Privacy policy

Data controller

ORIAFEN SARL, a limited liability company (société à responsabilité limitée) with share capital of 100,000 MAD, 10 rue Liberté, 3rd floor, apartment 05, Casablanca, Morocco (RC Casablanca 747607, ICE 004031163000068). ORIAFEN Marketing is an activity operated by ORIAFEN, not a separate company. Contact for any question regarding your data: contact@oriafen.com.

Data collected

Through the contact form, and only if you submit it:

• full name, email address;
• phone, company and indicative budget, if you provide them;
• selected areas of expertise, preferred format and timeline, the content of your message;
• the date and version of the consent you gave.

The site currently uses no advertising cookie nor audience-measurement tool. If such a tool is added, this policy will be updated and your consent requested where the law requires it.

Purposes and legal basis

Your data is used exclusively to respond to your request, prepare a proposal and follow up on our conversation. This processing relies on your consent, collected via the form's checkbox, and on the pre-contractual steps taken at your request.

Recipients

Your data is recorded in an internal database and can be consulted by ORIAFEN team members authorised to handle requests, through a password-protected admin area. It also passes through our two technical providers, who act on our instructions and do not use your data for their own purposes:

• Vercel Inc. (United States): hosts the site and runs its server functions. Vercel states it complies with the EU–US, UK and Swiss Data Privacy Frameworks, and otherwise relies on standard contractual clauses for transfers outside the European Union.
• Neon, a service of Databricks, Inc. (United States): hosts the database that stores contact-form submissions, on AWS infrastructure located in Virginia, United States (region us-east-1).

Your data is therefore transferred outside Morocco to the United States. No other tool (automation, email delivery) is currently active; if one is activated, this policy will be updated beforehand. Your data is neither sold nor rented.

If you contact us via WhatsApp, your exchanges are also processed by WhatsApp (Meta) under its own terms.

Retention period

A prospect's data is kept for 2 years after the last contact, then deleted or anonymised.

Your rights

Under Moroccan law n° 09-08 on the protection of individuals with regard to the processing of personal data and, if you reside in the European Union, the General Data Protection Regulation (GDPR), you can request access to your data, its rectification, its erasure, restriction of processing, object to it, request its portability and withdraw your consent at any time, without affecting processing already carried out. Write to us at the address above.

You may also lodge a complaint with the competent supervisory authority: the CNDP in Morocco or, if you reside in the European Union, your country's authority (the CNIL in France).

Security

Exchanges with the site are encrypted (HTTPS). Access to received requests is limited to those who need it. The form includes protections against automated submissions.