Data protection policy

This Data protection policy describes how Lagrichi Digital Solutions protects personal data processed through Maweid from the United Kingdom and how we support business customers (partners) who act as data controllers for their clients. It supplements our Privacy policy and Partner terms. The Data Processing Agreement (DPA) governs processor processing on your instructions.

Lagrichi Digital Solutions is typically: • Data controller for partner account data, Stripe billing metadata, platform security logs, and our own marketing site visitors (see Privacy policy). • Data processor when we store or transmit personal data about your clients, prospects, or staff on your behalf in the CRM or booking flows. You remain responsible for lawful basis, transparency, and client rights as controller in each country where you operate.

We implement appropriate technical and organisational measures, including HTTPS, access controls, server-side secrets, role-based dashboard access, and provider security reviews where practicable. You must protect your login credentials and only grant dashboard access to trusted staff.

We use infrastructure and communications providers to run Maweid. An up-to-date list with roles and typical regions is published at /legal/subprocessors. We require subprocessors to process data only to deliver the Service and to apply contractual confidentiality and security obligations.

Data may be processed in the United Kingdom, EEA, United States, and other countries where providers operate. We use UK GDPR transfer tools (IDTA / UK Addendum to SCCs) or equivalent where required. Partners must also assess transfers under their local law (Morocco Law 09-08, EU GDPR, UAE PDPL, etc.). Our compliance guide summarises common steps.

We will notify affected business customers without undue delay after becoming aware of a personal data breach affecting their data in Maweid, so you can meet your own notification duties. Questions: support@lagrichidigital.com Full processor terms: /legal/dpa