privacy policy

This Privacy Policy describes how Rifaki Enterprises Inc. (“Rifaki Enterprises,” “we,” “us,” “our”) collects, uses, discloses and protects personal information when you visit mouhssine.rifaki.me (the “Site”) or interact with us through the Site. By using the Site you agree to the practices described in this Policy. This Policy is incorporated into and subject to our Terms of Use.

1. information we collect

Information you provide directly. When you use the contact form, we collect your name, email address and the content of your message. When you subscribe to the newsletter, we collect your email address. You may also provide information by emailing us directly.

Information collected automatically. When you visit the Site, our hosting provider (Vercel Inc.) may automatically collect certain technical information, including your IP address, browser type, operating system, referring URL, pages visited, date and time of access and similar usage data. This information is collected through server logs and is used for security, performance monitoring and abuse prevention.

Cookies and similar technologies. The Site uses essential cookies required for the functioning of the contact form, newsletter subscription and challenge verification. We do not use advertising cookies, tracking pixels or third-party analytics cookies. No personal data is sold to or shared with third-party advertisers.

2. how we use your information

We use the information we collect for the following purposes: (a) to respond to your contact form submissions and inquiries; (b) to send you newsletter communications if you have subscribed; (c) to operate, maintain, secure and improve the Site; (d) to detect, prevent and address technical issues, fraud, abuse and security threats; (e) to comply with legal obligations, enforce our Terms of Use and protect our rights and the rights of others; and (f) for any other purpose with your consent.

3. legal basis for processing (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom or Switzerland, we process your personal data on the following legal bases: (a) your consent (for newsletter subscriptions, which you may withdraw at any time by unsubscribing); (b) performance of a contract or steps taken at your request (for responding to your contact form submissions); (c) our legitimate interests (for Site security, abuse prevention and improvement), provided that such interests are not overridden by your data protection rights; and (d) compliance with legal obligations.

4. data sharing and disclosure

We do not sell, rent, trade or otherwise disclose your personal information to third parties for their marketing purposes. We may share your information with: (a) service providers who perform functions on our behalf, such as hosting (Vercel Inc.), email delivery and infrastructure services, subject to contractual obligations of confidentiality and data protection; (b) law enforcement, government authorities or other third parties when required by law, legal process, court order or governmental request, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, the safety of others or to investigate fraud or security issues; and (c) a successor entity in connection with a merger, acquisition, reorganization, sale of assets or similar transaction, in which case your personal information may be among the assets transferred.

5. data retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting or reporting requirements. Contact form submissions are retained for the duration of the business relationship and for a reasonable period thereafter. Newsletter subscription data is retained until you unsubscribe. Server logs are retained in accordance with our hosting provider’s retention policies.

6. data security

We implement reasonable administrative, technical and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, destruction or loss. The Site is served over HTTPS with TLS encryption. Contact form submissions are transmitted over encrypted connections. No method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

7. international data transfers

Your information may be processed and stored in the United States or other countries where our service providers maintain facilities. If you are located outside the United States, your personal information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Site, you consent to such transfer and processing. Where required by applicable law, we take appropriate safeguards to ensure an adequate level of data protection.

8. your rights

All users. You may: (a) request access to the personal information we hold about you; (b) request correction of inaccurate or incomplete personal information; (c) request deletion of your personal information, subject to our legal obligations; (d) unsubscribe from the newsletter at any time by using the unsubscribe link in any newsletter email or by contacting us; and (e) contact us with any questions or concerns about our privacy practices.

California residents (CCPA/CPRA). If you are a California resident, you have the right to: (a) know what personal information we collect, use, disclose and sell; (b) request deletion of your personal information; (c) opt out of the sale or sharing of your personal information (we do not sell or share personal information as defined by the CCPA); (d) not be discriminated against for exercising your privacy rights; and (e) request correction of inaccurate personal information. To exercise these rights, contact us at mouhssine@rifaki.me. We will respond within 45 days as required by the CCPA. We do not sell personal information. In the preceding 12 months, we have collected the following categories of personal information: identifiers (name, email address, IP address) and internet or other electronic network activity information (browsing history, search history, interactions with the Site).

EEA, UK and Swiss residents (GDPR). If you are located in the EEA, the United Kingdom or Switzerland, you have additional rights under the GDPR, including: (a) the right to access, rectify and erase your personal data; (b) the right to restrict or object to processing; (c) the right to data portability; (d) the right to withdraw consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal); and (e) the right to lodge a complaint with a supervisory authority. To exercise these rights, contact us at mouhssine@rifaki.me.

9. children’s privacy

The Site is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18 without verification of parental consent, we will take steps to delete that information promptly. If you believe we have collected information from a child under 18, please contact us.

10. do not track

The Site does not respond to Do Not Track (“DNT”) browser signals because there is no industry-standard technology for recognizing or honoring DNT signals. We do not track users across third-party websites and do not use third-party tracking technologies.

11. data breach notification

If we become aware of a security incident that results in the unauthorized access to, acquisition of, or disclosure of your personal information, we will notify you and the relevant regulatory authorities as required by applicable law, including applicable state data breach notification statutes, the GDPR (within 72 hours of becoming aware, where required) and any other applicable data protection legislation. Notification will include, to the extent known, the nature of the incident, the categories of personal information affected, the likely consequences and the measures taken or proposed to address the incident and mitigate its effects.

12. changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by a new effective date at the top of this page. Your continued use of the Site after changes take effect constitutes acceptance of the revised Policy. We encourage you to review this page periodically.

13. contact

Questions about this Privacy Policy or requests regarding your personal data: mouhssine@rifaki.me