Your privacy, respected and protected.
This policy explains how we collect, use, and disclose your personal data when you visit our site, use our services, or make a purchase.
As a Moroccan brand that ships worldwide — including to the EEA and the UK — we comply with the GDPR and UK GDPR. Athile is built on WordPress and powered by WooCommerce to deliver these Services safely and efficiently.
Personal information we collect
"Personal information" means data that identifies or can be reasonably linked to you. Depending on how you interact with our store, we may collect:
- Contact details
- Name, billing and shipping address, phone number, and email address.
- Financial information
- Payment card details, transaction history, and confirmations — processed securely via our payment providers. We do not store your raw card numbers on our servers.
- Account information
- Username, password, security questions, and personal shopping preferences.
- Transaction information
- Items you view, add to cart, purchase, return, or exchange.
- Communications
- Details from any customer support inquiries or messages you send us.
- Device & usage
- IP address, browser type, network connection, and how you navigate and interact with our site.
How we source your information
- Directly from you
- When you create an account, place an order, or contact our support team.
- Automatically
- Through cookies and similar tracking technologies as you navigate our site (see Cookies & tracking below).
- From service providers
- Trusted partners — like our web host and payment gateways — who help us operate securely.
- From marketing partners
- To help us tailor our offerings and advertisements to your interests.
Cookies & tracking. We use cookies and similar technologies, which fall into the following categories:
- Essential cookies
- Required for the site to function — cart, secure checkout, account login, and remembering your preferences. These cannot be switched off in our systems. Legal basis Our legitimate interest in providing a working, secure store.
- Analytics cookies
- Help us understand how visitors use the site so we can improve it — for example, which pages are visited and how customers move through checkout. Legal basis Your consent.
- Marketing cookies
- Used to measure and personalize advertising, including pixels from partners such as the Meta (Facebook) Pixel and Google. Legal basis Your consent.
Where required, we request consent for non-essential cookies through our cookie banner. You can change or withdraw your choices at any time via the banner, or by adjusting your browser settings to block or delete cookies.
How we use your information
We use your data strictly to improve your Athile experience and run our business effectively. Under the GDPR we must have a lawful basis for each use — mapped below.
- Fulfilling orders & accounts
- Processing payments, arranging shipping, managing your account, and providing the products and services you request. Legal basis Performance of a contract with you.
- Customer support
- Responding to your questions, handling returns and exchanges, and providing effective assistance. Legal basis Performance of a contract, and our legitimate interest in supporting customers.
- Marketing & advertising
- Sending promotional updates and showing relevant ads based on your interests and activity. Legal basis Your consent (withdrawable at any time).
- Personalizing your experience
- Tailoring product recommendations and content to your preferences. Legal basis Our legitimate interest, or your consent where required.
- Security & fraud prevention
- Authenticating your account, ensuring safe checkout, and monitoring for fraudulent or malicious activity. Legal basis Our legitimate interest in keeping our store and customers secure.
- Legal & tax compliance
- Retaining transaction and accounting records, responding to legal requests, and enforcing our terms of service. Legal basis Compliance with a legal obligation, and our legitimate interest in protecting our rights.
Where we rely on legitimate interest, we have weighed it against your rights and freedoms. Where we rely on consent, you may withdraw it anytime without affecting processing carried out before withdrawal.
How we share your information
We do not sell your personal data.
We only share it in specific circumstances to provide our Services:
- Essential vendors & plugins
- Third parties handling payment processing (e.g. Stripe, PayPal), analytics, cloud storage, and shipping on our behalf.
- Marketing partners
- To support personalized advertising. You can opt out of targeted advertising at any time.
- With your consent
- When you explicitly request it — such as using social media logins.
- For legal reasons
- In business transfers (like mergers), to comply with legal obligations, or to protect the rights and safety of Athile and our customers.
Our e-commerce platform & hosting
Our store is built on WordPress and uses the WooCommerce e-commerce plugin. Data you submit is stored securely on our hosting servers and managed through our WordPress database.
We also use trusted third-party payment gateways to process transactions. These adhere to strict PCI-DSS standards for the safe handling of your financial information. For specifics on data collected by WooCommerce (developed by Automattic), you can review the Automattic Privacy Policy.
Your privacy rights & choices
Depending on where you live (including the UK, EEA, and certain US states), you have significant rights over your data.
- Access / know
- Request a copy of the personal information we hold about you.
- Delete
- Request deletion of your personal information from our records.
- Correct
- Ask us to update or fix inaccurate data.
- Data portability
- Request your data in a portable, machine-readable format.
- Opt-out of targeted ads
- Opt out of data sharing for targeted advertising. We honor Global Privacy Control (GPC) browser signals as a valid opt-out.
- Withdraw consent / object
- In the UK & EEA, you may withdraw consent, object to processing based on legitimate interest, or ask us to restrict processing at any time.
Right to lodge a complaint: if you are a resident of the EEA or the UK and believe we are unlawfully processing your personal information, you have the right to lodge a complaint with your local data protection supervisory authority (in the UK, the Information Commissioner's Office; in the EEA, the authority in your country of residence).
Managing communications: unsubscribe from promotional emails anytime via the link at the bottom of our messages. We'll still send essential updates about your orders or account.
Security & data retention
While no digital platform is 100% impenetrable, we employ robust security measures to protect your data, including SSL/HTTPS encryption across our site and checkout. We retain your information only as long as necessary for the purposes set out in this policy.
- Transaction & billing records
- Retained for as long as required by applicable tax, accounting, and commercial-law obligations.
- Account information
- Kept while your account remains active, and removed after an extended period of inactivity.
- Marketing data
- Retained until you withdraw consent (opt out), then removed from our marketing lists.
- Support communications
- Kept only as long as needed to resolve your query and for a reasonable period afterward.
When personal data is no longer needed, we securely delete or anonymize it. Please note we are not responsible for the privacy practices of third-party websites linked to our store.
Children's data
Athile is designed for adults. We do not knowingly collect personal information from children under the age of majority in their jurisdiction. If you believe a child has provided us with their data, please contact us so we can promptly delete it.
International data transfers
As a global brand based in Morocco, your information may be transferred, stored, and processed outside your home country (including outside the EEA or UK). When we transfer the personal data of EEA or UK residents internationally, we rely on legally recognized transfer mechanisms — such as the European Commission's Standard Contractual Clauses (SCCs) — to keep your data protected to GDPR standards.
Data Controller
Athile is the Data Controller responsible for your personal information. Our registered business address is listed in the Contact us section below, and you can reach us there to exercise any of your rights.
Because we are based in Morocco, EEA and UK residents may contact us directly about any matter relating to their personal data, and you retain the right to lodge a complaint with your local data protection supervisory authority.
Questions about this policy, wish to exercise your rights, or have a complaint about how we handle your data? We're here to help.
contact@athile.com