Privacy Policy

I'm Elhoucine Chammakh, a freelancer based in Fès. I personally handle every client I work with. This Privacy Policy explains how I ("I", "me") collect, use, share and protect personal data when you visit my website, request a consultation, or connect your WhatsApp Business account so I can work on it for you. It also explains your rights and how to exercise them.

1. Who I am

I am the person responsible for your personal data (the data controller):

• CHAMMAKH EL HOUCINE, freelancer registered as an auto-entrepreneur
• Tax identifier (IF): 68759431
• Fès, Morocco
• Email: elhoucinechammakh@gmail.com

I process personal data in accordance with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data, and, where it applies to you, the EU General Data Protection Regulation (GDPR).

2. Data I collect

2.1 Data you give me through the consultation form

• First name
• WhatsApp phone number
• Type of business
• Approximate monthly advertising budget on Meta
• Whether a WhatsApp Business number of yours has been banned before
• Your consent to be contacted on WhatsApp

2.2 Data collected automatically on my website

• Technical data such as IP address, browser type, device type and pages visited, processed by my hosting provider and by the Meta Pixel (see Cookies & tracking).
• Whether you watched my video, used only to show the form on the page (not stored).

2.3 Data I receive when you connect WhatsApp Business

If you choose to connect your WhatsApp Business account through my "Connect WhatsApp Business" page, see section 3.

3. Data from Meta, Facebook Login & the WhatsApp Business Platform

My connection page uses Facebook Login for Business and WhatsApp Embedded Signup, provided by Meta Platforms. You log in on Meta's own pages; I never see or store your Facebook password. With your permission, I receive:

• An authorization code that I exchange for an access token allowing me to manage and send messages from the WhatsApp Business account you choose to share (permissions whatsapp_business_management and whatsapp_business_messaging)
• Your WhatsApp Business Account ID, phone number ID, business name and display phone number
• Your Facebook user ID and the business portfolio you selected
• When the service is active: messages sent and received through the connected number, the phone numbers and profile names of the contacts you communicate with, and message delivery statuses

I use data received from Meta only to provide the service you asked for. In particular, I:

• do not sell this data or share it with data brokers;
• do not use it for advertising, profiling or to build user profiles for third parties;
• do not use it for any purpose other than operating, securing and supporting the work I do for you;
• comply with the Meta Platform Terms and the WhatsApp Business policies.

You can remove my access at any time from your Facebook settings (Settings & privacy → Settings → Business integrations) or from Meta Business Settings, and request deletion as described in section 12.

4. How I use your data

• To reply to your consultation request and contact you on WhatsApp, as you agreed on the form.
• To assess whether my free offer fits your business.
• To set up, run and support the work I do on your connected WhatsApp Business account.
• To measure the performance of my advertising on Meta (Meta Pixel).
• To protect my website and work against spam, fraud and abuse.
• To meet my legal and accounting obligations.

5. Legal basis

• Consent: consultation form, WhatsApp contact, connecting your WhatsApp Business account, advertising cookies.
• Performance of a contract (or steps before one): providing the service you requested.
• Legitimate interest: securing my website and preventing spam and abuse.
• Legal obligation: keeping accounting and tax records.

You can withdraw your consent at any time; this does not affect processing already carried out.

6. Sharing & service providers

I do not sell or rent your personal data. I only share it with the tools I need to do the work, which process it on my behalf:

I may also disclose data if required by law, a court order or a competent authority, or to protect my rights and the safety of my clients.

7. International transfers

Some of the tools I use (such as Meta and Cloudflare) process data on servers outside Morocco, including in the European Union and the United States. I only use providers that apply appropriate safeguards to protect personal data.

8. Cookies & tracking

• Meta Pixel (on my landing page): sets cookies such as _fbp to measure visits and the results of my Meta ads. You can control this in your Meta ad preferences or by blocking third-party cookies in your browser.
• Facebook SDK (on my WhatsApp connection page): sets cookies needed for Facebook Login to work.

You can delete or block cookies in your browser settings. Blocking them may prevent Facebook Login from working.

9. How long I keep data

• Consultation requests: up to 24 months after my last contact with you, unless you become a client.
• WhatsApp Business connection data (tokens, account IDs, messages and contacts): as long as your account is connected, then deleted within 30 days after you disconnect or ask me to delete it.
• Accounting records: for the period required by Moroccan law.

10. Security

I protect your data with encrypted connections (HTTPS), restricted access, and by keeping secret keys and access tokens on my servers only, never in your browser. No system is completely secure, but I work to protect your data and will notify you and the competent authorities of any breach where required by law.

11. Your rights

Under Law No. 09-08 (and the GDPR where it applies), you have the right to:

• access the personal data I hold about you;
• correct inaccurate or incomplete data;
• object to processing, including for marketing, at any time;
• request deletion of your data;
• withdraw your consent;
• where the GDPR applies, restrict processing and receive your data in a portable format.

To exercise these rights, email elhoucinechammakh@gmail.com. I reply within 30 days. You can also file a complaint with Morocco's data protection authority, the CNDP (www.cndp.ma), or with your local data protection authority.

12. Data deletion instructions

You can ask me to delete all data I hold about you at any time:

• Send an email to elhoucinechammakh@gmail.com with the subject "Data deletion request", including the phone number and/or the WhatsApp Business account or business name you used with me.
• To remove my access to your Facebook or WhatsApp Business account, go to Facebook Settings & privacy → Settings → Business integrations, select my app (Elhoucine Chammakh) and click Remove, or remove the app from your Meta Business Settings.

I confirm your request by email and delete your data, including data received from Meta, within 30 days, except for records I am legally required to keep.

13. Children

My services are intended for businesses and are not directed at anyone under 18. I do not knowingly collect data from children.

14. Changes to this policy

I may update this policy. The "Last updated" date at the top shows when it last changed. If the changes are significant, I will inform my clients directly.

15. Contact

For any question about this policy or your personal data, contact me directly at elhoucinechammakh@gmail.com.