Privacy Policy

NAITECH Consult (North African Institution of Technology), data controller.

Address: Avenue Mohamed Bel Hassan EL Ouazzani, Résidence ESSALAM, Imm. A, n°4, Nahda II, 10210 Rabat, Morocco.

Contact: naitech@naitechconsult.com · +212 6 61 18 50 40.

For any question about your personal data, write to naitech@naitechconsult.com with "Personal data" in the subject line. We reply within one month.

• Contact form: name, email, subject, practice of interest and message.
• Quote request (tools and simulators): name, role, organization, email, phone, headcount and the tool result you choose to attach.
• Training registration: details of the employer, the signatory and the participant (title, last and first name, role, phone, email).
• Job application: name, email, phone, message and CV.
• Consultant space (if you create an account): identity, contact details, expertise, degrees, experience, availability, daily rate, CV and password (stored as a hash, never in clear text).
• Training evaluation: your answers to the satisfaction and learning questionnaires, linked to the identifier given by the trainer.
• Newsletter / brochure: email address.
• First-touch attribution: utm_* parameters, landing page and referrer, sent with your inquiry if you accepted marketing cookies.
• Technical data: IP address and browser, used for security (submission limits, bot check); audience measurement: see the Cookie Policy.

The site assistant answers from the content published on the site. Your questions are not stored and are not sent to any artificial-intelligence provider.

• Respond to your inquiries and manage follow-up.
• Send the newsletter and our insights, after you confirm your address using the link we send you (double opt-in).
• Measure audience and improve the site.
• Advertising and retargeting (only with your consent).
• Security, abuse prevention and legal obligations.

• Your consent (newsletter, analytics and marketing cookies).
• Legitimate interest or pre-contractual steps (handling your inquiries, security).
• Legal obligations.

In Morocco (Law 09-08), processing relies on your unambiguous consent unless an exemption applies (performance of a contract, legal obligation, etc.).

We use providers that process data on our behalf:

• Vercel (site hosting, and anonymous audience measurement after consent).
• Cloudflare (Turnstile): bot check when a form is sent.
• Resend (email delivery).
• Upstash (submission limits, safety copy of inquiries, encrypted consultant space).
• HostGator / Newfold Digital: hosting of our mailboxes and of our client-management software (Dolibarr), where inquiries are followed up.
• Google (Tag Manager), Meta (Pixel), LinkedIn (Insight Tag), Microsoft (Clarity) — only after consent.
• Cal.com (scheduling) and WhatsApp/Meta (messaging) if you use them.

We do not sell or rent your data to anyone.

The providers above host or process some data outside Morocco (European Union, United States). Each is bound by a data processing agreement to process it only on our behalf and to protect it.

For individuals in the EU, transfers rely on appropriate safeguards (Standard Contractual Clauses or an adequacy decision).

• Contact, quote and registration requests: 3 years after the last exchange, in our mailboxes and client-management software. The technical safety copy is deleted automatically after 90 days.
• Job applications: 2 years after the last exchange, unless you ask for earlier erasure.
• Consultant space: for as long as your account exists. You can delete it yourself at any time from your space; the data is then erased.
• Training evaluations: as long as needed to report on the training to your employer, and no longer than 3 years.
• Newsletter: until you unsubscribe. A request not confirmed within 7 days lapses and is never subscribed.
• Cookies and consent: see the Cookie Policy (consent renewed every 13 months).

You have the rights of access, rectification, erasure, objection, restriction and portability, and the right to withdraw consent at any time.

California residents (CCPA/CPRA): the right to know, delete, correct, opt out of "sale/sharing", and non-discrimination. We honor the Global Privacy Control (GPC) signal.

To exercise your rights: naitech@naitechconsult.com.

If you believe your rights have not been respected, write to us first at naitech@naitechconsult.com and we will work on a solution with you. You may also contact the data protection authority of your country of residence.

We may update this policy. The last-updated date appears at the top of the page.