Privacy Policy
Contents
- 1. Introduction
- 2. Data Processing Role
- 3. Information We Collect
- 4. How We Use Your Information
- 5. Sub-Processors
- 6. Third-Party Analytics & Security Services
- 7. Data Security
- 8. Data Retention
- 9. Jurisdiction & Server Location
- 10. Your Legal Rights
- 11. Cookies and Tracking
- 12. Changes to This Privacy Policy
- 13. Contact Us
1. Introduction
This Privacy Policy ("Policy") constitutes a binding data processing agreement between the subscribing business entity ("User," "Data Controller," or "You") and HoopoTrack ("Data Processor," "We," "Us," or "the Platform"). This Policy governs the collection, processing, storage, and transfer of personal data in connection with the use of the HoopoTrack platform. By accessing or using the Platform, You acknowledge that You have read, understood, and agree to the terms set forth herein.
2. Data Processing Role
HoopoTrack operates solely as a Data Processor with respect to the personal data of end-customers entered into the Platform by the User. The roles and responsibilities are defined as follows:
The User (the repair shop or business entity) acts as the Data Controller. The User determines the purposes and means of processing end-customer personal data and is solely responsible for ensuring that all data submitted to the Platform has been collected lawfully and with appropriate consent.
HoopoTrack acts as the Data Processor. HoopoTrack processes end-customer personal data exclusively on behalf of, and in accordance with the documented instructions of, the Data Controller. HoopoTrack shall not process personal data for any purpose other than the delivery of the agreed-upon services.
The User warrants and guarantees that they have obtained all required legal consents from end-customers prior to entering any Personally Identifiable Information (PII), including but not limited to phone numbers, names, and device details, into the HoopoTrack platform.
3. Information We Collect
In the course of providing services, HoopoTrack collects and processes the following categories of personal data:
-
Identity Data: full legal name, business name, and username of the User.
-
Contact Data: email address, telephone number, and business address of the User.
-
Technical Data: IP address, browser type and version, device identifiers, operating system, and access timestamps.
-
Usage Data: records of Platform interactions, features accessed, pages visited, and session duration.
-
Communication Preferences: the User's elected preferences regarding receipt of service notifications and updates.
-
Service Data: repair tickets, service status information, tracking page data, and end-customer PII submitted by the User.
4. How We Use Your Information
Personal data is processed strictly for the following lawful purposes:
-
Provisioning and activation of User accounts
-
Delivery, operation, and maintenance of Platform services
-
Communication regarding account matters, technical support, and service notifications
-
Platform improvement, feature development, and performance optimization
-
Provision of relevant service recommendations based on usage patterns
-
Ensuring the security and integrity of service tracking and communication channels
-
Aggregated analytics for system performance monitoring and capacity planning
5. Sub-Processors
HoopoTrack engages the following sub-processors to deliver its services. The User acknowledges and consents to the engagement of these sub-processors for the processing of personal data:
Meta Platforms, Inc. (WhatsApp Business API)
Provides the WhatsApp Business messaging infrastructure used for delivering transactional notifications to end-customers. Data processed includes end-customer phone numbers and message content.
Email & SMS Gateway Provider
Provides email and SMS delivery infrastructure for transactional notifications. Data processed includes end-customer contact information and notification content.
Cloud Server Host
Provides the cloud computing infrastructure on which the HoopoTrack platform and all associated data are hosted and processed.
HoopoTrack shall notify the User of any material changes to the list of sub-processors with reasonable advance notice. The User may object to the appointment of a new sub-processor by providing written notice within fifteen (15) days of notification.
6. Third-Party Analytics & Security Services
HoopoTrack integrates the following third-party analytics and security services. The User acknowledges and consents to the data processing activities described herein:
Google Analytics
HoopoTrack utilizes Google Analytics for aggregated usage analytics and platform performance monitoring. Data collected may be transferred to and processed on servers located in the United States, subject to Google's data processing terms and applicable safeguards.
Users may opt out of Google Analytics data collection by installing the Google Analytics Opt-out Browser Add-on.
Microsoft Clarity
HoopoTrack uses Microsoft Clarity for behavioral analytics, including heatmaps and session replays, to identify usability issues and improve the user experience. By using the Platform, the User consents to the collection and processing of interaction data by Microsoft in accordance with Microsoft's Privacy Statement.
Google reCAPTCHA
HoopoTrack employs Google reCAPTCHA to prevent automated abuse. This service may process IP addresses and behavioral signals. Use of the Platform constitutes acceptance of Google's Privacy Policy and Terms of Service.
7. Data Security
HoopoTrack implements appropriate technical and organizational security measures to protect personal data against unauthorized access, accidental loss, destruction, or alteration. These measures include, but are not limited to, encryption of data in transit and at rest, role-based access controls, regular security audits, and secure development practices.
Access to service tracking pages may be further restricted through PIN protection, which the User is responsible for configuring. HoopoTrack ensures that all personnel with access to personal data are bound by appropriate confidentiality obligations.
8. Data Retention
HoopoTrack applies the following strict data retention periods:
-
End-customer data associated with service tickets is retained for ninety (90) days after ticket closure, after which it is permanently and irreversibly deleted from all active systems.
-
User account data is retained for the duration of the active subscription. Upon account termination, account data is deleted within thirty (30) days, except where retention is required by applicable law.
-
WhatsApp, Email, and SMS communication logs are retained for ninety (90) days after the associated service ticket is closed.
-
System access logs and technical data are retained for a maximum of twelve (12) months for security monitoring and compliance purposes.
-
Backup copies of data may persist for up to thirty (30) additional days following deletion from active systems to allow for disaster recovery processes.
Upon expiration of the applicable retention period, all personal data is securely deleted or anonymized in accordance with industry-standard data destruction protocols.
9. Jurisdiction & Server Location
The HoopoTrack platform and all associated data are hosted on servers physically located in the European Union (EU).
All data processing activities conducted by HoopoTrack comply with Moroccan Law 09-08 relative to the protection of individuals with regard to the processing of personal data, as administered by the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP).
Where personal data is transferred to sub-processors or third-party services located outside the Kingdom of Morocco, HoopoTrack ensures that appropriate safeguards are in place, including standard contractual clauses or equivalent mechanisms approved under Moroccan law.
10. Your Legal Rights
Under applicable data protection legislation, including Moroccan Law 09-08, the User and their end-customers are entitled to the following rights:
To exercise any of these rights, please submit a written request to the contact information provided in Section 13 below. HoopoTrack shall respond to all valid requests within thirty (30) days.
12. Changes to This Privacy Policy
HoopoTrack reserves the right to amend this Privacy Policy at any time. Material changes shall be communicated to Users via email or prominent notice on the Platform, and the "Last updated" date shall be revised accordingly.
Continued use of the Platform following the publication of any amendments constitutes the User's acceptance of the revised Policy. Users are advised to review this Policy periodically.
13. Contact Us
For any inquiries, data subject requests, or communications regarding this Privacy Policy, please contact us at: