Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
YouCan is a Moroccan e-commerce platform similar to Shopify, designed for Arabic-speaking markets and beyond. Morocco received an EU adequacy decision in 2020, meaning YouCan's data processing in Morocco is covered without additional transfer mechanisms. However, integrated payment processors and third-party apps may involve non-adequate countries. Consent is required for analytics and marketing cookies.
YouCan is a Moroccan e-commerce platform enabling merchants to build and manage online stores. Morocco received an EU adequacy decision in 2020 under GDPR Article 45, covering data transfers for commercial purposes. YouCan processes customer orders, payment data, and store analytics.
The Morocco adequacy decision means EU personal data can be transferred to YouCan in Morocco without SCCs for standard commercial processing. However, third-party apps, payment processors like Stripe or PayPal, and analytics integrations may involve non-adequate countries and require their own SCCs.
Sign a DPA with YouCan. Update your privacy policy to reference YouCan as processor. Implement a cookie consent banner for analytics and marketing cookies. Review all third-party apps and payment processors for their own transfer compliance. Provide order confirmation emails with privacy notice links.
Websites using YouCan must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA may be required for large-scale e-commerce operations on YouCan involving extensive customer profiling, payment data processing, or high-volume marketing activities.
Sample consent text
This online store uses YouCan, a Moroccan e-commerce platform. Morocco has an EU adequacy decision. Your order and account data is processed in accordance with our privacy policy.
Third-party domains contacted
youcan.shopapi.youcan.shopcdn.youcan.shopseller.youcan.shopcheckout.youcan.shopCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| youcan_session | functionality | Session | Maintains the user session for the YouCan storefront, shopping cart, and checkout process. |
| youcan_cart | functionality | 30 days | Stores shopping cart contents including product selections, quantities, and variant choices. |
| youcan_analytics | analytics | 1 year | Tracks storefront visitor behaviour, product views, and conversion metrics for merchant analytics. |
| youcan_currency | functionality | 30 days | Stores the selected currency preference for multi currency storefronts. |
| _fbp | marketing | 90 days | Meta Pixel cookie for tracking ad conversions and retargeting on YouCan storefronts with Facebook Ads integration. |
YouCan uses cookies for user preferences — inform visitors with a consent banner.
YouCan is an ecommerce platform that sets cookies for shopping cart management, user sessions, authentication, and checkout processes. The platform may also set analytics cookies to track store performance, marketing cookies for conversion tracking, and preference cookies for language and currency settings.
Cookies strictly necessary for the shopping experience (cart, checkout, session) are exempt from prior consent requirements. However, YouCan's analytics, marketing, and conversion tracking cookies require explicit consent from visitors before being set, in accordance with the ePrivacy Directive.
Essential ecommerce cookies rely on contractual necessity under Article 6(1)(b) GDPR when the customer initiates a purchase. Legitimate interest under Article 6(1)(f) covers basic store functionality. Marketing and analytics processing requires consent under Article 6(1)(a). Each cookie category needs separate assessment.
YouCan is based in Morocco and may process data on servers outside the EEA. Morocco does not currently have an EU adequacy decision for all data types. Ensure your agreement with YouCan includes Standard Contractual Clauses and disclose international transfers in your store's privacy policy.
A DPIA is recommended for YouCan stores targeting European customers, particularly if you process payment data, implement behavioral targeting, or handle large volumes of customer personal data. Standard small scale ecommerce operations may not require a formal DPIA but should document their assessment.
Add a cookie consent banner to your YouCan store that categorizes cookies into essential, analytics, and marketing groups. Configure the store to load non essential scripts only after consent. Include a comprehensive privacy policy and make it accessible from every page. Implement proper data retention schedules.
For EU focused ecommerce, consider platforms with European hosting options such as Shopify (with EU data residency), WooCommerce (self hosted), or PrestaShop (French based, self hosted). Each has different privacy trade offs regarding data processing locations and third party integrations.
List all YouCan cookies categorized as essential (cart, session, authentication), analytics (store performance tracking), and marketing (conversion, retargeting). Include cookie names, purposes, durations, and types. Mention YouCan as your ecommerce platform provider and note data processing in Morocco.