Privacy Policy

LORVEX operates an online boutique for prestige watches, primarily serving Morocco. For privacy questions, contact our concierge at concierge@lorvex.ma or +212 706984671.

Depending on your location and applicable law, additional obligations may apply. This page describes what the application currently does technically.

Customer account: email, hashed password, name, optional phone, preferred locale and currency, account role and status.

Orders: email, phone, shipping/billing addresses, line items, amounts, selected payment method (including cash on delivery or card), order and payment status, optional notes.

Browsing and experience: search queries, recently viewed products, wishlist, cart, compare list, personalization/recommendation preferences when enabled, and internal analytics events.

Account security: device sessions, login history, two-factor authentication (TOTP secret and hashed backup codes), hashed password-reset tokens, and security-related logs (login attempts, rate limiting).

Communications: transactional emails (for example password reset) when email delivery is configured; WhatsApp contact if you use the site WhatsApp button.

Media: product images may be hosted by a media provider (for example Cloudinary) when configured. Admin media uploads are not intended to store customer personal data.

Operate the storefront, catalogue, search, cart and checkout.

Create and secure accounts (authentication, 2FA, backup codes, password recovery, sessions).

Process and follow orders, delivery and concierge communications.

Improve experience (recommendations, personalization, internal analytics) when those features are active.

Protect the service against abuse and maintain availability.

The site uses cookies or equivalent storage required for authentication sessions and browser-side cart/preferences.

Third-party analytics may be added later through configuration. When not configured, only the platform’s internal mechanisms apply.

Application hosting (for example Vercel), managed PostgreSQL, email delivery (for example Resend when configured), media hosting (for example Cloudinary when configured), and WhatsApp if you initiate contact.

Card payments, if selected at checkout, may be arranged without a fully automated card gateway depending on current configuration. LORVEX does not store full card numbers in the application as deployed today.

Account and order data are retained as needed to operate the service and handle commercial follow-up.

Password-reset tokens expire and are invalidated after use. 2FA backup codes are stored hashed and consumed when used.

Hashed passwords, JWT sessions, optional 2FA, backup codes, rate limiting, security logging and admin RBAC are implemented in the application.

No technical measure guarantees absolute security. Please report suspicious activity to our concierge promptly.

Depending on applicable law, you may request access, correction or deletion of certain data, or account closure.

To make a request, email concierge@lorvex.ma from the address linked to your account and describe the request. We may verify your identity before acting.

This section describes an operational contact process; it does not automatically create regulatory rights beyond those provided by applicable law.

The site is intended for adults able to enter purchase transactions. We do not knowingly collect children’s data.

We may update this page to reflect product or operational changes. The update date shown on the page identifies the published version.