Last updated:
1Scope of this policy
This policy covers information provided through the Bassamad website, account registration, newsletter subscriptions and requests. We use it to manage accounts, respond to enquiries and follow up with you.
2Account information
Mobile accounts store your name and mobile number. Email accounts store your verified email and name; a mobile number is not required. Google sign-in supplies a Google account identifier, verified email and name. Bassamad does not receive your Google password or access to your inbox.
3Forms, consultations and newsletters
Consultations include your name, mobile number, optional email, message, related product or page and submission time. Contact messages, follow-up status and internal notes are kept for handling your request. Newsletter subscriptions store an email address and subscription time.
4Cookies and visit statistics
Sign-in uses an essential session cookie inaccessible to page JavaScript, valid for up to seven days. Google sign-in uses a temporary security cookie for up to ten minutes. Visit statistics record a temporary random identifier, page path and activity time, without storing IP addresses in the application statistics table. The hosting provider may maintain separate server access logs.
5Service providers and external content
Mobile numbers and email addresses are sent to the relevant delivery provider to send verification codes. Google sign-in is optional. Opening maps or externally hosted videos can disclose connection information to those providers under their own policies. Website data is held on hosting infrastructure and backups.
6Data retention
Mobile codes expire after two minutes and email codes after ten minutes; used codes cannot be reused. Sessions expire within seven days. Statistics older than 90 days are cleared during visit processing. Accounts, requests and subscriptions remain until a deletion request is handled or the company removes them. Backup deletion follows the applicable backup retention cycle.
7Access and protection
Access to submitted information is restricted to administration. Sign-in codes and session tokens are stored as hashes. Request limits and code checks help reduce misuse. Do not include banking details, passwords or unrelated sensitive information in messages.
8Correction, deletion and unsubscribe requests
You can edit your name in your account. To request access, account or message deletion, or newsletter removal, contact info@bassamad.com or use the contact form and describe your request. Identity verification may be required to protect your account. Any applicable retention limitation will be explained when handling the request.
9Policy updates
This page may be updated as website features or providers change. The latest revision date appears above. Contact Bassamad if you have questions about how information is used.