Data controller
The controller of your data is K P Services (SARL), operating the “Capital Parc” real estate agency, registered with the Marrakech Trade Register under no. 20583, whose registered office is at Immeuble 212, 2nd floor, apt 3, Avenue Mohammed V, Résidence Elite, Marrakech, Morocco.
The personal-data processing described below is subject to the declaration formalities required by Law no. 09-08 with the National Commission for the Protection of Personal Data (CNDP). The corresponding evidence may be provided, on request, to any data subject or competent authority.
For any question or to exercise your rights, a dedicated contact is available: contact@capitalparc.ma, via the site's contact form, or by phone on +212 661 76 53 09.
Data we collect
Data you provide via our forms (request, contact, estimate, listing mandate, alert, appointment, conversational assistant): first and last name, phone number, email address, language, and details of your real estate project (property type, city and district sought, budget, number of bedrooms, financing method, buying or renting horizon).
As part of a transaction (mandate, reservation), proof-of-financing documents may be provided (bank pre-approval, proof of funds) under the due-diligence obligations of Law no. 43-05 on the fight against money laundering. We do not collect your ID number via our online forms; an identity document is only requested, if applicable, at an advanced stage and through a secure channel.
We may also receive, from a business introducer or an authorised agent, the contact details of an owner (name, telephone number, email address) together with the description of a property, where that property is offered to us for sale or rent. The person passing them on warrants that the owner authorised them to do so and was informed of that transmission. Those contact details remain internal and are never published; the owner concerned may write to us at any time to access, rectify or delete them.
Technical browsing data collected automatically (IP address, device and browser type, pages viewed) — see our Cookie Policy.
Purposes of processing
Your data is used to: respond to and call you back, present properties matching your project, arrange viewings, send the alerts you requested, follow up on your file and the commercial relationship, meet our legal and accounting obligations, and improve our services and website.
Legal basis and consent
Processing is based, as applicable, on your consent (alerts, marketing, assistant), on the performance of pre-contractual and contractual measures taken at your request, and on compliance with our legal obligations. You may withdraw your consent at any time, without affecting the lawfulness of processing already carried out.
Recipients and sharing
Your data is neither sold nor rented. It is accessible to authorised Capital Parc staff and may be shared: with our technical providers strictly to operate the service (Cloudflare hosting, Supabase database, email delivery, WhatsApp messaging, audience measurement); and, where necessary to complete your project, with the owner-principal of the property concerned, the notary and, where applicable, the bank assessing your financing.
Transfer outside Morocco
Some of our technical providers are established abroad (notably in the United States and the European Union). Data may therefore be hosted or processed outside Morocco, subject to appropriate safeguards and the requirements of Law no. 09-08.
Retention period
Prospect data is kept for up to three (3) years from our last meaningful contact. Transaction-related data is kept for the time needed to perform the contract, then archived in accordance with legal and accounting obligations (up to ten years). After that, it is deleted or anonymised.
Your rights
In accordance with Law no. 09-08, you have rights of access, rectification, objection (including to marketing) and deletion of your data. To exercise them, send your request to contact@capitalparc.ma or via the site's contact form, with proof of identity. We endeavour to respond within thirty (30) days.
If, after contacting us, you believe your rights are not respected, you may refer the matter to the CNDP — National Commission for the Protection of Personal Data (www.cndp.ma).
Data security
We implement reasonable technical and organisational measures to protect your data against unauthorised access, loss, disclosure or alteration: encrypted transport (HTTPS), secure hosting, access restricted to authorised staff only, and storage of supporting documents in a private, non-public space.
As no system is entirely infallible, we cannot guarantee absolute security, but we undertake to react without delay in the event of an incident affecting your data.
“Loubna” conversational assistant
Our site offers a conversational assistant (chat and, if you enable it, voice dialogue). Your exchanges with the assistant are processed to answer your requests and may be retained to improve the service and follow up on your project.
Voice dialogue requires access to your microphone, enabled only with your explicit permission via your browser. Language processing relies on an AI technical provider that may be established outside Morocco (see “Transfer outside Morocco”). A conversation history may be stored locally on your device for your convenience, and cleared by clearing your browser data.
Secure chat and technical security data
Our “Secure chat” messaging service asks you to confirm your mobile phone number using a one-time code sent by SMS. This verification allows us to know who we are talking to, to protect our advisors and clients against identity fraud, and to reach you again if the conversation is interrupted. The code is sent through our technical provider Twilio Inc.
When a conversation is opened and with each message, we record technical data about your connection and device: IP address and its pseudonymised fingerprint, network operator and autonomous system number (ASN), approximate country, region, city and postal code derived from the IP address, time zone, operating system and version, browser and version, device type and model, processor architecture, declared languages, screen resolution and colour depth, number of processor cores, available memory, presence of a touch screen, graphics card model, and a technical fingerprint derived from these elements. We also measure input indicators on the entry form (time to complete, number of keystrokes, typing rhythm, use of paste, presence of mouse or touch events). The content of your keystrokes is never recorded.
The purpose of this processing is strictly the security of the service and the prevention of fraud and abuse: detecting bots and automated submissions, preventing harassment and the creation of multiple accounts under false identities and, where applicable, assembling the technical evidence required to defend our rights or those of our clients before a competent court or authority. This data is not used for advertising or commercial profiling, and is neither sold nor transferred to third parties.
This technical data is retained for twelve (12) months from the date it is recorded, then deleted automatically. It is accessible only to authorised Capital Parc staff, and may be disclosed to a judicial officer, a competent judicial or administrative authority, or our legal counsel, solely in the context of proceedings.
The processing described above is based on your consent, collected through a checkbox that is not pre-ticked before the code is sent, and on our legitimate interest in securing our service. You may exercise your rights of access, rectification and objection at any time under the conditions set out in “Your rights”, by writing to contact@capitalparc.ma. If you would rather not be subject to this processing, you may contact us by telephone, by email or through the website contact form, without using the secure chat.
Cookies and audience measurement
The site uses cookies strictly necessary for its operation (language preference, display currency, access management, favourites, assistant memory), which do not require your consent.
With your consent, we use Google Analytics 4 (provided by Google Ireland Ltd) to measure audience in aggregate, as well as an attribution cookie to identify the channel through which you discovered us. You can manage your preferences and withdraw your consent at any time. For details, see our Cookie Policy.
Marketing and communications
Where you consent (for example by creating an alert or requesting it), we may send you communications about properties or services that may interest you, by email, phone or messaging (including WhatsApp). You may object and unsubscribe at any time, free of charge, by contacting us or via the unsubscribe link where present.
No solely automated decision-making
To better direct the handling of your request, we may assess its priority using decision-support tools. These assessments serve an internal organisational purpose and do not produce any legal or significant decision taken in a solely automated manner about you: a staff member is always behind the actions taken on your file.
Minors' data
Our services are intended for an adult clientele. We do not knowingly collect data about minors. If you believe a minor has provided us with data, contact us so that we can delete it.
Changes to this policy
We may update this policy to reflect legal, technical or service developments. The applicable version is the one published on this page; the date of last update appears above. We encourage you to review it regularly.
Contact us
For any question about this policy or your personal data: K P Services (Capital Parc), Immeuble 212, 2nd floor, apt 3, Avenue Mohammed V, Résidence Elite, Marrakech — contact@capitalparc.ma — +212 661 76 53 09.