Plain-language summary. The mandate form does not send information to this website. It prepares an email draft on your device. Personal information is received by ES-SEBAIY only if you choose to send that email. The site does not include advertising or behavioural analytics code.
01
Scope and controller
This notice applies to the ES-SEBAIY website on which it appears and to initial mandate enquiries sent to the published professional email address. It does not replace the privacy, confidentiality or data processing terms of a signed engagement.
For those activities, the person responsible for deciding why and how personal information is handled is Imadeddine Es-sebaiy, operating ES-SEBAIY as an independent professional activity in Rabat, Morocco. Privacy requests can be sent to imadeddine@es-sebaiy.com.
02
Information handled
The website is deliberately designed to minimise collection. The distinction between preparing a brief and sending it matters.
| Activity | Information involved | What happens |
|---|---|---|
| Browse the site | Technical request data such as IP address, browser, device, timestamp and security events may be processed. | Hosting and access services use it to deliver and protect the site. ES-SEBAIY does not use it for behavioural advertising. |
| Prepare a mandate brief | Name, organisation, work email, role, mandate area, decision, context and timing entered in the form. | The information remains in your browser while the site prepares an email draft. It is not submitted to or stored by the website. |
| Send the email | Your email address, message, signature and any information or attachments you choose to include. | The message is transmitted through your email provider to the ES-SEBAIY professional mailbox and is then handled as an enquiry. |
Please do not send passwords, credentials, health information, government identifiers, payment-card details or other regulated or sensitive personal data in an initial enquiry.
03
Purposes and grounds
Information is handled only where relevant to:
- review, respond to and assess a mandate enquiry;
- arrange a requested conversation or define possible next steps;
- maintain records of decisions, correspondence and scope;
- protect the website, mailbox and professional activity;
- meet legal, regulatory, accounting or dispute-related duties.
Depending on the context, processing may be necessary to take steps you request, to meet a legal obligation, or to pursue a legitimate professional or security interest that does not override your rights. Consent is relied on where applicable law requires it. Enquiry data is not sold and is not used for unrelated direct marketing.
04
Recipients and international processing
Access is limited to the Founder & Principal and to service providers that are necessary for website delivery, access control, security or email. Information may also be disclosed where required by law, a competent authority, or to establish, exercise or defend legal rights.
Hosting, security and email providers may operate infrastructure in more than one country. Where that processing involves a transfer outside Morocco, applicable notification, authorisation, safeguard and contractual requirements apply according to the service configuration and applicable law.
05
Retention
- Unsent form entries
- Not retained by this website. They remain on your device only for the time needed to prepare the email draft.
- General enquiries
- Normally deleted or anonymised within 24 months after the last substantive contact when no engagement follows, unless a longer period is reasonably required for legal or dispute purposes.
- Engagement records
- Retained according to the signed agreement and applicable legal, accounting and professional requirements.
- Technical records
- Retained by relevant infrastructure providers according to their security and operational schedules.
06
Your rights
Subject to the conditions and exceptions in applicable law, you may request confirmation of whether information about you is processed, access to that information, correction of inaccurate or incomplete information, and opposition to processing on legitimate grounds. You may also request erasure, blocking or withdrawal of consent where those remedies apply.
Send the request from an address that reasonably allows identity to be verified and describe the information or correspondence concerned. Only the minimum information necessary to verify and answer the request will be sought.
The Moroccan data protection authority, the CNDP, explains the rights of access, rectification and opposition and provides a complaint channel.
Read the CNDP guidance07
Cookies, analytics and security
The ES-SEBAIY site code does not set advertising cookies, analytics cookies or behavioural trackers. Hosting and access-control services may use strictly necessary cookies or similar storage to authenticate permitted users, maintain security and deliver the site. If optional analytics or marketing technologies are added later, this notice and any required choice mechanism will be updated before they are used.
Reasonable technical and organisational measures are used to limit unauthorised access, alteration or loss. No website or email service can guarantee absolute security, which is why sensitive information should not be included in an initial email.
08
Changes and contact
This notice may change when the website, service providers or legal requirements change. The effective date at the top identifies the current version. Material changes will be reflected here before the revised processing begins where reasonably practicable.
Questions, rights requests or concerns can be sent to imadeddine@es-sebaiy.com. You may also contact or lodge a complaint with the CNDP.