Privacy Policy

Last updated: March 2025

1. Overview

MarhalaExpress ("we", "our", "the platform") operates the website marhalaexpress.com. This policy describes the personal data we collect, how we use it, and your rights.

2. Data We Collect

  • Account information: first name, last name, email address, password (hashed), phone number (optional), preferred language.
  • Profile information: role (carrier, shipper, or both), referral code.
  • Listings and bookings: data entered when posting shipments, capacity, or rideshare trips (routes, dates, prices, cargo description).
  • Verification documents (drivers): driving licence, ID card, proof of insurance — stored securely and used solely for verification purposes.
  • Messages: content of exchanges via the built-in messaging system.
  • Technical data: IP address, browser type, pages visited (standard server logs).

3. How We Use Your Data

Your data is used to:

  • Create and manage your account.
  • Display your listings and connect parties.
  • Process bookings and offers.
  • Send email notifications related to your activity (offers, bookings).
  • Verify driver identities.
  • Improve the platform and detect misuse.

4. Data Sharing

We never sell your personal data. Your information may be shared in the following cases:

  • With the other party in a transaction: your first name, last name, and phone number (if provided) are visible to your counterpart after a booking is confirmed.
  • Technical providers: Supabase (database hosting, West Europe region — Ireland), Vercel (application hosting), Resend (email sending).
  • Legal obligations: if required by law.

5. Data Retention

Your data is retained while your account is active. If you delete your account, your listings and messages are anonymised and your email address is rendered unusable to re-identify you.

6. Your Rights

Under GDPR and Moroccan Law 09-08, you have the following rights:

  • Access to your personal data.
  • Rectification of inaccurate data.
  • Deletion of your data (right to be forgotten).
  • Objection to processing.
  • Data portability.

To exercise these rights, write to us at info@marhalaexpress.com.

7. Cookies

MarhalaExpress uses only essential cookies required for authentication and user sessions. No advertising or third-party tracking cookies are used.

8. Security

All data is transmitted over HTTPS. Passwords are hashed (bcrypt). Verification documents are stored in a secure bucket with restricted access.

9. Changes

We reserve the right to modify this policy. For significant changes, we will notify you by email with 30 days' notice.

10. Contact

For any questions regarding this policy: info@marhalaexpress.com