Privacy Policy

1. Data Controller

The data controller for information collected via Médiateurs.ma is:

• Name: Médiateurs.ma — company incorporated under Moroccan law
• Email: privacy@mediateurs.ma
• Website: mediateurs.ma

Médiateurs.ma is declared with the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP) in accordance with Law No. 09-08.

2. Data Collected

No sensitive data (ethnic origin, religious beliefs, health data) is collected without explicit consent.

3. Purposes and Legal Bases

4. Retention Periods

• Active account data: duration of the account + 3 years after last login.
• Closed cases: 5 years from closing date.
• Proof of payment: 10 years (Moroccan tax obligation).
• Connection logs: 12 months.
• After account deletion: anonymisation or deletion within 30 days, unless legally required otherwise.

5. Data Sharing

Médiateurs.ma never sells your personal data. Your data may be shared with:

• The mediator or client involved strictly within the scope of the case.
• Technical service providers (hosting, email) under contract.
• Competent authorities upon judicial requisition or legal obligation.

6. Cookies and Trackers

Médiateurs.ma uses strictly necessary cookies for operation (session, security) that do not require consent. Anonymised analytics cookies may be used — you can refuse them via your browser settings.

Google reCAPTCHA is used on forms and is subject to Google's Privacy Policy.

7. Data Security

7.1 — Technical measures implemented by Médiateurs.ma.

• Passwords stored using bcrypt — never in plain text.
• Communications encrypted via HTTPS (TLS).
• Access restricted to authorised personnel.
• Mandatory email verification before account activation.
• reCAPTCHA protection and login attempt limiting.
• Prepared SQL queries (protection against SQL injection).

7.2 — Confidentiality of the case: mediator's exclusive duty. Case documents, evidence, and detailed content are exchanged directly between the mediator and the client (email, secure channel, in-person meetings) outside the platform. Médiateurs.ma has no access to this content. Under Moroccan law (Penal Code, Law No. 08-05 on arbitration and conventional mediation) and applicable ethical rules, professional secrecy binds the mediator personally: they are solely responsible for the security and confidentiality of the case vis-à-vis the client.

7.3 — Respective obligations.

• Mediator: ensure the confidentiality of the exchange (secure channels, secure storage, no sharing with third parties without consent).
• Client: take reasonable care of their own devices and credentials.
• Médiateurs.ma: secure only the data hosted on the platform (accounts, messages exchanged through the in-platform messaging system, case metadata).

8. Your Rights

Under Law No. 09-08 and the GDPR, you have the following rights:

To exercise your rights: privacy@mediateurs.ma. Response within 30 days.

9. International Transfers

Your data is hosted in Morocco or the European Union. Any transfer outside these territories is governed by appropriate safeguards. The use of Google reCAPTCHA involves a transfer to Google LLC servers (United States), governed by Google's standard contractual clauses.

10. Amendments

In the event of a material change, you will be notified by email at least 15 days before it takes effect.

11. Contact and Complaints

Contact: privacy@mediateurs.ma

Complaint to the CNDP:

• Website: www.cndp.ma
• Address: Angle Rues Ahl Fès et Aïn Khalouiya, Hay Riad, Rabat, Morocco

Policy compliant with Moroccan Law No. 09-08 and the GDPR (EU 2016/679).