HMDPrivacy / Data Policy
Last updated: August 2026
This policy explains how HMD Imperial collects, uses, stores and protects your personal data, in line with Morocco's Law 09-08 on the protection of individuals with regard to the processing of personal data, overseen by the CNDP (Commission Nationale de contrôle de la protection des Données à caractère Personnel). This page is a general template and should be reviewed by qualified legal counsel.
1. Data we collect
Account details (name, email, phone), questionnaire answers (business activity, nationality, occupation, and similar), and identity documents you upload (government ID, passport, driver's licence, CV, contracts, bank statements).
2. Why we collect it
To create and verify your account, process your business, immigration, consulting or verification case, generate your reference number, communicate with you about your case, and comply with applicable legal and regulatory obligations.
3. Where it is stored
Data is stored with our infrastructure provider (Supabase) in an encrypted, access-controlled database and a private document storage bucket. Only you and authorised HMD Imperial staff assigned to your case can access your documents.
4. Who we share it with
We share data with government authorities, banks or partner organisations only where required to process your specific request, and with our payment processor (PayPal) solely to process payment — we never store your full card or PayPal account details.
5. Your rights
Under Law 09-08, you may request access to, correction of, or deletion of your personal data, subject to our legal retention obligations for completed cases. Contact contact@hmdimperial.com to exercise these rights.
6. Data retention
We retain case data for as long as needed to complete your service and to meet legal, tax and regulatory retention requirements, after which it is securely deleted or anonymised.
7. Contact
For any data protection question, contact contact@hmdimperial.com.