Privacy Policy
Privacy Policy
Collection of Personal Data
As part of your use of the Sahti platform, we collect the following personal data:
- Identification data: last name, first name, date of birth, gender, address, phone number, email address
- Medical data: medical history, current treatments, allergies, symptoms
- Connection data: IP address, connection logs, browser type
In accordance with the proportionality principle established by loi 09-08 (the Moroccan personal data protection law), we only collect and process the data strictly necessary to fulfil the purposes of the medical teleconsultation service.
This data is collected on the basis of your explicit consent and as part of the performance of the medical teleconsultation services you have requested. Your consent is obtained through a non-pre-ticked checkbox when you register.
Purposes of Processing
The personal data collected is processed for the following purposes:
- Creating and managing your user account
- Organizing and managing medical teleconsultations
- Facilitating communication between you and healthcare professionals
- Improving our services and your user experience
- Complying with our legal and regulatory obligations
Legal Basis for Processing
The processing of your personal data is based on:
- Your explicit consent
- The performance of the medical teleconsultation service contract
- Our legitimate interest in improving our services
- Compliance with our legal obligations regarding health and data protection
Data Retention
Your personal data is kept only for as long as strictly necessary to fulfil the purposes for which it was collected.
Medical data is retained in accordance with the legal provisions applicable to medical records.
Data Recipients
Your personal data is intended for:
- Our administrative team, for the management of your account
- Healthcare professionals, for carrying out teleconsultations
- Our technical subcontractors, who act solely on our instructions and have signed confidentiality agreements
Your data is never sold, rented or transferred to third parties for commercial purposes.
Data Transfers Outside Morocco
If your personal data may be transferred outside Morocco, in particular for technical hosting purposes, we ensure that such transfers are made to countries providing an adequate level of protection or are governed by appropriate safeguards in accordance with loi 09-08 (the Moroccan personal data protection law).
Subcontracting
When we use subcontractors to process your personal data, we ensure that they provide sufficient guarantees regarding the implementation of appropriate technical and organizational measures. Processing by a subcontractor is governed by a contract or legal act binding the subcontractor to Sahti, in accordance with the requirements of loi 09-08.
Data Security
We implement appropriate technical and organizational measures to protect your personal data against any loss, alteration, disclosure or unauthorized access, including:
- Encryption of sensitive data
- Strong authentication for access to our systems
- Strict access controls
- Security and confidentiality training for our staff
- Regular audits of our systems
Rights of Data Subjects
In accordance with loi 09-08 (the Moroccan personal data protection law), you have the following rights regarding your personal data:
- Right of access to your data
- Right to rectification of inaccurate data
- Right to object to processing on legitimate grounds
- Right to restriction of processing
- Right to erasure of your data (within the limits of legal retention obligations)
- Right to data portability
To exercise these rights, you can contact us at the following email address: [dedicated email address] or by post at: [postal address].
Cookies and Similar Technologies
Our site uses cookies it needs to work and, only with your consent, statistics, help chat and ad measurement cookies. The full list, how long they last and how to change your mind are in our Cookie Policy.
Changes to This Privacy Policy
We reserve the right to modify this privacy policy at any time. Any change will be published on this page and, if the changes are significant, we will inform you by email or by a notification on our website.
Contact
For any question regarding this privacy policy or your personal data, you can contact us at:
Complaints
If, after contacting us, you believe that your rights are not being respected, you may lodge a complaint with the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP, the Moroccan data protection authority): www.cndp.ma or by phone at +212 5 37 57 11 24.
Last updated: 21/06/2025