1. Who are we?
The website https://utamia.com is operated by M. Said Lakssir, the data controller responsible for the personal data collected through the UTAMIA website.
UTAMIA is a woodworking, custom manufacturing, and CNC services business located in Marrakech, Morocco.
For any question regarding this policy or the use of your personal data, you can contact us at the following address:
Email: contact@utamia.com
2. Purpose of this policy
This policy explains what personal data may be collected on the UTAMIA website, why it is used, to whom it may be disclosed, and how you can exercise your rights.
UTAMIA seeks to limit collection to information useful for responding to requests, preparing quotations, managing customer accounts, processing orders, and ensuring the operation of the website.
3. Personal data collected
Depending on how you use the website, UTAMIA may collect the following categories of data.
Contact form and quotation request
When you submit a request, the following information may be collected:
- full name;
- telephone number;
- WhatsApp number, when provided;
- email address;
- city or project area;
- type of request or service;
- type of project;
- dimensions or characteristics provided;
- desired material or finish;
- project description;
- preferred contact method;
- consent relating to the processing of the request.
Fields marked as required are necessary to record and properly process the request. Other information remains optional.
UTAMIA currently does not provide public file uploads in the form. You may state in the description that photos, plans, sketches, or references are available.
Orders and purchases
When an order is placed on the website, the following data may in particular be collected:
- first and last name;
- billing address;
- delivery address;
- city and postal code;
- telephone number;
- email address;
- products ordered;
- quantities;
- order amount;
- delivery method;
- payment method;
- order history and status;
- information necessary for after-sales service.
UTAMIA does not directly collect bank-card numbers when card payment is not offered on the website.
When cash on delivery is used, information relating to the choice of this payment method is recorded with the order.
Customer account
When an account is created, UTAMIA may retain:
- your name;
- your contact details;
- your saved addresses;
- your order history;
- information necessary for account management.
Passwords are managed by the WordPress/WooCommerce system and are not accessible to UTAMIA in plain text.
Technical data
When you use the website, certain technical data may be processed automatically:
- IP address or derived technical representation;
- browser type;
- device type;
- operating system;
- pages viewed;
- date and time of visit;
- session information;
- technical events necessary for website security.
The request form may use a temporary hashed technical fingerprint to limit abusive submissions, detect duplicates, and protect the website. The full IP address is not intended to be stored in quotation requests.
4. Purposes of processing
The data collected may be used to:
- answer general questions;
- review a quotation request;
- understand the needs of a project;
- contact the person who submitted a request;
- prepare the next steps of a commercial discussion;
- record and manage orders;
- organize payment and delivery;
- manage customer accounts;
- provide administrative and commercial follow-up;
- process requests relating to an order;
- prevent abusive submissions and fraud attempts;
- ensure the security and proper operation of the website;
- comply with applicable administrative, accounting, or legal obligations;
- respond to requests for access, correction, or deletion.
The information provided is not used to send unsolicited commercial communications unless separate consent is subsequently obtained.
5. Basis and consent
When you use a form, the information is provided voluntarily so that UTAMIA can process your request and contact you again.
The consent checkbox in the form is not pre-selected.
When an order is placed, certain data is necessary for processing, delivery, payment, and follow-up of the commercial relationship.
You are encouraged to provide accurate information and not to disclose sensitive data that is not necessary for processing your request.
6. Recipients of the data
Data is accessible only to people who need it to process requests, manage orders, administer the website, or provide technical services.
Depending on the circumstances, it may be accessible to:
- Mr Said Lakssir, operator of the UTAMIA website;
- authorized persons involved in managing requests and orders;
- the hosting provider;
- technical providers responsible for website maintenance;
- WordPress and WooCommerce as technical solutions used by the website;
- carriers or delivery providers when an order is to be delivered;
- messaging providers necessary for sending notifications;
- competent authorities when required by law.
Data is not sold to third parties.
No service provider should receive more information than is necessary to perform its task.
7. Hosting and processing outside Morocco
The website uses hosting services and technical tools provided by external service providers.
Depending on server locations and the services actually used, certain data may be hosted or processed outside Morocco.
The actual location of processing must be verified with the relevant service providers. When processing involves a transfer of personal data abroad, the applicable formalities with the National Commission for the Control of Personal Data Protection must be examined before or during implementation of the processing.
8. Retention period
Personal data is retained only for a period appropriate to its purpose.
Contact and quotation requests
Requests are retained for the time necessary to review them, follow up the relationship, and potentially prepare the project.
When a request does not lead to a commercial relationship, it may be deleted or anonymized after the follow-up period determined by UTAMIA has expired.
Orders
Order-related data may be retained for the time necessary for:
- processing and delivery of the order;
- after-sales service;
- processing a claim;
- applicable accounting, tax, or administrative obligations;
- the defense of UTAMIA’s or the customer’s rights.
Customer accounts
Information linked to an account is retained while the account remains active or for as long as necessary to manage associated orders.
Security data
Technical data used to protect against abuse, limit submissions, and detect duplicates is retained for a short period appropriate to that purpose.
UTAMIA must precisely define and document the retention periods applied within its internal organization.
9. Cookies
The website may use strictly necessary cookies to:
- ensure the operation of WordPress and WooCommerce;
- maintain a user session;
- remember the contents of the cart;
- allow access to the customer account;
- secure forms;
- manage login for authorized users;
- record certain technical choices.
Cookies necessary for the cart, ordering, login, or security are used to provide the requested features.
Other cookies may be added only if additional tools, such as audience measurement services, embedded videos, external maps, or advertising tools, are enabled.
This policy must be updated if UTAMIA adds a service that creates new cookies or transmits data to a third party.
10. External content and services
Some pages may contain links to external services, for example:
- WhatsApp;
- Facebook;
- Instagram;
- TikTok;
- Google Maps;
- a delivery or payment provider.
When you click an external link, you leave the UTAMIA website. Any subsequent processing depends on the policy of the service concerned.
UTAMIA does not intentionally integrate external content or tracking services without necessity. This policy must be updated if new embedded content or external tools are added.
11. Security
UTAMIA implements technical and organizational measures intended to limit:
- unauthorized access;
- accidental disclosure;
- unauthorized modification;
- data loss;
- automated or abusive submissions;
- access to requests by unauthorized persons.
The request form uses, in particular, validation, session control, attempt limiting, and duplicate-detection mechanisms.
Quotation requests are stored as private content in the website administration area and are not intended to be publicly accessible.
However, no IT system can guarantee absolute security. In the event of an identified incident, UTAMIA will take the measures reasonably necessary to limit its consequences.
12. Your rights
In accordance with applicable personal-data protection regulations, you may request:
- access to data concerning you;
- correction of inaccurate or incomplete data;
- updating of your information;
- objection to certain processing on legitimate grounds;
- deletion of data when no obligation or legitimate reason requires its retention.
These rights may be exercised by sending a request to:
Email: [CONTACT EMAIL ADDRESS]
Your request must make it possible to identify the data concerned. UTAMIA may request reasonable additional information to verify that the request comes from the person concerned.
Certain data cannot be deleted immediately when it must be retained to comply with a legal, accounting, administrative, or contractual obligation, or to establish, exercise, or defend a right.
You may also contact the National Commission for the Control of Personal Data Protection — CNDP if you believe your rights have not been respected.
13. Information relating to the CNDP
Personal-data processing carried out by a website may be subject to a declaration, authorization, or transfer formality with the CNDP, depending on the nature of the data, the purposes, and the hosting location.
UTAMIA will publish a receipt or authorization number only after it has actually been obtained.
When a CNDP number is assigned, this policy and the notices displayed at the time of collection may be updated.
14. Comments
The primary purpose of the UTAMIA website is not to collect public comments.
If the comments feature is disabled, no comment-related data is collected on the relevant pages.
If this feature is enabled later, the policy must be updated to state the information collected, moderation measures, and any services used to detect unwanted comments.
15. Changes to the policy
UTAMIA may amend this policy to take into account:
- changes to the website;
- new services;
- changes to forms;
- new payment or delivery methods;
- new service providers;
- regulatory developments;
- changes in retention practices.
The version published on this page is the version applicable at the time of consultation.
Last updated: 04/08/2026