Privacy policy

The data controller is MAROC HUB DIGITAL SARL AU, a company under Moroccan law, 2 Rue Essanaoubar, 4th floor, Apt 12, Casablanca. Delivery Center is a product of this company.

We process your data under law no. 09-08 on the protection of individuals with regard to the processing of personal data. The Moroccan data-protection authority (CNDP) oversees its application.

Any question about your data: contact@centrelivraison.com.

Account — for every user: phone number (verified by a code sent on WhatsApp), full name, chosen language, account creation date. Email address — optional for couriers and senders, required for companies (on the company's domain): verified by a code sent by email, it is used to log in and to recover the account.

Company — for company accounts: company name, city, the manager's name and the manager's business email.

Courier profile — in addition to the account: city, vehicle type, covered cities, maximum parcel size accepted, short bio, verification status, counters of completed deliveries and ratings received.

Parcels — entered by the sender: pickup city and address, delivery city and address, name and phone of the contact at pickup and at delivery, size, weight and number of parcels, fragile flag, content description, and the amount to collect on delivery, if any.

Delivery photo — at handover, the courier photographs the parcel at the door with the app's camera (never from the photo library). If they cannot, they record why: refused by the recipient, a device problem, or another reason.

Activity — offers made and accepted, delivery statuses, ratings and comments exchanged between senders and couriers, reports, blocks, warnings, notifications received.

Technical — device identifier for notifications, app version, operating system, error reports, usage measurements (linked to your account's identifier, never to your name or number; collected only if you turn them on under “Settings & help” in the app), IP address and request counters for abuse protection.

We do not collect identity documents, bank details or continuous GPS location. The app does not track your location in the background.

When you post a parcel, you enter the recipient's name and phone, and sometimes those of a person at pickup. These people are not Delivery Center users.

You undertake to enter this information only if you are allowed to, and to inform the people concerned. We use it only to make the delivery possible and disclose it only to the courier who accepted it.

• To create and secure your account: the WhatsApp login code, protection against fraudulent logins.
• To run the marketplace: post parcels, receive and compare offers, track a delivery, connect the sender and the courier.
• To let the sender check a delivery with the delivery photo.
• To verify couriers before they can accept parcels.
• To manage the ratings, reports and warnings that protect both sides.
• To send you the notifications related to your deliveries.
• To answer your support requests.
• To detect abuse, fix failures and improve the service from aggregated statistics.
• To meet our legal obligations, in particular tax and accounting ones.

We do not use your data for targeted advertising and we do not sell it to anyone.

Verified couriers see posted parcels: cities, addresses, size, description, amount to collect. Contact phone numbers are disclosed only to the courier whose offer was accepted.

For each offer, the sender sees the courier's name, vehicle, rating and delivery history, then their phone number once the offer is accepted.

The delivery photo is visible only to the parcel's sender and to our team.

A user's rating is shown to the users they deal with as stars; written comments are read only by our team. Reports and warnings are not shown to the person concerned; our team reviews them. If you block someone, they are not told.

We rely on providers that act only on our instructions:

• Database and authentication hosting: Supabase, servers in Paris (France).
• Site and services hosting, and the routing of your connections: Cloudflare, Inc. (United States), in the Paris region (France); your connections pass through the Cloudflare data centre nearest to you.
• Login codes: WhatsApp Business, operated by Meta Platforms Ireland Limited (Ireland).
• Verification codes by email: Scaleway SAS (France), servers in Paris — only the recipient address, the subject and the code pass through, no other data.
• Notifications on your phone: Expo, and Apple's and Google's notification services.
• Error reports: Sentry.
• Usage measurements: PostHog, servers in the European Union.
• Abuse protection: Upstash (request counters).

Some of these providers are established outside Morocco, so your data is transferred to them. We are completing the declarations and authorisations the CNDP requires for these transfers.

We disclose data to Moroccan authorities when the law requires it, upon a duly justified request, or to establish, exercise or defend a legal claim.

• Account and profile data: as long as your account exists, then deleted within 30 days of its deletion.
• Parcels, offers, ratings and reports: for the life of the account; after the account is deleted, completed deliveries are kept in anonymised form for statistics and dispute handling. If cash collected on a delivery has not been confirmed as handed over to the sender, that delivery keeps the courier's name and phone number for the sender until it is settled, and for one year at most.
• Blocks: as long as both accounts exist.
• Delivery photo: 90 days after delivery, then permanently deleted.
• Login codes: a few minutes, for the duration of the verification.
• Error reports: 90 days at most.
• Usage measurements: 12 months at most.
• Records with accounting or tax value: the period required by Moroccan law, up to ten years.

Under law no. 09-08, you have the right to access, rectify and object to the processing of your data, and the right to have it deleted within the limits of our legal obligations.

You can change your name and courier details directly in the app. For any other request, write to contact@centrelivraison.com from the number linked to your account, or mention it. We answer within one month.

You may also refer the matter to the CNDP (www.cndp.ma) if you believe your rights are not respected.

centrelivraison.com uses strictly necessary cookies only: the chosen language and, for the administration area reserved to our team, a login session. No advertising cookie, no third-party tracker. You can refuse them in your browser; the site will still work.

The mobile app uses no cookies. It stores your language and session locally so it does not ask you to log in on every launch.

Your data is encrypted in transit and at rest. Database access is restricted by row-level access rules: a user only sees what concerns them. Login codes expire quickly and are limited in number. Our team accesses data only for support, courier verification and report handling, and every action is logged.

Delivery Center is for people aged 18 and over. We do not knowingly collect data from minors; if you believe a minor has created an account, write to us and we will delete it.

You can ask for your account to be deleted at any time. The procedure, what is deleted and what is kept are described on the "Delete my account" page.

We may update this policy. The date at the top of the page shows the latest version. For an important change, we notify you in the app before it takes effect.

MAROC HUB DIGITAL SARL AU — 2 Rue Essanaoubar, 4th floor, Apt 12, Casablanca, Morocco — contact@centrelivraison.com.