This policy explains what personal data IGNITECH SARL AU collects, why we collect it, what we do with it and the rights you have over it. It covers this website and the services we provide to clients. We have written it to be read rather than to be survived, and where a section is unavoidably technical we have said plainly what it means for you.
Who is responsible for your data
The data controller is IGNITECH SARL AU, 13 Rue Ahmed El Majjati, Rés. Les Alpes, 1er étage N°8, Quartier Maarif, Casablanca/Anfa, Morocco. If you want to reach us about anything in this policy, use the contact page and mark your message for the attention of data protection. We answer these ourselves rather than routing them to a general queue.
When we deliver services to a client, that client is usually the controller of their own customers' data and we act as a processor on their written instructions. In that case their privacy policy governs the data, and ours governs only the information we hold about our own relationship with them.
What we collect and why
When you contact us
Your name, email address, telephone number if you give one, the company you represent and whatever you write in your message. We use it to answer you and, if we go on to work together, to run the engagement. The lawful basis is our legitimate interest in responding to enquiries, and performance of a contract once one exists.
When you subscribe to updates
Your email address and language preference, used to send you the material you asked for. The lawful basis is your consent, and every message carries an unsubscribe link that works immediately rather than after a delay.
When you become a client
Contact details for the people we work with, billing information, the contents of our correspondence, and the project material you share with us. The lawful basis is performance of our contract with you, and our legal obligation to keep accounting records.
When you visit this site
Server logs record your IP address, browser type and version, the pages you visit, timestamps and referring page. This is ordinary web server behaviour and we use it to keep the service running, diagnose faults and detect abuse. The lawful basis is our legitimate interest in operating a secure and functioning website.
Analytics and marketing measurement are separate, and they run only if you accept the corresponding cookie categories. Until you do, those tools operate in a restricted state and do not store identifiers on your device. What each cookie is, who sets it and how long it lasts is published in full in our Cookie Policy.
Your rights
Where the General Data Protection Regulation applies to you these rights come from it directly. We honour them for everyone who contacts us, regardless of where they are, because operating two standards would be harder than operating one.
- Access. Ask whether we hold personal data about you and receive a copy.
- Rectification. Ask us to correct data that is wrong or incomplete.
- Erasure. Ask us to delete your data where we have no continuing lawful reason to keep it.
- Restriction. Ask us to pause processing while a dispute about accuracy or legitimacy is resolved.
- Portability. Where processing rests on consent or a contract and is automated, receive your data in a structured, machine-readable form, or have us send it to another provider.
- Objection. Object to processing based on legitimate interests, and object to direct marketing at any time with no reason required.
- Withdrawing consent. Withdraw consent at any time where processing rests on it. Withdrawal does not undo processing that was lawful before you withdrew.
We respond within one month. If a request is unusually complex we will tell you before that month is out and say how much longer we need. There is no charge.
How long we keep it
We keep personal data only while there is a reason to. Enquiries that do not become engagements are cleared once the conversation has clearly ended. Client records are kept for the life of the engagement and afterwards for as long as accounting and limitation rules require. Marketing subscriptions last until you unsubscribe. Server logs are short-lived and kept for security and diagnostics only.
Who else sees it
We do not sell personal data and we do not share it for anyone else's marketing.
We do use service providers to operate: hosting and content delivery, object storage, email delivery, analytics, advertising measurement and customer support tooling. They process data on our instructions, under contract, and only for the purpose we engaged them for. We also disclose data where the law requires it or to establish or defend a legal claim.
International transfers
We work with clients internationally and the services that run this site operate across borders, so your data may be processed outside your own country. Where a transfer leaves the European Economic Area it is made under the safeguards the law requires, such as an adequacy decision or standard contractual clauses. The providers involved are named in our published security statement rather than summarised here, because a summary drifts out of date the moment a tool changes:
Download the IGNITECH Security Policy and GDPR statement (PDF)
Security
We apply technical and organisational measures appropriate to the risk: encryption in transit, access limited to people who need it, credential hygiene and monitoring for unusual activity. No system is perfectly secure and we will not claim otherwise. If a breach occurs that is likely to affect your rights, we will notify the relevant authority and, where required, you.
Automated decision-making
We do not make decisions producing legal or similarly significant effects about you by automated means alone.
Children
Our services are aimed at businesses. We do not knowingly collect personal data from children. If you believe a child has provided us with data, tell us and we will delete it.
Other sites
Our pages link to sites we do not operate, including client work, platform documentation and industry sources. Their privacy practices are their own, and we encourage you to read the policy of any site you visit from here.
Complaining to a regulator
If you believe we have handled your data improperly, tell us first and we will try to put it right. You may also go straight to a regulator. In Morocco that is the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP). If you are in the European Economic Area or the United Kingdom, you may complain to the supervisory authority where you live or work.
Changes to this policy
When our processing changes, this page changes with it. Material changes are announced rather than applied quietly, and the version published here is always the current one.