Skip to content

Privacy Policy

Data controller

The controller for the processing described in this policy is HELLO PROPRE, a limited liability company trading under the name EPUREVA — Appartement 33, Résidence Jakar, 55 Avenue Mohammed V, Marrakech 40000, Morocco — contact@epureva.ma, +212 664 58 41 06.

Its full identification — trade register 178185 at the Commercial Court of Marrakech, ICE 003855626000050 — appears in the legal notice.

This processing is subject to Law 09-08 on the protection of individuals with regard to the processing of personal data and its implementing decree, under the supervision of the Commission Nationale de contrôle de la protection des données à caractère personnel (CNDP), Morocco's data protection authority.

Data collected, channel by channel

No data is collected without your knowledge, and none is collected "just in case".

Contact and quotation-request form: name or company name, telephone number, email address, address of the property concerned, description of the requirement and, where applicable, photographs sent voluntarily.

Price estimator: the information entered — type of property, surfaces, condition declared — is used only to calculate and display the estimate. Nothing is kept: no database, no session, no log of entries. The request only reaches us if you send it yourself on WhatsApp, with the pre-filled message; it then falls under the paragraph on instant messaging.

Instant messaging: when you write to us by messaging, the phone number identifying your account and the content of your messages are passed to us by the application concerned. This exchange is also subject to the terms of that application's publisher, over which we have no control.

Carrying out a service: invoicing details, property access information, signed handover documents and photographs from the joint arrival report.

Browsing the site: nothing. The site does not measure its audience — see the section on trackers.

No sensitive data within the meaning of Law 09-08 — origin, opinions, health, trade union membership, biometric data — is collected or requested.

Purposes pursued and basis for each processing activity

Each processing activity pursues a defined purpose and rests on an identified legal basis:

  • Quotation request — producing a price and responding to it. Basis: pre-contractual steps taken at your request.
  • Price estimator — calculating and displaying an indicative estimate, without keeping anything. Basis: pre-contractual steps taken at your request.
  • Carrying out the job — planning, performing and handing over the service. Basis: performance of the contract.
  • Invoicing and accounting — issuing and keeping accounting records. Basis: legal obligation.
  • Complaints and the return-visit guarantee — handling a reservation and evidencing how it was handled. Basis: performance of the contract.
  • Site security — preventing automated submissions and abuse. Basis: legitimate interest.

Your data is never sold, rented or transferred for advertising purposes. It is used to send you marketing communications only if you have given separate, revocable consent to that.

Retention periods by data category

  • Quotation request with no follow-up: kept for the duration of the exchange, then for a maximum of three years from the last contact, so that a reopened enquiry can be picked back up.
  • Price estimate: not kept at all. Only the request you send yourself on WhatsApp reaches us, and it follows the rule for messaging exchanges.
  • Active client file: kept for the entire duration of the contractual relationship.
  • Accounting and tax records: kept for ten years, in accordance with legal retention obligations.
  • Handover documents and arrival-report photographs: kept for five years, the period after which no complaint about the intervention can still be raised.
  • Messaging exchanges: deleted once no longer needed for the file they relate to.

At the end of these periods the data is deleted. Data the law requires us to keep for longer, in particular accounting records, is set aside and used for nothing but meeting that obligation.

Data recipients and technical service providers

Data is accessible only to those who need it for the purpose pursued: the person handling your file, the person responsible for invoicing and, where the intervention requires it, the site supervisor present on the job.

It may be disclosed to third parties in three cases only:

  1. Hostinger, which hosts the site and its database, without accessing the data for its own purposes.
  2. The company's accounting firm and, where applicable, the tax authorities, for accounting records.
  3. A judicial or administrative authority with the power to require it, on a proper request.

No other sharing takes place. In particular, no data is passed to a data broker, an advertising network or a business directory.

Cookies and trackers — no audience measurement

This site does not measure its audience. No statistics tool, no advertising network, no social-sharing button loaded from a third-party domain, no tracking pixel and no remotely called web font are embedded in the pages. Nothing is loaded from any domain other than epureva.ma. The only JavaScript file served weighs less than one kilobyte and does nothing but make browsing more comfortable.

So we do not know how many people visit this site, where they come from, or which pages they read. That is a choice: speed and discretion were worth more than a dashboard.

One tracker may be set, and only if you open a form: a strictly necessary session cookie carrying the security token that protects the submission against automated posting. It contains no personal data, it is inaccessible to the page's JavaScript, it is not sent to any other site, and it disappears when you close your browser.

You can configure your browser at any time to refuse trackers. Refusing this session cookie prevents forms from being submitted: there is no other way of checking that the request really comes from the page you opened.

Your rights under Law 09-08 and how to exercise them

Law 09-08 grants you, over data concerning you:

  • a right to information about the existence and characteristics of the processing;
  • a right of access to the data held and its origin;
  • a right of rectification of data that is inaccurate, incomplete or out of date;
  • a right to object, on legitimate grounds, to the processing of your data, and without having to justify your request where it concerns direct marketing;
  • a right of erasure of data whose processing would be unlawful or whose retention is no longer justified.

How to exercise these rights. Send a request to contact@epureva.ma or by post to the registered office, stating the purpose of your request and enclosing a copy of proof of identity where necessary to avoid disclosing your data to a third party. A reply is provided within the period set by the regulations.

Some data cannot be deleted on request while a legal obligation requires it to be kept, in particular accounting records. In that case, it is isolated and no longer used for any other purpose.

Recourse. If the reply you receive does not satisfy you, you may refer the matter to the Commission Nationale de contrôle de la protection des données à caractère personnel (CNDP). The company's contact details for any prior request are on the contact page.

Data security and incident management

The following measures are in place: encryption of exchanges between your browser and the site, access restricted to authorised individuals only, named accounts, regular backups and separate retention of accounting records.

Photographs sent for a quotation are used only to draw up the quotation and document the job; they are never published without the written agreement of the property's owner or manager, as set out on our case studies page.

In the event of a security incident affecting your data, the individuals concerned and the CNDP are informed under the conditions set out in the applicable regulations.

Data transfers outside Morocco

Law 09-08 makes any transfer of data to a foreign state conditional on that state ensuring an adequate level of protection, and subjects it to CNDP authorisation.

We do not transfer your data to, or make it available to, any recipient established outside Morocco. The only flow concerned is the hosting of the site and its database, entrusted to Hostinger and governed by our contract with that provider. No data is exported to an analytics tool, an advertising platform or any third-party service of any kind.

Exchanges carried out via a third-party messaging application are subject to that publisher's policy and may involve processing outside Morocco, independently of our wishes. If this point matters to you, please use email or the site's form instead.

Updating this policy

This policy may be amended to reflect changes to the site, to the processing carried out, or to the regulations. The date of the last update appears at the bottom of this page.

The contractual conditions applicable to services are set out separately in the general terms and conditions of sale.

Last updated:

EPUREVA
Appartement 33, Résidence Jakar
55 Av. Mohammed V
Marrakech 40000, Maroc
+212 664 58 41 06
contact@epureva.ma