DATA PROTECTION
Privacy policy
This policy explains what data is used, why it is used, who may access it, how long it is retained and how you can exercise your rights.
Version updated on 8 September 20261. Data controller
The data controller is THE LEADER-CPFOE SARL AU, 226, 4th floor, rue Al Abtal, Yasmina 1, Khouribga, Morocco. Operational contact is available on WhatsApp at +212 6 04 68 22 21.
2. Data processed
- Identity and contact: first and last name, WhatsApp number, email and city.
- Placement profile: age range, current situation, language, declared level, goal, availability and group preference.
- Commercial information: preferred plan, discount request, second language or second family member details where applicable.
- Test data: answers, score, estimated level, active duration, interruptions, paste or drag-and-drop attempts, and written response.
- Administrative data: file status, group, cycles, pedagogical review, payment and supporting records only where those modules are activated.
- Minimum technical data: request and session identifiers, timestamps, security events and limited campaign parameters.
3. Purposes and legal basis
Processing needed to provide a requested service is based on the user-requested pre-contractual steps and, where required, their free, specific and informed consent. Marketing relies on a separate, revocable consent.
- Create, retrieve and follow up a pre-registration request.
- Estimate written level, arrange human review and propose pedagogical placement.
- Form a compatible group, offer a trial session, manage enrolment and provide administrative follow-up.
- Respond to requests, secure the platform, limit misuse and retain a limited operational history.
- Send commercial information only where optional marketing consent has been given.
4. Required and optional fields
Fields marked as required are needed to process the request or secure its recovery. Without them, The Leader cannot create or continue the file. Comments, discount requests and marketing consent are optional. Refusing marketing has no effect on pre-registration, the test or access to offers.
5. Recipients
Access is limited to The Leader’s authorised administrator and, where needed, people responsible for placement or pedagogical review. Trainers only access information required for their role. Technical providers may process data solely to provide, secure or maintain the service under appropriate obligations.
6. Placement test and integrity
Answers and written responses must never be sent to advertising or analytics tools. Paste attempts and interruptions may be logged to support pedagogical review; these signals are not absolute proof of fraud and no final placement decision is based on them alone.
7. Local storage and recovery
A draft and recovery token may be stored in the browser so users do not have to restart. On the same device, this data restores the journey. Recovery on another device requires a secure link or verification when that feature is enabled. Clearing browser data may remove the local copy.
8. Retention periods
The Leader applies the following maximum periods unless a legal obligation, dispute or valid erasure request requires a different period:
| Category | Maximum period |
|---|---|
| Unsubmitted local draft | 30 days after the last activity |
| Pre-registration without enrolment | 12 months after the last exchange or request closure |
| Answers, written response and assessment | 12 months after test closure; if the learner enrols, until 12 months after their final cycle ends |
| Technical and security logs | 12 months |
| Marketing with consent | Until consent is withdrawn, capped at 24 months of inactivity |
| Contractual, payment and accounting records | For the period required by applicable law |
9. Minors
A request for a learner under 18 must be validated by a parent or legal guardian. The form records the representative’s identity, relationship, contact method and explicit consent. The Leader may verify that permission before any enrolment or binding decision. No identity document is requested through the public form.
10. Security
The Leader applies proportionate measures, including restricted administrative access, unpredictable recovery tokens, data minimisation, separate entities, locked submitted writing and limited event logging. No online service can guarantee absolute security.
11. Hosting and international transfers
Technical hosting may involve providers or infrastructure outside Morocco. Before public processing is activated, The Leader must verify hosting locations, govern processors and complete any applicable transfer formalities with the CNDP.
12. Policy updates
A material change will be signposted on the platform. Where a new consent is legally required, it will be requested separately. The version accepted is recorded with the request.
Your rights
Subject to the conditions in Law no. 09-08, you may request:
- access to your personal data;
- rectification or updating;
- erasure or blocking where the request is valid;
- objection to certain processing, particularly marketing;
- withdrawal of consent without affecting prior lawful processing.
Send your request by WhatsApp to +212 6 04 68 22 21 or by post to the registered office, stating the purpose of your request. Reasonable identity verification may be required. The Leader will respond within the time limits required by applicable regulations.
CNDP reference: to be completed before public activation of the relevant forms.Contact The Leader
Postal address : 226, 4e étage, rue Al Abtal, Yasmina 1, Khouribga, Maroc