1. Controller and contact
Morocco Retirement Readiness is operated by [Legal company name, Estonian registry code, and registered address required before commercial launch].
Privacy requests: privacy@retireinmorocco.com. General support: support@retireinmorocco.com.
2. Data we collect
We collect the planning information you submit, including name, email, age range, household and financial estimates, relocation preferences, broad health or accessibility preferences, assessment results, consent records, transaction status, and basic traffic attribution. We do not request Social Security numbers, passport details, account numbers, card numbers, diagnoses, or medical records.
An unfinished assessment draft is stored temporarily in your browser. It is sent to us only when you submit the assessment.
We also use a random, session-scoped identifier to measure aggregate website visits and calculator progress. Analytics do not include your name, email, health preferences, or financial figures, and we do not use IP-based fingerprinting to identify calculator visitors.
3. Purposes and legal bases
We process ordinary assessment information to provide, secure, and improve the service. Broad health and accessibility preferences are processed only with explicit consent to tailor the assessment. Transaction and accounting information supports contracts and legal obligations. Marketing messages require separate consent.
You may withdraw consent at any time. Withdrawal does not affect earlier lawful processing but may prevent us from retaining or regenerating a personalized assessment that depends on that data.
4. Service providers and transfers
We use providers for hosting, database, authentication, storage, payment processing, transactional email, scheduling, analytics, or error monitoring when enabled. They process only the data needed for their services. Where data is transferred outside the European Economic Area, we rely on applicable adequacy decisions or contractual and organizational safeguards.
5. Retention
Assessment and account data is normally retained for up to 24 months after the last meaningful interaction, unless earlier deletion is requested or continued retention is necessary. Raw pseudonymous analytics events are normally retained for up to 12 months. Marketing records are retained until consent is withdrawn or the address is inactive for 24 months. Transaction and accounting records are retained as required by applicable law, generally up to seven years.
6. Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, portability, or objection, and may withdraw consent. Contact privacy@retireinmorocco.com. We may need to verify your identity before completing a request.
You may also lodge a complaint with the Estonian Data Protection Inspectorate or the supervisory authority where you live or work.
7. Security, children, and changes
We use access controls, encryption in transit, private storage, restricted database access, signed payment webhooks, and monitoring safeguards. No online system is completely risk-free. The service is intended for adults aged 18 or older.
We may update this policy when the service or legal requirements change. Material changes will be identified by a new effective date.