Last updated: October 8, 2026
This policy explains what personal data Koubba (“we”, “us”) collects through this website, why we collect it, how long we keep it and what rights you have. We keep it short and plain on purpose. We make natural stone furniture to order, and we only ask for what we need to answer you, quote a piece, make it and deliver it.
Who is responsible for your data
La360 SARL, a company based in Marrakech, Morocco, operates this website under the Koubba brand: it is the business you deal with when you request a quote or place an order, and the controller of your personal data. To reach us about your data, use the contact form on the Request a quote page and write “Privacy request” in the message.
What we collect, and why
When you ask for a quote, a shipping quote or a bespoke piece
Your name, e-mail address, country, postal or ZIP code (for shipping quotes), the details you give us about the piece or the project (type of piece, shape, stone, dimensions, finish, access to your home, free text), and the files you choose to upload (for example a floor plan or a photograph of the room). A telephone number is optional.
Why: to answer you, prepare a quotation, design and make the piece, and arrange delivery. Legal basis: steps taken at your request before a contract, and, once you order, performance of the contract.
When you apply to our trade programme
Your name, company, role, e-mail address and information about your projects. Why: to assess and answer your application. Legal basis: steps taken at your request, and our legitimate interest in working with professionals.
When you place an order or create an account
Your name, billing and delivery addresses, e-mail address, telephone number (where required for delivery), the items you order, and payment-related information handled by the payment provider shown at checkout (we do not store full card numbers on this website). Why: to process, produce, ship and invoice your order and to meet our accounting and legal obligations. Legal basis: performance of the contract and legal obligations.
When you visit the website
Basic technical information (pages viewed, referring page, type of device and browser, approximate location derived from your connection) so that we can keep the site secure and understand which pages are useful. Legal basis: our legitimate interest in running and improving the site, and your consent where the law requires it for a given tool (see “Cookies”).
Uploaded files
Files you upload with a request are stored in a private area of the website. They are not public, they cannot be opened by a visitor, and only the people who handle your request can open them. Please do not send documents that contain more personal information than needed (for example identity documents).
Who receives your data
- The people at our business who answer requests, design, produce and ship pieces.
- Service providers that help us run the website and the business, acting on our instructions: web hosting, e-mail delivery, payment processing, freight forwarders and carriers (they receive your name, delivery address and contact details so that they can deliver), and accounting.
- Authorities, where the law requires it (for example customs or tax).
We do not sell your personal information, and we do not share it for advertising.
Transfers outside your country
Our workshop is in Morocco, and our service providers may be located in other countries, including the country where our hosting servers are. If you are in the European Economic Area, Switzerland or the United Kingdom, your data may therefore be processed outside those areas. Where the law requires it, we rely on appropriate safeguards such as standard contractual clauses, or on the fact that the transfer is necessary to carry out your request or your order.
How long we keep it
- Requests that do not lead to an order: for a limited period after our last exchange, then deleted. Uploaded files follow the same rule.
- Orders and invoices: for as long as the law requires us to keep accounting and tax records.
- Accounts: until you ask us to close them.
- Website statistics: in aggregated form, for as long as they are useful.
Cookies and similar technologies
This website uses cookies that are strictly necessary: they keep your shopping cart, remember your session when you log in, and protect forms against abuse. They do not need your consent. We also use a statistics tool to understand how the site is used; it is not used for advertising. If a tool uses cookies or similar technologies that need your consent, we will ask for your choice before using it, and you will be able to change it at any time. We do not use advertising cookies or social-media tracking on this website. If that changes, we will update this policy and ask for your consent first.
Visit recordings (Microsoft Clarity). Only if you accept it in the banner, we use Microsoft Clarity to record how the pages of this website are used: pages viewed, clicks, mouse movements and scrolling, the type of device and browser, and an approximate location. What you type in forms, the cart, the checkout and your account is masked and never recorded. The recordings help us improve the website; they are not used for advertising. Microsoft processes them for us. You can refuse, or withdraw your consent at any time, with the “Cookie settings” link at the bottom of every page.
Your rights
Depending on where you live, you may have the right to know whether we hold personal data about you and to receive a copy of it, to have it corrected or deleted, to restrict or object to its use, to receive it in a portable format, and to withdraw a consent you gave at any time. Residents of California and of some other US states have comparable rights to know, delete and correct their data, and not to be discriminated against for using them. To exercise a right, contact us as explained at the top of this policy. We may need to verify your identity before we act, and we answer within the time the law allows, usually within one month.
If you believe that we have not handled your data correctly, you can lodge a complaint with the data-protection authority of your country, for example the CNIL in France, the Information Commissioner’s Office in the United Kingdom, or your state attorney general in the United States.
Security
The website is served over an encrypted connection, access to the administration area is restricted, forms are protected against abuse, and uploaded files are kept out of public view. No system is perfectly secure, so we also limit what we collect in the first place.
Children
This website is intended for adults. We do not knowingly collect personal data from children under 16.
Changes to this policy
We may update this policy when our practices or the law change. The date at the top shows the latest version. If a change is significant, we will say so on this page.