (Morocco) or, if you reside in the European Union, with the data protection authority of your country (in France: the CNIL).
10. Data security
We implement appropriate technical and organizational measures to protect your data against loss, unauthorized access or disclosure: encrypted connection (HTTPS), protection of the site by a web application firewall, access restricted to authorized persons only, and confidentiality commitments. Technical and commercial information entrusted to us as part of a project (formulas, specifications) is also protected by our contractual confidentiality obligations.
11. Minors
Our services are intended for professionals and adult project owners. We do not knowingly collect data concerning minors.
12. Links to other sites
The site contains links to third-party sites (social networks, review platforms, official sources). We are not responsible for their data practices: we invite you to consult their own privacy policies.
13. Changes to this policy
We may update this policy to reflect changes in our services or in regulations. The date of the last update appears at the top of this page. For the terms applicable to our sales and services, see our General Terms and Conditions of Sale.