Your data
Privacy policy
Last updated: 20 October 2026. Draft for lawyer review.
Data controller
The AFRIKAWA project processes Join requests. The legal entity, registered address and CNDP notification number are still to be completed in the legal notice before public production use.
Data we collect
When you use the Join form we collect your full name, email address, city, area of interest and consent, plus your phone number and message if you provide them. We also process technical anti-abuse signals (completion time, a hidden honeypot field and, if enabled, a Cloudflare Turnstile token). We do not ask for identity documents, payment data or investor files on this website.
Why we use it
We use this information only to review your request, reply to you, keep a record of the exchange and protect the form from abuse. We do not sell your data and we do not use it for automated credit or scoring decisions.
Legal basis and Law 09-08
Processing is based on your consent, in line with Law 09-08 on the protection of individuals with regard to the processing of personal data. You may withdraw that consent at any time. Withdrawal does not affect exchanges already completed.
Retention
Requests are kept for 12 months after the last exchange, then deleted, unless a legal obligation requires a longer period.
Recipients and hosting
Data may be hosted in a cPanel MySQL or Supabase database configured for AFRIKAWA. Notifications may be sent through the configured email provider. Administrative access is restricted to authorised AFRIKAWA operators. Any transfer outside Morocco will be mentioned here once the production host is confirmed. TODO: complete host country and CNDP transfer basis.
Your CNDP rights
You may ask to access, correct, update or delete your data, or object to its processing, and you may withdraw consent. You may also contact the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP). Use the public contact address in the legal notice.
Abuse protection
The form uses rate limiting, a honeypot and a minimum completion time. Cloudflare Turnstile may be enabled if abuse requires it. These controls are used only to protect the service.
Applications
The Careers form collects your name, email, phone or WhatsApp, city, target role, resume (PDF, DOC or DOCX), an optional link, availability, schedule, mobility, whether you hold a driving licence, languages and levels, three short answers, an optional source, your consent and anti-abuse signals. We do not ask for a photo, age, marital status, religion or a copy of a licence. The resume is stored outside the public site and is available only to authorised administrators through a short-lived link. Purpose: review an application and reply. Basis: your consent, under Law 09-08 / CNDP. Retention: 12 months from submission, then the record and file are deleted, unless a legal duty requires longer. You may request access, correction or deletion via the contact address in the legal notice, and you may contact the CNDP. Draft for a lawyer to review before it is treated as final.