Privacy Policy

NUFUS WEAR (“NUFUS”, “we”, “us”) is a modest luxury house headquartered in Rabat, Morocco, with offices in Dubai, UAE and Paris, France. For all privacy matters, the data controller can be reached at support@nufuswear.com.

• Order data — name, delivery address, email, phone number, and the items you purchase, so we can fulfil and support your order.
• Payment data — handled entirely by our certified payment processors. We never see or store full card numbers.
• Account & newsletter data — your email and preferences, only if you choose to subscribe or create an account.
• Technical data — anonymised analytics (pages visited, device type) used to improve the boutique experience.

To deliver your orders, provide client care, prevent fraud, meet legal obligations (such as tax records), and — only with your consent — send you our newsletter. We rely on contract performance, legal obligation, legitimate interest, and consent as our lawful bases under the GDPR and Morocco's Law 09-08.

• We never sell, rent or trade your personal data. To anyone. Ever.
• We never send marketing without your explicit opt-in.
• We never keep data longer than needed — order records are retained only as long as law requires.

Your data is shared only with the partners strictly necessary to serve you: delivery carriers (name, address, phone for the courier), payment processors, and our e-commerce hosting providers — each bound by data-processing agreements. Where data moves between our offices in Morocco, the UAE and the EU, it does so under appropriate safeguards.

We use essential cookies for the shopping bag and checkout, and optional analytics cookies to understand how the boutique is used. You can decline non-essential cookies without affecting your ability to shop.

You may request access to, correction of, export of, or deletion of your personal data at any time — and object to or restrict processing. Write to support@nufuswear.com and we will respond within 30 days. EU residents may also contact their local supervisory authority; Moroccan residents may contact the CNDP.

All traffic is encrypted with TLS. Access to client data inside NUFUS is limited to the concierge and fulfilment staff who need it, protected by multi-factor authentication. In the unlikely event of a breach affecting your data, we will notify you without undue delay.

If this policy changes materially, we will note it here and — for significant changes — email account holders. Continued use of the site after changes take effect constitutes acceptance.