Privacy

1. Who we are

Maly is published by ZENVESTA S.A.R.L., a Moroccan company. We are the data controller for the processing described in this policy, except when a client company uses Maly to manage its own data (see section 5).

2. What data do we use?

Identity and contact details (name, email, phone). Account and subscription information. Data necessary for invoicing and the service. Communications with Maly. Technical data necessary for security and operation.

3. Why do we use this data?

To provide and administer Maly. Manage accounts and subscriptions. Provide support. Secure the platform. Comply with legal obligations. Communicate with users. Improve the Service where permitted.

4. On what basis?

Depending on the processing concerned, we use your data to perform the contract, take pre-contractual measures, comply with our legal obligations, pursue our legitimate interests or obtain your consent where required (article 4 of Law No. 09-08).

5. When Maly processes its clients' data

When a company uses Maly to manage the data of its own customers, suppliers or employees, that company remains the data controller. ZENVESTA then processes the data on its behalf under the terms of the Maly DPA.

6. Data sharing

Data may be accessible to authorized Maly staff and to providers necessary for the delivery of the Service.

Maly may use technical providers for hosting, electronic communication, payment and certain features necessary for the Service. These providers only access data to the extent necessary to provide their services and are governed in accordance with applicable obligations.

7. International transfers

Some of our providers may process or host data outside Morocco. When this occurs, transfers are governed in accordance with applicable regulations.

8. Retention

We retain data only for as long as necessary for the purposes for which it was collected and for applicable legal or evidentiary obligations.

For example: account — duration of the relationship; accounting documents — legal period; contact requests — limited period.

9. Security

Maly implements technical and organizational measures designed to protect data against unauthorized access, loss, alteration or disclosure.

10. Your rights

You have rights of access, rectification, erasure (where applicable) and objection (articles 7 to 9 of Law No. 09-08).

To exercise your rights: contact@maly.ma.

11. CNDP

The processing concerned is subject to the applicable formalities with the CNDP. The corresponding references may be communicated or published once they have been issued.