Privacy Policy
Last updated: [LAST UPDATE DATE]
This Privacy Policy explains how [LEGAL COMPANY NAME] collects, uses, stores and protects personal data relating to users of HIKBUSINESS, available at https://hikbusiness.com.
1. Data controller
- Legal company name: [LEGAL COMPANY NAME]
- Legal form: [SARL / SARL AU / OTHER]
- Registered office: [FULL ADDRESS, MOROCCO]
- Commercial Register number: [RC NUMBER]
- ICE: [ICE NUMBER]
- Tax identification number: [TAX NUMBER]
- Email: [EMAIL ADDRESS]
- Telephone: [TELEPHONE NUMBER]
2. Legal framework
Personal data is processed in accordance with Moroccan Law No. 09-08 concerning the protection of individuals with regard to the processing of personal data and other applicable legal requirements.
3. Data collected
Depending on the services used, we may collect:
- email address;
- password in a securely protected form;
- merchant number or merchant code;
- first and last name where requested;
- telephone number;
- business and professional information;
- subscription and payment information;
- order, purchase, sale and transfer history;
- products, requests and content published by users;
- messages sent to customer support;
- IP address and technical connection logs;
- browsing data and cookies;
- information voluntarily supplied by the user.
4. Purposes of processing
- creating and managing user accounts;
- authenticating users and securing access;
- assigning and managing merchant numbers;
- managing subscriptions, activation and expiry;
- processing and recording orders and commercial operations;
- managing purchases, sales and transfers between users;
- managing products, requests and listings;
- operating the Commercial Assistant and management tools;
- calculating counters, commissions and account statements;
- responding to support requests;
- preventing fraud, abuse and unauthorized access;
- improving website security, performance and functionality;
- complying with legal, tax, accounting and administrative obligations;
- sending service communications;
- sending marketing communications where consent is required and obtained.
5. Legal grounds
- performance of a contract or the website terms;
- the user’s consent;
- compliance with a legal obligation;
- legitimate interests relating to security and proper operation of the website.
6. Mandatory data
Fields marked as mandatory are required to create an account, use a feature, purchase a subscription or complete a transaction. Failure to provide the required information may prevent access to the relevant service.
7. Data recipients
- authorized personnel of [COMPANY NAME];
- the website hosting provider;
- technical and maintenance providers;
- payment or delivery providers where used;
- legally authorized public authorities;
- another user where disclosure is necessary to complete a transaction.
We do not sell or rent users’ personal data.
8. Information shared between users
Information such as an email address, merchant number or transaction details may be shared with another user where necessary for a purchase, sale, delivery or product transfer. Users must use such information only for the relevant transaction.
9. Hosting
- Hosting provider: [HOSTING PROVIDER]
- Main hosting country: Morocco
- Hosting provider address: [COMPLETE ADDRESS]
Some external providers may process data in other countries. Required safeguards and formalities must be completed where applicable.
10. Retention
| Category | Indicative period |
|---|---|
| User account | While the account is active and thereafter as required by law. |
| Orders and payments | For periods required by accounting, tax, contractual or dispute obligations. |
| Support requests | For the time required to process and reasonably follow up the request. |
| Security logs | For a period proportionate to security and fraud-prevention needs. |
| Cookies | According to their type, purpose and user preferences. |
11. Cookies
Cookies may be used to:
- maintain user sessions;
- remember the cart and selected language;
- secure forms and accounts;
- measure traffic and performance;
- improve website functionality;
- personalize content where this feature is enabled.
Strictly necessary cookies may be used to operate the website. Non-essential cookies involving personal data should be placed only after obtaining the required consent. Users may change their choices through the cookie manager or browser settings.
12. Security
- HTTPS connections;
- secure password protection;
- restricted administrative access;
- monitoring of suspicious connections;
- website and module updates;
- regular backups;
- logging of sensitive operations.
Users must keep their passwords confidential and sign out of devices they do not control.
13. User rights
- access to personal data;
- correction of inaccurate or incomplete data;
- updating of information;
- objection to certain processing on legitimate grounds;
- deletion or blocking where legal requirements are met;
- withdrawal of consent where processing is based on consent;
- cessation of marketing communications.
Requests may be sent to [PRIVACY EMAIL ADDRESS]. Proof of identity may be requested where necessary to prevent unauthorized disclosure.
14. Account deletion
Users may request account closure by contacting [EMAIL ADDRESS]. Some information may be retained to comply with legal, tax, accounting, contractual or security obligations.
15. Communications
Essential account, subscription, order, security and contractual messages may be sent as part of the service. Optional marketing communications may be refused or stopped at any time.
16. Minors
The commercial services are intended for persons aged at least 18 who have the legal capacity to enter commercial transactions.
17. External services
The website may use or link to external services governed by their own privacy policies. Users should review those policies before supplying data.
18. Changes
This policy may be updated to reflect legal, technical or functional changes. The applicable version is the version published on this page with its update date.
19. Complaints and contact
Questions and requests relating to personal data may be sent to [PRIVACY EMAIL ADDRESS]. Users may also contact the Moroccan National Commission for the Control of Personal Data Protection in accordance with the applicable procedures.
[LEGAL COMPANY NAME]
[FULL ADDRESS]
Morocco
Email: [EMAIL ADDRESS]
Telephone: [TELEPHONE NUMBER]
