Privacy policy

1. Data controller

The data controller is STE UNZIPTECH SARL, a limited liability company under Moroccan law, ICE No. 003976166000014, registered office: Bureau n°23, 5th floor, Les Bureaux Alwaha, n°10 rue Machraa Belksiri VN, Fès 30000, Morocco ("RentalMe" or "we").

Contact for any question about your data: [email protected] or +212 660-010706.

Filings with the CNDP (Moroccan data protection authority): the declaration of the processing and the request for authorisation to transfer data abroad are in progress. The number will be given here once received.

2. The data we collect

• Waitlist: your e-mail address, your profile (renter or agency), the site language and the sign-up date.
• Founding agencies program: the agency name, the city, the manager's name, phone and e-mail, the fleet size, the vehicle types, the message you choose to add, the site language and the sign-up date.
• Proof of your consent: for each of these two sign-ups, we keep the exact sentence you accepted, in the language you read it in, the date and time, and whether the sign-up came from the site's form or from an AI assistant acting for you.
• Contact by e-mail: the site has no contact form. If you write to [email protected], we receive your address and the content of your messages.
• Technical data: as with any website, our hosts receive your IP address, browser type, the pages requested and the time of the request, to display the site and protect it from abuse.
• Audience measurement, only if you accept it: Google Analytics 4, loaded by Google Tag Manager, records the pages viewed and information about your device and browser, linked to a random identifier stored in a cookie. If you refuse, these tools are not loaded at all.
• Preferences on your device: your cookie choice, the language you picked and the closing of the "waitlist" window. Details are in our cookie policy: https://www.rentalme.ma/en/cookie-policy

3. Why, and on what legal basis

• Announcing the launch to you (waitlist): your consent, given by ticking the box on the form (Law No. 09-08, Articles 4 and 10).
• Contacting you about the founding agencies program: your consent, given by ticking the box on the form (Law No. 09-08, Articles 4 and 10).
• Keeping proof of that consent: our legitimate interest in being able to show you gave it (Law No. 09-08, Article 4).
• Answering your e-mails: your request and our legitimate interest in answering you (Law No. 09-08, Article 4).
• Running and protecting the site (technical data): our legitimate interest (Law No. 09-08, Article 4).
• Measuring the audience: your consent, given in the cookie banner and withdrawable at any time with the "Manage cookies" link at the bottom of every page (Law No. 09-08, Article 4).

4. Who receives your data

Your data is read by the RentalMe team. It also goes through the following providers, acting on our behalf:

• Vercel Inc. (United States): hosting of the site; the site's functions, which receive the forms, run in Paris (France).
• Cloudflare, Inc. (United States): network, site protection, and forwarding of e-mails sent to [email protected] to the RentalMe team's Gmail inbox.
• Google LLC (United States: Firebase, Gmail, Tag Manager, Analytics): storage of waitlist and agencies program sign-ups and of the consent records (Cloud Firestore); receipt of your e-mails (Gmail); audience measurement, only if you accepted it (Tag Manager, Analytics).
• Telegram: our team gets an alert for each sign-up. The alert contains no personal data: only the profile (renter or agency), fleet size, vehicle types and language.

5. Transfers outside Morocco

Vercel runs the site's functions in Paris (France), a country that ensures a sufficient level of protection (Article 43 of Law No. 09-08). Google and Cloudflare are established in the United States, which is not one of these countries: these transfers fall under Article 44 of Law No. 09-08. They rely on each provider's contractual commitments and are subject to the CNDP's authorisation (section 1).

6. How long we keep it

• Waitlist: until 12 months after RentalMe opens to the public, or until you ask for deletion.
• Founding agencies program: until 12 months after RentalMe opens to the public, or until you ask for deletion.
• Proof of consent: as long as the sign-up it relates to; it is deleted with it.
• E-mails: 2 years after our last exchange with you, or sooner if you ask for their deletion.
• Technical data at our hosts: [PERIOD TO BE CONFIRMED WITH VERCEL AND CLOUDFLARE].
• Audience measurement: [PERIOD SET IN GOOGLE ANALYTICS TO BE CONFIRMED].
• Preferences on your device: see the cookie policy: https://www.rentalme.ma/en/cookie-policy

7. Your rights

Under Law No. 09-08, you have the right to information (Article 5), access (Article 7), rectification and erasure (Article 8) and to object, including, without giving a reason, to direct marketing (Article 9).

You can withdraw your consent at any time, without affecting what was done before: write to us for the waitlist or the agencies program, or use "Manage cookies" for audience measurement.

To exercise these rights, write to [email protected], or by post to the address in section 1. We reply within 30 days.

You can also complain to the CNDP (https://www.cndp.ma).

8. Having your data deleted

• Write to [email protected] with the word "deletion", from the e-mail address you gave, or stating the phone number you gave to the agencies program.
• If we cannot be sure the request comes from you, we ask you to confirm it from that address or number.
• We delete your sign-up (waitlist or agencies program) and the consent record linked to it, as well as our exchanges with you, except those the law requires us to keep.
• We confirm the deletion by e-mail, within 30 days.

Our team's Telegram alerts contain no personal data: there is nothing to delete there. Audience data is linked to a random identifier, not to your name: to stop it, refuse audience measurement with "Manage cookies" and delete the site's cookies in your browser.

9. Security

The site is served over HTTPS only. [PROTECTION OF THE FIRESTORE DATABASE TO BE DESCRIBED ONCE ITS ACCESS RULES ARE CHECKED].

10. Changes

If this policy changes, we update the date at the top of the page and say what changed.