Privacy Policy

Collection of Personal Data

As part of your use of the Sahti platform, we collect the following personal data:

• Identification data: last name, first name, date of birth, gender, address, phone number, email address
• Medical data: medical history, current treatments, allergies, symptoms
• Connection data: IP address, connection logs, browser type

In accordance with the proportionality principle established by loi 09-08 (the Moroccan personal data protection law), we only collect and process the data strictly necessary to fulfil the purposes of the medical teleconsultation service.

This data is collected on the basis of your explicit consent and as part of the performance of the medical teleconsultation services you have requested. Your consent is obtained through a non-pre-ticked checkbox when you register.

Purposes of Processing

The personal data collected is processed for the following purposes:

• Creating and managing your user account
• Organizing and managing medical teleconsultations
• Facilitating communication between you and healthcare professionals
• Improving our services and your user experience
• Complying with our legal and regulatory obligations

Legal Basis for Processing

The processing of your personal data is based on:

• Your explicit consent
• The performance of the medical teleconsultation service contract
• Our legitimate interest in improving our services
• Compliance with our legal obligations regarding health and data protection

Data Retention

Your personal data is kept only for as long as strictly necessary to fulfil the purposes for which it was collected.

Medical data is retained in accordance with the legal provisions applicable to medical records.

Data Recipients

Your personal data is intended for:

• Our administrative team, for the management of your account
• Healthcare professionals, for carrying out teleconsultations
• Our technical subcontractors, who act solely on our instructions and have signed confidentiality agreements

Your data is never sold, rented or transferred to third parties for commercial purposes.

Data Transfers Outside Morocco

If your personal data may be transferred outside Morocco, in particular for technical hosting purposes, we ensure that such transfers are made to countries providing an adequate level of protection or are governed by appropriate safeguards in accordance with loi 09-08 (the Moroccan personal data protection law).

Subcontracting

When we use subcontractors to process your personal data, we ensure that they provide sufficient guarantees regarding the implementation of appropriate technical and organizational measures. Processing by a subcontractor is governed by a contract or legal act binding the subcontractor to Sahti, in accordance with the requirements of loi 09-08.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against any loss, alteration, disclosure or unauthorized access, including:

• Encryption of sensitive data
• Strong authentication for access to our systems
• Strict access controls
• Security and confidentiality training for our staff
• Regular audits of our systems

Rights of Data Subjects

In accordance with loi 09-08 (the Moroccan personal data protection law), you have the following rights regarding your personal data:

• Right of access to your data
• Right to rectification of inaccurate data
• Right to object to processing on legitimate grounds
• Right to restriction of processing
• Right to erasure of your data (within the limits of legal retention obligations)
• Right to data portability

To exercise these rights, you can contact us at the following email address: [dedicated email address] or by post at: [postal address].

Cookies and Similar Technologies

Our website uses cookies and similar technologies to improve your user experience, analyze our traffic and personalize content. For more information about the cookies we use and how to manage them, please see our Cookie Policy available on our website.

Changes to This Privacy Policy

We reserve the right to modify this privacy policy at any time. Any change will be published on this page and, if the changes are significant, we will inform you by email or by a notification on our website.

Contact

For any question regarding this privacy policy or your personal data, you can contact us at:

Complaints

If, after contacting us, you believe that your rights are not being respected, you may lodge a complaint with the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP, the Moroccan data protection authority): www.cndp.ma or by phone at +212 5 37 57 11 24.

Last updated: 21/06/2025