Privacy policy.

1. Who is responsible for your data

Kolchi In One (“KIO”, “we”), run by Hamza Laasri under Morocco’s auto-entrepreneur status, is responsible for the personal data described here. You can reach us at contact@kolchiinone.com or on WhatsApp +212 688 445 399.

This policy covers kolchiinone.com, the website chat assistant, our newsletter, our WhatsApp conversations and our contacts with prospects and clients. It is written for Moroccan Law 09-08 on the protection of individuals with regard to the processing of personal data.

2. What we collect

• No contact forms: our site has no contact or quote forms. To reach us you write on WhatsApp, call or send an email, and only what you choose to send reaches us.
• Website chat assistant: the messages you write and the contact details you decide to share in the conversation.
• WhatsApp: your number, your name as shown on WhatsApp and the messages you send us.
• Newsletter: your email address and the confirmation of your subscription.
• Visits to the site: pages viewed, approximate location (country or city, derived from your IP address), device, browser and the site that sent you, collected through cookies and Google Analytics.
• Clients: the details needed to run the project and to invoice it.

We do not ask for sensitive data. Please don’t share health, financial or identity document details in the chat or on WhatsApp.

3. Why we use it

• to answer your questions and requests, and to prepare a proposal or a quote;
• to deliver and support the services you ordered;
• to send you our articles by email, if you subscribed;
• to understand how the site is used and improve it;
• to keep the site, the chat and our systems secure and to block spam and abuse;
• to meet our accounting and legal obligations.

We never sell your data. We do not use it to make automatic decisions that have legal effects on you.

4. On what basis

We process your data with your consent, which you give when you write in the chat or on WhatsApp, or confirm your newsletter subscription. We also process it when it is needed to prepare or carry out a contract with you, to meet a legal obligation, or where Law 09-08 otherwise allows it, for example to protect the security of our site.

You can withdraw your consent at any time by writing to contact@kolchiinone.com. This does not affect what was done before.

5. The website chat assistant and AI

• The chat assistant on our site is an AI, not a person. It answers first, and a person from our team follows up.
• To produce its answers, your messages are processed by third-party AI model providers, through our automation tools.
• The conversation and the contact details you share are saved as a lead in KIO CRM, our own CRM, so that our team can reply and follow up.
• AI answers can contain mistakes. Prices and commitments are only confirmed by a person, in writing.
• Please don’t share sensitive information in the chat.

6. WhatsApp

When you write to us on WhatsApp, the conversation goes through WhatsApp, a Meta service, under WhatsApp’s own privacy policy. We keep your number and the conversation in KIO CRM so we can answer and follow up on your request.

7. Newsletter

Our newsletter uses double opt-in: after you enter your email, you confirm it from a message we send you. You then receive one email per new article. You can unsubscribe at any time from our emails or by writing to contact@kolchiinone.com.

8. Cookies and analytics

Cookies are small files stored by your browser. On kolchiinone.com they are used for:

• Running the site: WordPress and Elementor set cookies needed for the site to work, for security and to remember choices such as the language.
• Measuring visits: Google Analytics 4, connected through Google Site Kit, sets cookies that tell us how many people visit, which pages they read and where they come from. We look at this in aggregate, not to identify you.
• Search performance: Google Search Console shows us how the site appears in Google search. It does not place cookies on your device.

You can block or delete cookies in your browser settings, and the site will still work. You can also stop Google Analytics with Google’s opt-out add-on: tools.google.com/dlpage/gaoptout.

9. Who helps us process your data

We share data only with the providers we need, and only for the purposes above:

• Hosting: Hostinger hosts kolchiinone.com. KIO CRM and our automation tools (n8n) run on a server managed by KIO.
• Google: Analytics, Site Kit and Search Console, under Google’s privacy policy.
• Meta: WhatsApp, for our conversations with you.
• AI model providers: to generate the chat assistant’s answers.
• Email tools: to send the newsletter and our replies.
• Authorities: only when the law requires it.

Each provider works under its own terms and security commitments.

10. Transfers outside Morocco

Some of these providers, such as Google, Meta, AI model providers and hosting companies, may store or process data outside Morocco, for example in the European Union or the United States. We choose established providers that commit to protecting data, and we handle these transfers in line with Law 09-08 and the rules of the CNDP, Morocco’s data protection authority.

11. How long we keep it

• Requests, chat conversations and leads: as long as needed to answer and follow up, then deleted or made anonymous.
• Clients: for the length of our work together, and afterwards for the period required by accounting and tax rules.
• Newsletter: until you unsubscribe.
• Analytics: for the period set in our Google Analytics settings.

You can ask us to delete your data earlier, unless the law requires us to keep it.

12. How we protect it

We use encrypted connections (HTTPS), protected logins, limited access for the people who need it, regular updates and backups. No system is perfectly safe, but we take reasonable measures and review them. If an incident were to put your data at risk, we would act quickly and inform you when needed.

13. Your rights under Law 09-08

You have the right to:

• be informed about how your data is used (this page);
• access the data we hold about you;
• correct data that is wrong or incomplete, or ask us to delete it;
• object to the use of your data for legitimate reasons, and to marketing messages at any time, without giving a reason;
• withdraw your consent at any time.

To exercise these rights, write to contact@kolchiinone.com with the subject “Personal data” and tell us what you want. We may ask you to confirm your identity. We answer as quickly as we can, within the time limits set by law.

If you are not satisfied with our answer, you can contact the CNDP (Commission nationale de contrôle de la protection des données à caractère personnel): www.cndp.ma.

14. When you are our client

When you use KIO CRM or an AI agent we built for you, the data of your own customers belongs to you, and you are responsible for it. We process it on your behalf and following your instructions, only to provide the service, and we keep it confidential. You can export it at any time. Please tell your customers how you use their data, for example in your own privacy policy.

15. Children

Our services are meant for businesses and adults. We do not knowingly collect data from children. If you think a child has sent us personal data, write to us and we will delete it.

16. Changes to this policy

We may update this policy, for example when we add a tool or a service. The date at the top shows the latest version. If a change is important, we will make it visible on the site.

17. Contact

For any question about your data: contact@kolchiinone.com or WhatsApp +212 688 445 399. Our other details are on the legal notice and our contact page.

This policy explains our practices in plain language. For the rules that apply to our services, see our terms of service.