Karim Digital Consulting is the trading name of Abdelkarim Atmani, an individual established in Marrakech, Morocco. Abdelkarim Atmani is the data controller for the personal data described in this policy.
2. Data we collect
Identity and contact details: name, email address, phone number, company name, job title, country, and city.
Project and order details: service, plan, requirements, messages, files, and notes you send us.
Payment and billing details: payment method, transaction identifiers, amounts, invoices, and billing contact details. We do not receive or store full card numbers.
Communications: emails, contact-form messages, WhatsApp messages, and support requests.
Technical data: IP address, browser type, device type, operating system, referring URL, pages viewed, and approximate location derived from your IP address.
Consent and preferences: cookie choices, newsletter subscription status, and language or theme preferences.
3. How we use your data
To respond to enquiries, prepare quotes, and provide the services you request.
To process orders, payments, invoices, refunds, and subscription renewals.
To deliver, support, maintain, and improve our services.
To send service messages and, where you have consented, marketing communications.
To measure site performance and improve the website, where you have consented to analytics.
To protect our rights, prevent fraud, and comply with legal and accounting obligations.
4. Legal bases
Performance of a contract or steps taken before entering a contract.
Your consent, for marketing and non-essential cookies or analytics.
Our legitimate interests in operating, securing, and improving our business.
Compliance with legal obligations, including accounting and tax rules.
5. Payments
Payments are processed by PayPal or by bank transfer. PayPal processes card and account data under its own privacy policy. We receive transaction status, amount, and limited payer details needed to confirm and administer your order. We do not store card numbers or PayPal credentials.
6. Cookies and analytics
We use necessary cookies to operate the site and, only with your consent, analytics cookies to understand how the site is used. You can manage your choices at any time in the cookie settings. See our Cookie Policy for the full list.
7. Sharing and processors
Vercel Inc. — website hosting and infrastructure.
Supabase — database and storage for orders, messages, leads, and content.
PayPal — payment processing and subscription billing.
Our email delivery provider — transactional email and newsletters.
Google Analytics and Vercel Analytics — site analytics, only where consent is given.
Professional advisers, auditors, or authorities where required by law or necessary to protect our rights.
We do not sell your personal data.
8. International transfers
Some providers process data outside Morocco, including in the European Union and the United States. Where required, we rely on appropriate safeguards such as standard contractual clauses or an adequacy decision. You may contact us for more information about the safeguards used.
9. Retention
Contact enquiries and leads: up to 24 months after the last contact, unless a contract is signed.
Orders, invoices, and payment records: up to 10 years to meet accounting and legal obligations.
Newsletter data: until you unsubscribe or withdraw consent.
Analytics data: up to 14 months, or the shortest period offered by the provider.
Cookies: for the duration stated in the Cookie Policy.
10. Security
We use encrypted connections, access controls, least-privilege access, backups, and incident-response procedures. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
11. Your rights
Access the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion where we no longer need the data or where the law allows.
Object to or request restriction of processing.
Request portability of data you provided to us, where applicable.
Withdraw consent at any time, without affecting processing carried out before withdrawal.
Lodge a complaint with the Moroccan data protection authority (CNDP) or your local supervisory authority.
12. Marketing
We send marketing emails only with your consent or where otherwise permitted by law. You can unsubscribe using the link in every marketing email or by contacting us. Service messages about an order or contract are not marketing.
13. Children
Our services are intended for businesses and adults. We do not knowingly collect data from children under 16. If you believe a child has provided data, contact us and we will delete it.
14. Changes to this policy
We may update this policy to reflect changes in our services or the law. We will post the new version on this page and update the date. Material changes will be communicated where required.
15. Contact and complaints
For privacy questions or to exercise your rights, contact Abdelkarim Atmani at info@karimdigitalconsulting.com or +212 (0) 606 43 42 16. You also have the right to complain to the CNDP (Morocco) or your local data protection authority.