Privacy policy
What personal data the Atlaxys Consulting website collects, why, who receives it, how long it is kept and how to exercise your rights.
Last updated:
Summary
- You can read this website without giving us any personal data. Like every website, our hosting provider processes technical connection data (such as your IP address) to deliver the pages.
- If you contact us through a form, by email, by phone or on WhatsApp, we use what you send only to answer you and, if you ask, to prepare a proposal.
- Analytics and advertising tools, when we use them, run only after you accept them in the cookie banner. Refusing is as easy as accepting, and you can change your mind at any time.
- We do not sell your personal data and we do not take automated decisions about you.
Who is responsible for your data
The controller (in Moroccan law, the responsable du traitement) is Atlaxys Consulting, based in Morocco. Our full company details are on the legal notice page. For any question about your data, write to the address shown in the “Contact and complaints” section below.
Which laws apply
- Morocco: Law 09-08 on the protection of individuals with regard to the processing of personal data, supervised by the CNDP (Commission Nationale de contrôle de la protection des Données à caractère Personnel). It applies to our processing because we are established in Morocco.
- European Union / EEA (GDPR): the GDPR can apply to a company outside the EU when it offers services to people in the EU or monitors their behaviour there (for example with analytics). Because our services and this website are also aimed at clients in Europe, we apply the GDPR’s principles and rights to visitors and contacts located in the EU/EEA. Whether and how far it applies to a given processing is a legal question we keep under review.
- United States: US privacy laws vary by state and mostly apply only to businesses above revenue or volume thresholds. Based on our current size and activities, we do not believe we meet the thresholds of the California Consumer Privacy Act (CCPA/CPRA) or similar state laws. We nonetheless honour the requests and signals described in “Your rights” below.
What we collect, why, and on what basis
| Situation | Data | Purpose | Legal basis | Kept for |
|---|---|---|---|---|
| You send a contact or campaign form | Name, email; optionally company, phone, country, project type, budget range, timeline, message; the page you sent it from; technical anti-spam fields (a hidden empty field and the time the form was opened) | Answer your enquiry, prepare a proposal you ask for, follow up on it | Steps taken at your request before a possible contract; our legitimate interest in answering business enquiries | 24 months after our last exchange if no project follows |
| You write to us by email, phone or WhatsApp | Your contact details and the content of the conversation | Same as above | Same as above | Same as above |
| You become a client | Contact and business information needed for the contract and invoicing | Perform the contract; meet accounting and tax obligations | Contract; legal obligation | Duration of the relationship, then as long as Moroccan law requires for accounting records (generally 10 years) |
| You visit any page | IP address, browser user agent, page requested, date and time (processed by our hosting provider) | Deliver the website, keep it secure and available | Our legitimate interest in operating a secure website | According to the hosting provider’s logging policy; we do not use these logs to identify visitors |
| You accept analytics | A random browser identifier in cookies, pages viewed, traffic source, device and approximate location | Understand how the website is used and improve it | Your consent, which you can withdraw at any time | Cookies: see the cookie policy. Event-level analytics data: no more than 14 months; aggregated statistics without identifiers may be kept longer |
| You accept marketing | Advertising identifiers, pages viewed and conversion events (such as “form sent”); the campaign that brought you here (utm parameters, ad click identifiers, referring site) attached to an enquiry you send | Measure the results of our advertising | Your consent, which you can withdraw at any time | See the cookie policy; attribution stays in your browser until the tab is closed and, if sent with an enquiry, is kept with that enquiry |
| You pick a language | The chosen language, in your browser only | Open the website in your language next time | Our legitimate interest / a function you requested | Until you clear site data |
Fields marked “optional” in our forms are optional: you can leave them blank and we will still answer. Please do not send sensitive data (health, religion, political opinions, bank or card details) through the forms.
What we do not do
- We do not sell personal data, rent it, or exchange it for anything of value.
- We do not send newsletters or marketing emails. If that changes, we will ask for your consent first.
- We do not take decisions about you based solely on automated processing.
- This website has no social-media plugins, embedded videos, maps or CAPTCHA services, and its fonts are hosted on our own server, so none of those providers receives data when you browse.
Who receives your data
Inside Atlaxys, only the people who need it to answer you or deliver a project. Outside Atlaxys, the service providers listed below, which act on our behalf (or, for WhatsApp and the advertising platforms, also under their own terms). This table is generated from the configuration of the version of the website you are reading:
| Provider | Purpose | Data | When |
|---|---|---|---|
| DigitalOcean App Platform DigitalOcean, LLC (USA) Their privacy policy | Hosts and delivers the website (including through its content-delivery network). | Technical request data: IP address, browser user agent, requested page, date and time. | Every visit |
| WhatsApp WhatsApp Ireland Ltd / WhatsApp LLC (Meta) Their privacy policy | Chat with us if you choose to click a WhatsApp link. Nothing is sent to WhatsApp before you click. | Your phone number, profile and the messages you exchange with us, under WhatsApp’s own terms. | Only when you open a WhatsApp link |
We may also disclose data to professional advisers bound by confidentiality, or to authorities when the law requires it.
Transfers outside Morocco and the EU
Some providers above are based in, or process data in, the United States or the European Union. Where personal data leaves Morocco we follow the transfer rules of Law 09-08 (transfers to countries recognised as providing adequate protection, or with the safeguards or authorisations the CNDP requires). For data concerning people in the EU/EEA, we rely on the safeguards each provider offers, such as the European Commission’s Standard Contractual Clauses or, where a provider is certified, the EU–US Data Privacy Framework. You can ask us for more information about these safeguards.
Security
The website is served only over HTTPS, applies a strict Content Security Policy, loads no third-party code before you consent, and contains no user accounts or databases. Enquiries are accessible only to the people who handle them. No method of transmission or storage is completely secure, but we take measures appropriate to the risk and review them regularly.
Your rights
Everyone. Whatever the law that applies to you, you can ask us to access, correct or delete your personal data, or to stop using it, by writing to us. You can withdraw consent to analytics or marketing at any time via “Cookie settings” at the bottom of every page. Withdrawing consent is as easy as giving it.
Under Moroccan Law 09-08: right to be informed, right of access, right of rectification (including deletion of inaccurate or unlawfully processed data), and right to object to processing on legitimate grounds, and to object to its use for prospecting without having to give reasons.
If you are in the EU/EEA (GDPR): right of access, rectification, erasure, restriction, data portability, objection (including to processing based on legitimate interests), and the right to withdraw consent without affecting earlier processing.
United States residents: although we believe we are currently below the thresholds of state privacy laws, we will answer requests to know, correct or delete personal data. When analytics or advertising tools are enabled, the advertising platforms receive identifiers and browsing events from this website, which some state laws treat as “sharing” or “targeted advertising”. You can opt out at any time with “Cookie settings” or by turning on Global Privacy Control in your browser: we treat that signal as a refusal of marketing. We do not use sensitive personal information to infer characteristics about you.
How to exercise your rights. Write to us at the address below. We may ask for information to confirm your identity before acting on a request, and we answer without undue delay and within the time limits set by the applicable law (for the GDPR, one month, which can be extended in complex cases). Exercising your rights is free.
Children
This website is intended for businesses and professionals. It is not directed at children, and we do not knowingly collect personal data from children under 16.
Changes to this policy
We update this policy when the website or our practices change, for example when a new analytics tool is enabled (which also updates the tables above automatically). The date at the top shows the latest version. Significant changes affecting consent will trigger the cookie banner again.
Contact and complaints
- Company name
- Atlaxys Consulting
- Registered office
- Morocco
- [email protected]
- Phone
- +212 7 08 00 60 33
If you are not satisfied with our answer, you can lodge a complaint with the CNDP in Morocco (cndp.ma). If you are in the EU/EEA, you can also complain to the data-protection authority of the country where you live or work or where the issue occurred (list of EU authorities).