Privacy policies

Last updated: August 2026

1. Definitions

In this Privacy Policy:

"Diima," "we," "us," "our", "application", "service" or "platform" refers to the web application accessible at website called www.catalog.dii.ma.
"Account Holder" or "member" refers to a registered user who creates, manages, and maintains an account or profile on the Platform.
"Visitor" or "Lead" refers to any individual who accesses, views, or interacts with public profiles, links, QR codes, or any other features without registering an account.
"you," "your," or "User" refers to Account Holder or Visitor who uses our platform.

We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use Diima ("the Service").

Please read this Privacy Policy carefully. By using the Service, you consent to the practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

This Privacy Policy applies to all users (both Account Holders and Visitors) and all services provided by Diima, including the website, mobile applications, and NFC/QR products.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when using the Service:

Account Information

Profile Content

Title/name, subtitle, and description
Contact information (phone, email, website, WhatsApp, address)
Social media links (Facebook, Instagram, LinkedIn, etc.)
Business hours
Products and services information
Media files (images)
Logo and banner images
Custom domain information

Order Information

Full name
Phone number/WhatsApp number
Email
Adress
Note

Communication Data

Support requests and correspondence
Feedback and survey responses

2.2 Information Collected Automatically

When you access or use the Service, we automatically collect:

Device Information

Device type and model
Operating system and version
Browser type and version
Screen resolution

Usage Information

Pages visited and features used
Time spent on the Service
Click-throughs and interactions
Error logs and crash reports

Location Information

General geographic location based on IP address
Language preferences

2.3 Analytics Data

For profile analytics, we collect:

Profile visit counts

Note: We do not collect personally identifiable information from visitors to public profiles. Analytics use anonymized visitor hashes for tracking purposes.

2.4 Third-Party Lead Collection & Disclaimer

Diima provides CRM and lead-management features that allow Account Holders (Members) to collect, manage, process, and store lead information through their profiles or pages.

Any lead collection conducted by an Account Holder through Diima relies on internal forms that may collect the following information:

Full name
Phone number
Email address
Physical address
Notes or other information voluntarily provided by the visitor

Confidentiality and Ownership of Lead Data

Diima treats lead data collected by Account Holders as confidential and does not use such data for its own commercial or marketing purposes. Lead data remains under the control of the Account Holder who collected it.

The Account Holder is solely responsible for the collection, processing, use, storage, and exploitation of the lead data obtained through their profile, page, or forms. The Account Holder must ensure that visitors are adequately informed about how their personal data will be collected and used and must comply with all applicable data protection and privacy laws.

Diima is not responsible for the Account Holder’s use, processing, disclosure, or other handling of lead data collected through the platform.

Security Disclaimer

Diima implements reasonable technical and organizational measures designed to protect lead data stored through its platform. However, no online service, database, or server can be guaranteed to be completely secure.

Accordingly, Diima does not guarantee that lead data will remain fully protected against unauthorized access, cyberattacks, security breaches, malware, hacking attempts, or other security incidents beyond its reasonable control.

By using Diima's lead collection and CRM features, the Account Holder acknowledges and accepts these risks and remains responsible for ensuring that its collection and use of lead data comply with applicable laws and regulations.

2.5 Payment Processing & Third-Party Payment Providers

Diima does not provide or operate any payment processing services for transactions made through the platform. Any payment made in connection with an order, whether for Diima services or for products, services, or content offered by an Account Holder, is processed through external third-party payment providers.

Users and Account Holders are responsible for reviewing the privacy policies, terms of service, and other applicable conditions of any third-party payment provider or external platform linked to or used in connection with Diima.

Diima does not collect, process, or store payment card information or other sensitive payment details, such as credit or debit card numbers, card security codes, or payment credentials, through its platform. Such information is provided directly to and processed by the relevant third-party payment provider.

Diima is therefore not responsible for the collection, processing, storage, security, or handling of payment information by third-party payment providers. Any payment-related information submitted through an external payment platform is subject to that provider's own privacy policy, security practices, and terms of service.

Account Holders are responsible for ensuring that any external payment provider they use in connection with their products, services, or content is properly disclosed to customers and complies with applicable laws and regulations.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Delivery

3.2 Communication

Send service-related notifications
Respond to support requests
Send promotional communications (with your consent)
Notify you of policy changes

3.3 Analytics & Improvement

Monitor Service performance
Identify and fix technical issues
Improve features and user experience

3.4 Security & Legal

Detect and prevent fraud
Protect against spam and abuse
Enforce our Terms of Service
Comply with legal obligations
Respond to lawful requests from authorities

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

4.1 Contract Performance

We process your data to provide the Service you have requested, including:

Account creation and management
Profile hosting and display
Order processing and delivery
Subscription management

4.2 Legitimate Interests

We process data for our legitimate business interests, including:

Analytics and service improvement
Fraud prevention and security
Direct marketing (with opt-out option)

4.3 Consent

We rely on consent for:

Marketing communications
Certain cookies and tracking technologies
Optional features requiring explicit agreement

4.4 Legal Obligation

We process data to comply with legal requirements, including:

Response to lawful government requests
Protection of legal rights

5. Data Sharing & Disclosure

We do not sell your personal information. We may share your data in the following circumstances:

5.1 Public Profiles

Information you add to your public profiles is visible to anyone who accesses your profile link or scans your QR code or NFC. You control what information to include in your public profiles.

5.2 Service Providers

We share data with third-party service providers who perform services on our behalf:

Hosting Providers: Server infrastructure and data storage
Email Services: Transactional and marketing emails
Analytics Services: Usage tracking and reporting
Payment Processors: For non-COD payment methods
Freelancers/Agency Partners: For product delivery (name, phone, address)

All service providers are bound by confidentiality obligations and data protection agreements.

5.3 Legal Requirements

We may disclose your data if required by law, court order, or government request, or when we believe disclosure is necessary to:

Comply with legal process
Protect our rights, privacy, safety, or property
Enforce our Terms of Service
Respond to emergencies

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity. We will notify you of any such change.

5.5 Aggregated Data

We may share aggregated, anonymized data that does not identify you for various purposes, including research and marketing.

6. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to collect and store information about your preferences and activity.

6.1 Types of Cookies We Use

Essential: Required for the Service to function (authentication, security) - Duration: Session
Functional: Remember your preferences and settings - Duration: 1 year
Analytics: Understand how you use the Service - Duration: 2 years

6.2 Managing Cookies

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Service.

6.3 Third-Party Tracking

Some third-party services we use may set their own cookies. These are governed by the respective third parties' privacy policies.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected:

7.1 Account Data

Retained while your account is active and for a reasonable period thereafter to:

Allow account recovery
Comply with legal obligations
Resolve disputes

7.2 Profile Content

Retained while your account is active. Upon account deletion, profile content is typically deleted within 30 days, except:

Backups may retain data for up to 30 days

7.3 Order Data

Retained for 7 years to comply with tax and accounting requirements.

7.4 Analytics Data

Anonymized visitor analytics are retained for 2 years. Aggregated statistics may be retained indefinitely.

7.5 Rejected Service Requests

When service requests submitted to access or benefit from our Service are rejected, all associated request data is immediately and permanently deleted from our platform databases and servers, and no record is retained.

7.6 Inactive & Expired Free Accounts

For users on a Free Plan, account data and profile content may be permanently deleted from our platform and servers if:

An account subscription or plan expires and is not renewed; or
The account remains inactive with no login or content updates for more than three (3) consecutive months.

Once permanently deleted, this data cannot be recovered.

7.7 Legal Holds

Data subject to legal holds or disputes will be retained until the matter is resolved.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

8.1 Access

You can request access to and receive a copy of the personal data we hold about you.

8.2 Rectification

You can update most of your personal information directly through your account settings. For other corrections, contact us at

contact@dii.ma.

8.3 Erasure (Right to be Forgotten)

You can request deletion of your personal data. We will delete your data unless:

We are required to retain it by law
It is necessary for legal claims
It has been anonymized

8.4 Data Portability

You can request an export of your data in a machine-readable format (JSON). This includes:

Profile information
Contacts and social links
Products and services

8.5 Restriction of Processing

You can request that we limit how we use your data in certain circumstances, such as when you contest the accuracy of your data.

8.6 Objection

You can object to:

Processing based on legitimate interests
Direct marketing communications

8.7 Withdraw Consent

Where we rely on consent, you can withdraw it at any time. This will not affect the lawfulness of processing before withdrawal.

8.8 How to Exercise Your Rights

To exercise any of these rights, contact us at

contact@dii.ma with:

Your name and account email
The specific right you wish to exercise
Any relevant details

We will respond within 30 days.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

9.1 Technical Measures

Encryption: SSL/TLS encryption for data in transit
Access Controls: Role-based access to personal data
Authentication: Secure password hashing and session management
Monitoring: Security event logging and monitoring
Backups: Regular backups

9.2 Organizational Measures

Staff training on data protection
Confidentiality agreements with employees and contractors
Regular security assessments
Incident response procedures

9.3 No Guarantee

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

9.4 Data Breach Notification

In the event of a data breach that poses a risk to your rights, we will notify you within 72 hours and inform the relevant supervisory authority as required by law.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence.

10.1 Data Location

We primarily store and process data within France and United Kingdom. Some service providers may be located in other countries.

10.2 Your Consent

By using the Service, you acknowledge and consent to the transfer of your data as described in this policy.

11. Contact Information

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

General Support:

contact@dii.ma

Website: www.catalog.dii.ma

We will respond to your inquiry within 30 days.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

12.1 Notification of Changes

We will notify you of material changes by:

Notice displayed within the Service
Updating the "Last updated" date at the top of this page

12.2 Your Continued Use

Your continued use of the Service after the effective date of any changes constitutes acceptance of the revised Privacy Policy. If you do not agree to the changes, you should stop using the Service and request deletion of your data.

12.3 Review Date

We recommend reviewing this Privacy Policy periodically to stay informed about how we protect your data.

Privacy policies

2.5 Payment Processing & Third-Party Payment Providers

Share Catalog