Privacy Policy
Last updated: [To be completed upon publication]
1. Who We Are
UPLEO SARL, a limited liability company incorporated under Moroccan law, registered with the Casablanca Trade Register under number 604543 (ICE 003381108000082), with its registered office at 46, Bd Zerktouni, 2nd floor, Apt No. 06, 20000 Casablanca, Morocco, is the data controller for personal data collected through upleo.ma.
2. What Data We Collect
Depending on how you interact with the site, we may collect:
- Contact form : name, email address, phone number, area of interest (Intelligence, Tech & AI, Creative), message
- Job applications (Careers page) : name, contact details, CV, cover letter, and any information you choose to share in your application
- Newsletter and notifications : e.g. Formations launch alert: email address
- Browsing data : pages viewed, visit duration, device and browser type, IP address, via cookies and audience measurement tools
See our Cookie Policy for details.
3. Why We Collect This Data
| Purpose | Data involved | Legal basis |
|---|---|---|
| Responding to your inquiry | Contact form | Pre-contractual measures / legitimate interest |
| Processing your application | CV, cover letter, contact details | Pre-contractual measures |
| Informing you of product/training launches | Email (newsletter, notifications) | Consent |
| Measuring audience and improving the site | Browsing data | Consent (non-essential cookies) |
4. How We Collect Your Data
The site's contact form is processed via our own outgoing mail server (SMTP), without a third-party intermediary for this specific step. Applications received through the Careers page are processed internally, without the use of a third-party applicant tracking tool.
Audience measurement tools (Google Analytics, via Google Tag Manager), however, involve the transfer of certain browsing data to servers located outside Morocco, including in the United States. This transfer only occurs after your explicit consent via the cookie banner, in accordance with Article 43 of Law No. 09-08. [The applicable safeguard framework for this transfer will be specified here once confirmed as part of our CNDP declaration.]
5. Who Has Access to Your Data
Your data is accessible to:
- Internally, by authorized UPLEO team members according to their role (sales team for the contact form, HR team for applications)
- Where applicable, technical subprocessors strictly necessary for the site's operation (hosting provider, audience measurement tool), limited to their respective functions
UPLEO does not sell, rent, or transfer your data to any third party for commercial purposes.
6. Retention Period
In the absence of a formalized retention policy to date, the following periods apply on an indicative basis and will be finalized following our CNDP compliance process:
| Data type | Envisaged retention period |
|---|---|
| Contact form (non-converted prospects) | 3 years from last contact |
| Unsuccessful applications | 2 years from receipt |
| Newsletter / notifications | Until unsubscribe |
| Browsing data (analytics cookies) | 13 months maximum |
These periods are indicative and must be validated with legal or accounting counsel before final publication.
7. Your Rights
In accordance with Law No. 09-08 on the protection of individuals with regard to the processing of personal data, you have the following rights:
- Right of access : obtain confirmation that your data is being processed and receive a copy of it
- Right of rectification : have inaccurate or incomplete data corrected
- Right to object : object, on legitimate grounds, to the processing of your data
- Right to withdraw consent : at any time, for processing based on your consent (newsletter, non-essential cookies), without retroactive effect
To exercise these rights, contact us at: privacy@upleo.ma
You also have the right to lodge a complaint with the National Commission for the Control of Personal Data Protection (CNDP), Morocco's supervisory authority.
8. Security
UPLEO implements reasonable technical and organizational measures to protect your data against unauthorized access, loss, or alteration, in accordance with the security requirements set out in Articles 23 to 26 of Law No. 09-08.
9. CNDP Declaration
A declaration with the National Commission for the Control of Personal Data Protection (CNDP) is currently in progress for the processing activities described in this policy. The receipt number will be published on this page once issued.
10. Changes to This Policy
This policy may be updated to reflect legal, technical, or organizational changes. The last update date appears at the top of this page.
11. Contact
For any questions regarding this policy or to exercise your rights: privacy@upleo.ma