Privacy policy

1. Data controller

The data controller is Umnya Hospitality SARLAU, Appartement n° 18, 2e étage, immeuble Aamara, quartier Al Manara, Marrakech, Maroc. For any question about your data: salam@sikook.com.

This policy applies in accordance with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679), the UK GDPR for the United Kingdom and Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data.

2. Data we collect

• Account: name, email, phone or WhatsApp, city, language, password (stored encrypted), referral code.
• Orders: dishes ordered, amounts, currency, date and time slot, handover and payment method, delivery address, phone, message to the cook.
• Cooks: page information (kitchen name, city, dishes, prices, areas), uploaded photos, declared status, Instagram account, exchanges with Sikook.
• Page claims: name, email, WhatsApp, Instagram account, message.
• Waitlist: email, role (buyer or cook), city, language, source, any referral code.
• Reviews: rating, text, display name, related order.
• Technical data: server logs (IP address, browser, pages requested), kept by our host for security.

To suggest the nearest city, the site may use an approximate location derived from your IP address, or your position if you allow it in your browser. This information is not stored.

3. Purposes and legal bases

• Creating and managing your account, passing on and tracking your orders, handling payments and payouts: performance of the contract.
• Publishing and managing cooks' pages, commission and referrals: performance of the contract.
• Letting you know when Sikook opens in your city (waitlist): your consent, which you can withdraw at any time.
• Moderating reviews, preventing fraud and securing the site: legitimate interest of Sikook and its users.
• Preparing private cook drafts from public information: Sikook's legitimate interest in offering the platform to cooks, with the right to object and to deletion at any time.
• Keeping accounts and responding to authorities: legal obligation.

Sikook does not sell your data and does not use it for advertising.

4. Drafts prepared from public information

Sikook may prepare a private cook draft from information the person has made public (kitchen name, city, dishes, Instagram link). These drafts are not published. If a draft has been prepared in your name, you can claim it or ask for its deletion at salam@sikook.com. An unclaimed draft is deleted no later than 12 months after it was created.

5. Recipients

Your data is only accessible to those who need it:

• the cook you order from receives your name, phone, email, delivery address and message, to prepare and hand over the order;
• the Sikook team, for support, moderation and running the platform;
• our technical processors: Vercel Inc. (website hosting and photo storage), Neon Inc. (database) and Resend (transactional emails, once enabled);
• authorities, upon lawful request.

If you choose to contact a cook on WhatsApp from the site, the exchange goes through WhatsApp (Meta) and is subject to its own terms.

6. Transfers outside your country

Vercel, Neon and Resend are US companies; your data may be processed in the United States and in the European Union. These transfers are covered by the EU-US Data Privacy Framework where the provider is certified, or by the European Commission's standard contractual clauses.

As orders are passed to the cook in your city, your data may also be received in that cook's country. For data processed from Morocco, transfers are made under the conditions of Law 09-08 and, where required, with the authorisation of the CNDP.

7. Retention periods

• Account: as long as it is active, then 3 years after your last activity, unless you ask for deletion.
• Orders and accounting records: for the statutory accounting retention period, up to 10 years.
• Waitlist: until you unsubscribe, and at most 3 years after signing up.
• Unclaimed private drafts: 12 months at most.
• Reviews: as long as the cook's page is online.
• Technical logs: a few weeks at most, depending on the host's settings.

8. Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, the right to withdraw your consent at any time and, in France, the right to give instructions on what happens to your data after your death.

To exercise them, write to salam@sikook.com from the address linked to your account. We reply within one month.

You may also lodge a complaint with the data protection authority of your country: CNDP (Morocco), CNIL (France), Data Protection Authority (Belgium), Autoriteit Persoonsgegevens (Netherlands), AEPD (Spain), the competent state authority (Germany), ICO (United Kingdom).

9. Cookies and local storage

Sikook uses no advertising cookies and no audience measurement tools, and no third party service sets cookies on the site. Fonts are hosted by Sikook. Only the following are used:

• Cookie "sikook-lang": remembers the language you chose, 12 months.
• Cookie "payload-token": keeps you signed in when you log in to your account; it expires after a few hours or when you log out.
• Local storage "sikook-cart-v1": the content of your cart, on your device only.
• Local storage "sikook-signup-draft-v1": a draft of the cook sign-up form, cleared once the sign-up is sent.
• Local storage "lk-lang": the language chosen in the Lalakook magazine.

These are strictly necessary for the service you request or remember a choice you made. They are exempt from consent, which is why the site does not show a cookie banner. You can clear them at any time in your browser settings.

10. Security

Connections are encrypted (HTTPS), passwords are stored encrypted and access to data is limited to authorised people. In the event of a data breach posing a risk, we notify the competent authority and, where necessary, the people concerned.

11. Minors

Sikook is intended for adults. We do not knowingly collect data about children under 16.

12. CNDP filing and changes

This policy may change; the date of the last update is shown at the bottom of the page. If there is a significant change, we will let you know.