# Privacy Policy

> How mohammedteto.com handles personal data: what is collected, on what basis, how analytics consent works, who receives data and how to exercise your rights.

- Page: https://mohammedteto.com/privacy-policy/
- Language: en — French version: https://mohammedteto.com/politique-confidentialite/
- Author: Mohammed Teto (https://mohammedteto.com/#person)
- Published: 2026-10-07
- Updated: 2026-10-04

This policy explains what personal data this site processes, why, and what you can do about it. It applies to the pages of mohammedteto.com published in English and French.

Last updated: 3 October 2026. This is the English version of the site's privacy policy. A [French version](https://mohammedteto.com/politique-confidentialite/) is also available. Data processing on this site is governed by Moroccan Law 09-08 on the protection of individuals with regard to the processing of personal data.

<a id="controller"></a>

## 1. Data controller

Mohammed Teto, independent consultant, Casablanca, Morocco.

Contact for any question about your data: [contact@mohammedteto.com](mailto:contact@mohammedteto.com).

<a id="data-collected"></a>

## 2. Data collected

| Data | Source | Purpose | Retention |
|---|---|---|---|
| Browsing data (anonymized IP address, pages visited, duration) | Google Analytics 4, only if you accept analytics | Audience statistics | 14 months |
| Clicks and conversion events | Google Tag Manager, only if you accept analytics | Improving the site | 14 months |
| Name, email address, availability, and what you write in the notes field (the booking page invites you to indicate your market, an investment range and the level of confidentiality expected) | Calendly, when you book a conversation | Organizing and preparing appointments | Until cancellation |
| Email address and the content of your message | Email you send | Answering your request | 3 years |

There is no contact form on this site. Please do not send sensitive personal data by email.

<a id="legal-basis"></a>

## 3. Legal basis

- **Consent:** analytics cookies and measurement (Google Analytics 4 through Google Tag Manager). You can withdraw it at any time.
- **Legitimate interest:** security of the site and prevention of abuse.
- **Steps taken at your request before a contract, and performance of a contract:** data you provide through Calendly or by email to arrange and hold a conversation.

<a id="cookies"></a>

## 4. Cookies and local storage

No analytics script is loaded until you accept. If you refuse, or do nothing, Google Tag Manager and Google Analytics are not requested by your browser.

| Name | Set by | Type | Duration |
|---|---|---|---|
| `cookieConsent` (local storage, not a cookie) | This site | Records your choice: accepted or refused | Until you clear your browser storage |
| `_ga`, `_ga_*` | Google Analytics, after acceptance | Analytics | 2 years |
| `_gcl_au` | Google Tag Manager, after acceptance | Analytics | 90 days |
| `__calendly_*` | Calendly, on Calendly's own pages | Functional | Session |

You can change or withdraw your choice at any time with the **Cookie settings** link at the bottom of every page. Withdrawing consent stops further measurement and removes the analytics cookies set for this site.

The fonts used on these pages are served from this site. No request is made to a third-party font service.

<a id="recipients"></a>

## 5. Recipients and international transfers

Your data is never sold. It may be processed by:

- **Google LLC** (Analytics, Tag Manager), only if you accept analytics: [policies.google.com](https://policies.google.com/privacy)
- **Calendly LLC** (scheduling), when you book a conversation: [calendly.com/privacy](https://calendly.com/privacy)

These providers are established in the United States, so your data may be transferred outside your country. These transfers are framed by standard contractual clauses.

<a id="rights"></a>

## 6. Your rights

Under Law 09-08, you have the right to:

- **access** your data and obtain a copy;
- **rectify** inaccurate data;
- **delete** your data;
- **object** to processing for prospecting purposes;
- **withdraw your consent** to analytics at any time.

To exercise these rights, write to [contact@mohammedteto.com](mailto:contact@mohammedteto.com). You will receive an answer within 30 days.

If a complaint is not resolved, you can refer it to the CNDP (Commission Nationale de contrôle de la protection des Données à caractère Personnel), the Moroccan data-protection authority.

If you live in the European Union, the United Kingdom or another jurisdiction with its own data-protection law, you may have additional rights under that law. You can use the same contact address to exercise them.

<a id="security"></a>

## 7. Security

The site is served exclusively over HTTPS. No sensitive data is stored on the server that hosts these pages.

<a id="changes"></a>

## 8. Changes to this policy

This policy may be updated. The date of the last update is shown at the top of this page. If a substantial change is made, a notice will be displayed on the site.