Privacy Policy

Cielo Tech (“Cielo Tech”, “we”, “us”, or “our”) is committed to protecting the privacy of individuals who interact with our website and our business. This Privacy Policy explains what personal data we collect, how we use it, the legal grounds we rely on, and the rights available to you under applicable data protection law.

This policy applies to our corporate website and to our general business communications with prospective and existing clients, partners, and other contacts. It does not apply to personal data we process on behalf of a client during a service engagement see Section 3 below.

1. Introduction

This policy is intended to give a clear, corporate-standard account of our data practices as an IT consultancy operating across Morocco, Europe, and the wider MEA region.

2. Who is responsible for your data

For the purposes of this policy, the data controller is:

Cielo Tech
Casablanca, Rabat & Berkane, Morocco
Email: privacy@cielotech.ma

For any question or request relating to this policy or to your personal data, contact us using the details above.

3. Scope: when we act as controller, and when as processor

In most interactions with this website — for example, submitting a contact form or requesting a discovery call — Cielo Tech acts as the data controller, deciding how and why that data is processed, and this policy applies in full.

Where an engagement involves us processing personal data on a client’s behalf — for example, supporting a client’s IT systems under a managed services arrangement — Cielo Tech acts as a data processor on that client’s instructions. That processing is governed by a separate data processing agreement, not by this policy.

4. Personal data we collect

We collect personal data in the following categories:

• Website visitors — technical data such as IP address, browser type, device type, and general usage patterns, collected automatically through basic analytics.
• Prospective clients and business contacts — name, business email address, company name, job title, phone number, and the content of any message sent to us, submitted through our contact form or discovery-call request.
• Correspondence — records of our email or other communications with you, where relevant to an ongoing enquiry or relationship.

We do not knowingly collect special categories of personal data (such as health, religious belief, or biometric data) through this website, and ask that you do not include such information in any message to us.

5. How we collect personal data

We collect personal data:

• Directly from you, when you complete a form, request a discovery call, or otherwise contact us;
• Automatically, through basic website analytics as you browse the site; and
• From publicly available business sources (such as a company website or LinkedIn), where we identify you as a potential contact for a business enquiry.

6. How we use your data, and our legal basis

We use personal data for the following purposes:

• Responding to enquiries and scheduling discovery calls — necessary to take steps at your request prior to entering into a contract, or based on our legitimate interest in responding to business enquiries.
• Evaluating and delivering requested services — necessary for the performance of a contract, where an engagement follows.
• Maintaining business relationships and records — based on our legitimate interest in managing client and prospect relationships.
• Understanding and improving website usage — based on our legitimate interest in operating an effective website, or your consent where required by applicable law.
• Complying with legal obligations — such as tax, accounting, or regulatory recordkeeping requirements.

Where the GDPR applies (for visitors and contacts in the EU/EEA), the legal bases above are assessed under Articles 6(1)(a), (b), and (f) GDPR as applicable. In Morocco, personal data is processed in accordance with Law 09-08 on the protection of individuals with regard to the processing of personal data, under the oversight of the CNDP (Commission Nationale de contrôle de la protection des Données à caractère Personnel).

7. Cookies and similar technologies

This site may use essential cookies required for basic functionality, and, where enabled, analytics cookies to help us understand aggregate site usage. We do not use cookies for third-party advertising or cross-site tracking. You can manage or disable cookies at any time through your browser settings; disabling essential cookies may affect site functionality.

8. Who we share your data with

We do not sell or rent personal data. We may share personal data with:

• Service providers who support our website or business operations — such as hosting, email, or analytics providers — acting on our instructions and bound by confidentiality and data protection obligations;
• Professional advisors, such as our accountants or legal counsel, where necessary for our business operations; and
• Authorities, where required by law or to protect our legal rights.

Any service provider that processes personal data on our behalf is contractually bound to use it only for the purposes we specify and to apply appropriate security measures.

9. International data transfers

As a Morocco-based consultancy working with clients across Europe and the MEA region, personal data we hold may be processed in Morocco, the European Union, or elsewhere. Where personal data originating in the EU/EEA is transferred outside that area, we take appropriate steps to ensure an adequate level of protection, including the use of Standard Contractual Clauses or equivalent safeguards recognized under the GDPR, where applicable.

10. Data security

We apply appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, or disclosure, proportionate to the nature of the data involved. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Data retention

We retain personal data only for as long as necessary for the purposes described in this policy:

• Contact form and discovery-call submissions that do not lead to a business relationship are retained for up to 24 months, then deleted or anonymized;
• Where a business relationship follows, related personal data is retained for the duration of that relationship, plus any period required by applicable legal, tax, or contractual obligations; and
• Website analytics data is retained in aggregate form and is not used to identify individuals beyond the retention periods of the underlying analytics tool.

12. Your rights

Subject to applicable law, you may have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Request erasure of your personal data;
• Object to, or request restriction of, certain processing;
• Request that your data be transferred to you or to another provider (data portability); and
• Withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at hello@cielotech.ma. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority — for example, the CNDP in Morocco, or the relevant supervisory authority in your EU/EEA member state.

13. Children’s privacy

This website and our services are directed at businesses and professionals. We do not knowingly collect personal data from children, and this site is not intended for use by individuals under the age of 16.

14. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or in applicable law. The version published on this page is the version currently in effect.

15. Contact us

For any question about this policy or how we handle personal data, contact us at privacy@cielotech.ma.